Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
File:                     55a4b51a-6d67-315f-a016-1c040d115980.roa (raw, json)
Hash identifier:          QKtsn8AOTp1/xIqo7Ukc7J/1I8oPeyJ+cDDaa+WN5gQ=
Subject key identifier:   00:D6:AD:0D:34:D2:5A:13:4D:B8:BE:B3:F7:A0:08:4C:1F:79:41:79
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F432858481F65342A6B12A07455716400
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     21693
IP address blocks:        192.234.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:34:2a:6b:12:a0:74:55:71:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=d97c0efe-2a3e-4d04-bade-b01a67e8726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:77:90:41:2d:8b:b1:fc:ef:7c:6e:44:f3:
                    9a:e7:f8:a3:ba:2c:1c:69:e7:20:6f:44:f1:68:c4:
                    eb:b7:a4:aa:05:91:37:98:71:85:57:e3:66:10:f8:
                    68:88:cd:83:66:57:57:87:e7:e4:55:46:3c:bc:ea:
                    43:05:3d:46:e4:5d:72:b8:6c:21:95:96:6a:31:e0:
                    8d:9d:a3:a2:be:a0:dc:59:c2:b7:c4:ba:3a:dd:7b:
                    fd:8b:53:6b:c4:ab:c7:7b:83:4e:9b:c0:2f:3d:05:
                    6b:58:3f:69:9a:f6:c8:1b:d4:ae:6e:a7:30:df:37:
                    9f:ca:44:47:f6:f5:86:c0:af:2f:5e:27:97:b5:3a:
                    42:b9:ed:5c:f3:53:e3:67:10:0c:91:96:ba:85:37:
                    e3:31:5f:0e:3b:44:ca:a2:09:ff:ce:ca:fc:fe:39:
                    fd:e2:a9:9d:4d:34:f5:c3:2e:e3:cb:10:57:d2:d2:
                    3a:11:e4:e6:81:bb:52:d1:1a:52:4f:8b:28:a9:1a:
                    57:a0:9e:7f:40:0d:da:8d:3f:e3:83:87:e0:33:fd:
                    5d:3e:84:52:6d:e6:e3:ca:92:dc:3e:0f:0f:db:88:
                    ec:8c:c3:db:c5:de:a4:95:2c:7a:66:8f:e2:da:7c:
                    c5:03:4d:4d:03:90:3c:b2:00:b2:36:15:2a:ee:22:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D6:AD:0D:34:D2:5A:13:4D:B8:BE:B3:F7:A0:08:4C:1F:79:41:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:d0:e5:65:dc:c4:58:71:2e:82:81:3b:a9:48:ad:5b:df:
         48:76:e5:a2:b2:aa:6c:81:27:4d:a8:39:8c:1c:04:d3:31:4b:
         8e:44:97:85:ab:63:06:d2:3d:fa:27:15:c9:f3:e0:30:14:bc:
         27:52:e7:d2:a7:ed:3b:d9:09:3a:54:95:0e:46:8d:2e:1f:20:
         77:6f:2e:04:64:44:30:54:b3:6c:72:d2:e8:e6:8e:18:e4:6f:
         a6:e5:ed:7e:ca:41:26:c2:eb:48:4c:5d:17:d5:3c:ea:f8:b4:
         9c:7b:d7:ba:45:55:a1:81:5a:61:92:60:1e:75:33:7d:f0:20:
         d7:dd:49:a9:2d:06:f4:da:17:3d:8d:f1:ce:e0:1a:42:d5:a7:
         d7:c4:9e:f5:70:75:23:fd:69:7f:d7:f2:a2:66:e3:5e:c2:b8:
         1a:8a:e9:01:bc:3a:9d:8c:3f:fa:5f:0b:41:98:e6:00:4e:fb:
         0a:68:76:64:bd:e0:8f:1d:32:3b:e7:28:40:f9:75:8f:68:ff:
         ee:55:23:5b:6e:de:8b:0f:88:e3:dd:85:c1:7e:76:4f:18:ab:
         d7:d0:45:a3:e9:51:5c:d3:c9:14:c1:fc:2d:84:73:3f:40:c4:
         fd:56:0f:fc:7d:61:86:04:87:a4:64:48:e4:ef:ce:46:91:00:
         58:6b:a0:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTQqaxKgdFVxZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk4MWY2YjgtYzMyMy00MTFkLWI2YjgtMDNiYjQ0ZDJh
ZGIxMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
ZDk3YzBlZmUtMmEzZS00ZDA0LWJhZGUtYjAxYTY3ZTg3MjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8N3kEEti7H873xuRPOa5/ijuiwcaecgb0Tx
aMTrt6SqBZE3mHGFV+NmEPhoiM2DZldXh+fkVUY8vOpDBT1G5F1yuGwhlZZqMeCN
naOivqDcWcK3xLo63Xv9i1NrxKvHe4NOm8AvPQVrWD9pmvbIG9Subqcw3zefykRH
9vWGwK8vXieXtTpCue1c81PjZxAMkZa6hTfjMV8OO0TKogn/zsr8/jn94qmdTTT1
wy7jyxBX0tI6EeTmgbtS0RpST4soqRpXoJ5/QA3ajT/jg4fgM/1dPoRSbebjypLc
Pg8P24jsjMPbxd6klSx6Zo/i2nzFA01NA5A8sgCyNhUq7iKSBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADWrQ000loTTbi+s/egCEwfeUF5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTgx
ZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2JiNDRkMmFkYjEvNTVhNGI1MWEtNmQ2Ny0z
MTVmLWEwMTYtMWMwNDBkMTE1OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk4MWY2YjgtYzMyMy00MTFkLWI2
YjgtMDNiYjQ0ZDJhZGIxLzM5ODFmNmI4LWMzMjMtNDExZC1iNmI4LTAzYmI0NGQy
YWRiMS5jcmwwHwYDVR0jBBgwFoAUZcFvpzmgevfeykEi3I5W4/e8dL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zOTgxZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2Ji
NDRkMmFkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOqHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB7g0OVl3MRYcS6CgTupSK1b30h25aKyqmyBJ02oOYwcBNMxS45El4Wr
YwbSPfonFcnz4DAUvCdS59Kn7TvZCTpUlQ5GjS4fIHdvLgRkRDBUs2xy0ujmjhjk
b6bl7X7KQSbC60hMXRfVPOr4tJx717pFVaGBWmGSYB51M33wINfdSaktBvTaFz2N
8c7gGkLVp9fEnvVwdSP9aX/X8qJm417CuBqK6QG8Op2MP/pfC0GY5gBO+wpodmS9
4I8dMjvnKED5dY9o/+5VI1tu3osPiOPdhcF+dk8Yq9fQRaPpUVzTyRTB/C2Ecz9A
xP1WD/x9YYYEh6RkSOTvzkaRAFhroO0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:16 2025 by rpki-client