Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bde60255-3067-31d9-ad0f-bdde0e359a8a.roa
File:                     bde60255-3067-31d9-ad0f-bdde0e359a8a.roa (raw, json)
Hash identifier:          Ax1Rvnb4ipb/c/Gts4ntbBqP2Q7Rsq14RuzP/1rdAJc=
Subject key identifier:   BC:E2:F2:A9:0A:05:C0:52:72:1B:4A:43:7D:42:4A:AD:F9:CF:D7:F1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847F584ED1D16FEDA4383C5FD20
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bde60255-3067-31d9-ad0f-bdde0e359a8a.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     7018
IP address blocks:        166.88.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:ed:1d:16:fe:da:43:83:c5:fd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=ba158af4-a68e-408b-b833-8aecbc8d709f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:ae:55:f6:be:40:f4:bb:99:8f:41:2d:84:
                    15:ea:3a:53:ee:4b:ac:44:0d:85:71:0e:f4:62:7a:
                    4e:6b:35:fe:05:40:6c:bd:ef:95:c5:80:90:36:3c:
                    aa:3e:f7:11:bc:c1:46:aa:61:ef:2f:67:76:db:0d:
                    80:28:5e:91:35:37:e5:67:87:98:bd:27:22:bd:37:
                    b4:7b:b4:64:46:2e:f3:80:3a:12:56:3b:d3:89:48:
                    cd:26:2d:a7:bc:6e:7d:14:ec:23:31:5e:3b:eb:36:
                    5c:70:bc:9c:90:44:ed:17:c2:be:c5:d3:c3:57:62:
                    cb:f6:fa:1b:0c:42:25:ac:d4:4f:73:66:87:3f:1b:
                    bd:bb:ad:e8:c5:37:01:f7:45:66:a5:08:31:a3:0c:
                    99:51:7b:59:f1:c1:a1:fe:f4:8d:8e:c8:09:36:2b:
                    5d:ff:2e:cf:91:90:6c:99:b0:d8:a0:f2:a8:45:67:
                    1d:a1:fa:91:aa:36:c8:00:85:81:cc:23:b8:68:d9:
                    61:ae:0d:77:9d:f0:e5:c8:78:99:5c:f3:b0:57:b3:
                    6e:66:eb:d3:0e:9b:0a:8e:84:83:7a:31:ed:7f:8e:
                    be:d6:d4:12:a1:51:44:39:a6:7d:dd:92:4a:b4:a0:
                    73:2d:29:2d:8c:17:f0:b2:27:d6:cc:ea:1d:5f:76:
                    88:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E2:F2:A9:0A:05:C0:52:72:1B:4A:43:7D:42:4A:AD:F9:CF:D7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bde60255-3067-31d9-ad0f-bdde0e359a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:5d:76:33:b2:d3:aa:1e:47:42:01:33:a1:af:ea:52:81:
         ad:5c:a8:eb:56:3e:95:04:2c:d8:71:89:00:22:ca:bb:ab:aa:
         7d:23:d4:70:f8:55:fe:12:ab:32:c8:01:85:17:7c:ca:cf:13:
         0f:fd:37:2a:b7:eb:ac:91:d1:3a:3a:d6:50:82:e9:3d:13:25:
         e9:ce:56:7b:e2:6a:09:09:c6:4f:91:94:ac:e8:d7:e5:73:db:
         8d:98:17:3a:f8:ac:27:5a:a4:b6:bb:20:0e:e1:6a:63:db:63:
         89:75:78:86:f7:5c:ad:d3:0a:c7:f2:0c:5d:8a:d1:1b:19:a0:
         87:e1:2f:cb:43:20:cb:e4:b5:52:16:f3:93:ff:ef:75:3b:1a:
         dd:98:5c:e2:74:ab:d9:a2:98:0e:27:da:45:23:eb:81:4e:3b:
         f4:a4:8c:62:ee:70:6c:d1:48:79:46:c5:0a:95:f6:4e:78:87:
         11:4f:e2:cb:0e:8c:d0:c1:fc:fe:8e:25:ca:08:c1:45:7f:98:
         e5:c1:c0:45:c8:bb:2f:db:66:f8:63:86:5a:98:24:7f:6a:4b:
         d6:f1:2c:5a:2a:ac:95:61:dd:1d:33:70:12:6f:13:2e:b6:19:
         60:c9:84:40:cc:f4:a6:dc:f7:dd:ba:4e:45:03:87:3a:94:33:
         fd:25:a5:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf1hO0dFv7aQ4PF/SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk
YmExNThhZjQtYTY4ZS00MDhiLWI4MzMtOGFlY2JjOGQ3MDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsryuVfa+QPS7mY9BLYQV6jpT7kusRA2FcQ70
YnpOazX+BUBsve+VxYCQNjyqPvcRvMFGqmHvL2d22w2AKF6RNTflZ4eYvScivTe0
e7RkRi7zgDoSVjvTiUjNJi2nvG59FOwjMV476zZccLyckETtF8K+xdPDV2LL9vob
DEIlrNRPc2aHPxu9u63oxTcB90VmpQgxowyZUXtZ8cGh/vSNjsgJNitd/y7PkZBs
mbDYoPKoRWcdofqRqjbIAIWBzCO4aNlhrg13nfDlyHiZXPOwV7NuZuvTDpsKjoSD
ejHtf46+1tQSoVFEOaZ93ZJKtKBzLSktjBfwsifWzOodX3aIFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLzi8qkKBcBSchtKQ31CSq35z9fxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmRlNjAyNTUtMzA2Ny0z
MWQ5LWFkMGYtYmRkZTBlMzU5YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIiMXXYzstOqHkdCATOhr+pSga1cqOtWPpUELNhxiQAiyrurqn0j1HD4
Vf4SqzLIAYUXfMrPEw/9Nyq366yR0To61lCC6T0TJenOVnviagkJxk+RlKzo1+Vz
242YFzr4rCdapLa7IA7hamPbY4l1eIb3XK3TCsfyDF2K0RsZoIfhL8tDIMvktVIW
85P/73U7Gt2YXOJ0q9mimA4n2kUj64FOO/SkjGLucGzRSHlGxQqV9k54hxFP4ssO
jNDB/P6OJcoIwUV/mOXBwEXIuy/bZvhjhlqYJH9qS9bxLFoqrJVh3R0zcBJvEy62
GWDJhEDM9Kbc9926TkUDhzqUM/0lpWU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:05 2025 by rpki-client