Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
File:                     f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa (raw, json)
Hash identifier:          z7p/KHcO4rj9fY3Kc1p5jjblwD7KkfqgBMlFI6XLE3A=
Subject key identifier:   01:75:9B:35:96:DE:2C:20:0B:E3:0A:E5:0E:BB:49:BD:7C:BE:49:D0
Certificate issuer:       /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial:       010D0C9F43285848143A7B8F4DCC822C55D34300
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     32098
IP address blocks:        199.19.100.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7b:8f:4d:cc:82:2c:55:d3:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=35045890-d4f5-4f16-b0cc-3c8b322e726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0c:df:c1:95:91:24:9f:26:a3:a1:08:7b:2c:
                    a8:e8:d9:e0:14:9c:61:0a:25:6e:88:84:e1:61:f0:
                    ad:b5:17:0b:8e:90:d9:62:0a:80:54:8a:35:35:51:
                    c0:b9:cc:38:a2:d6:8e:57:17:f5:0a:c3:a4:99:da:
                    3c:9c:69:6e:9f:23:16:24:81:67:62:d5:79:9a:d3:
                    ab:2b:cb:a5:0b:6d:89:52:3d:97:4e:dc:b2:37:ff:
                    99:db:83:5f:9b:fc:81:53:f8:1a:66:64:f4:ed:f2:
                    2b:35:23:2d:42:7a:35:96:6a:85:be:7a:f6:71:9e:
                    6b:31:02:13:04:a3:b9:1a:0e:09:5f:04:ff:00:12:
                    57:92:fe:3e:89:e2:0b:4a:b2:03:6b:4d:47:a6:66:
                    71:45:d5:ec:8b:f6:75:de:c2:7a:b6:3d:cc:f3:df:
                    50:ce:ca:e1:db:28:a9:74:0f:1e:94:1d:ff:47:60:
                    22:c0:d9:a2:d2:6a:9f:68:77:27:b0:77:9e:61:f9:
                    ad:b7:c0:45:15:e5:be:f1:73:42:0e:9d:e1:ff:84:
                    78:ff:de:c9:71:ef:9f:c2:23:53:5c:98:9f:44:6c:
                    5f:49:3d:15:ea:2c:95:e0:a6:87:60:47:82:a3:50:
                    67:57:fe:c5:7d:32:ea:29:44:14:5f:ad:70:05:b0:
                    fb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:9B:35:96:DE:2C:20:0B:E3:0A:E5:0E:BB:49:BD:7C:BE:49:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:19:ba:1f:74:e8:7b:69:8c:7a:6e:8f:2e:29:52:93:08:b9:
         49:d5:3c:7e:ff:42:6b:a1:1d:92:84:2f:0f:ca:c2:87:b9:d8:
         e2:45:fa:83:8d:fc:52:95:17:07:eb:9d:6e:44:ee:22:c6:e7:
         53:5d:8e:df:9b:80:86:06:b9:d4:ed:a8:cf:e4:b8:d4:6c:21:
         22:ab:fd:5d:2e:21:91:83:5d:91:f9:cd:0b:89:4b:9d:37:b7:
         d5:04:7c:34:94:49:54:32:04:1e:82:e1:62:b4:76:fd:61:11:
         c2:6d:37:ac:d4:1c:8f:c8:5d:06:4a:83:42:ca:b4:f2:05:d5:
         53:d6:e9:13:8f:68:df:8a:f3:c4:c9:51:1c:b2:84:0e:26:a6:
         e4:a6:54:55:37:19:b6:63:19:f8:85:24:1b:90:4e:4b:75:9a:
         4c:a1:09:1a:2c:5a:30:40:1e:52:7d:f5:52:6b:93:f2:71:dd:
         50:34:f7:ef:49:3f:97:f8:85:a7:26:93:6b:c7:b0:5e:e3:0e:
         e8:ef:2c:7a:e2:93:09:b0:c2:7a:7a:24:c0:2c:24:53:9f:99:
         30:27:c9:ac:35:00:41:61:83:4b:52:c3:f0:7b:52:dd:fb:e2:
         4c:ad:ac:56:05:34:38:5a:e4:29:df:56:11:07:82:7e:f8:fe:
         f2:cf:2d:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOnuPTcyCLFXTQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA4NWZhNzAtMzEyYy00Nzg2LWI1ODctYmRiNWZjODdj
MzZlMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MzUwNDU4OTAtZDRmNS00ZjE2LWIwY2MtM2M4YjMyMmU3MjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wzfwZWRJJ8mo6EIeyyo6NngFJxhCiVuiITh
YfCttRcLjpDZYgqAVIo1NVHAucw4otaOVxf1CsOkmdo8nGlunyMWJIFnYtV5mtOr
K8ulC22JUj2XTtyyN/+Z24Nfm/yBU/gaZmT07fIrNSMtQno1lmqFvnr2cZ5rMQIT
BKO5Gg4JXwT/ABJXkv4+ieILSrIDa01HpmZxRdXsi/Z13sJ6tj3M899Qzsrh2yip
dA8elB3/R2AiwNmi0mqfaHcnsHeeYfmtt8BFFeW+8XNCDp3h/4R4/97Jce+fwiNT
XJifRGxfST0V6iyV4KaHYEeCo1BnV/7FfTLqKUQUX61wBbD7vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAF1mzWW3iwgC+MK5Q67Sb18vknQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1
ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1ZmM4N2MzNmUvZjQwMThlMzUtZjgwZS0z
YjZhLWE0M2YtNTFmOGI5N2Y0NDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTA4NWZhNzAtMzEyYy00Nzg2LWI1
ODctYmRiNWZjODdjMzZlL2UwODVmYTcwLTMxMmMtNDc4Ni1iNTg3LWJkYjVmYzg3
YzM2ZS5jcmwwHwYDVR0jBBgwFoAU+wFZJiVq4yf4fvzRnFfiezQbWG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1
ZmM4N2MzNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxNkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEZuh906HtpjHpujy4pUpMIuUnVPH7/QmuhHZKELw/Kwoe52OJF+oON
/FKVFwfrnW5E7iLG51Ndjt+bgIYGudTtqM/kuNRsISKr/V0uIZGDXZH5zQuJS503
t9UEfDSUSVQyBB6C4WK0dv1hEcJtN6zUHI/IXQZKg0LKtPIF1VPW6ROPaN+K88TJ
URyyhA4mpuSmVFU3GbZjGfiFJBuQTkt1mkyhCRosWjBAHlJ99VJrk/Jx3VA09+9J
P5f4hacmk2vHsF7jDujvLHrikwmwwnp6JMAsJFOfmTAnyaw1AEFhg0tSw/B7Ut37
4kytrFYFNDha5CnfVhEHgn74/vLPLcc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:19:21 2025 by rpki-client