Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/d1c8e9a3-24cf-3529-a567-e444eb557798.roa
File:                     d1c8e9a3-24cf-3529-a567-e444eb557798.roa (raw, json)
Hash identifier:          arlrkPE0xm8SbAsrr8PBAF6V+xJzjxe3jy3rty7kPww=
Subject key identifier:   05:19:F5:43:E0:66:FB:D6:C6:3A:81:C7:CC:05:63:0A:0C:46:A3:AB
Certificate issuer:       /CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Certificate serial:       010D0C9F4328584817CC69ADCEDC5F322AA89260
Authority key identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/d1c8e9a3-24cf-3529-a567-e444eb557798.roa
Signing time:             Wed 04 Dec 2024 08:42:21 +0000
ROA not before:           Wed 04 Dec 2024 08:42:21 +0000
ROA not after:            Tue 04 Mar 2025 08:42:21 +0000
asID:                     394868
IP address blocks:        115.84.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:17:cc:69:ad:ce:dc:5f:32:2a:a8:92:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
        Validity
            Not Before: Dec  4 08:42:21 2024 GMT
            Not After : Mar  4 08:42:21 2025 GMT
        Subject: CN=146ac3bc-cda9-48cf-a6fa-f66bf2466f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:02:d3:7b:b4:29:2c:a4:7f:21:7b:63:02:
                    37:f3:a9:0b:c0:96:f9:57:f5:0d:3b:29:ee:81:9b:
                    50:1f:f1:8b:b6:1f:40:21:42:41:66:98:65:ce:13:
                    49:31:15:45:cd:7e:3b:3c:c7:45:d0:c6:52:02:af:
                    43:a9:c5:f9:f3:d4:fd:4a:29:a4:53:ee:d1:86:76:
                    7a:fc:e8:2f:2b:1a:a1:40:89:36:91:67:f0:46:74:
                    d9:b7:f0:cb:02:7a:29:0e:85:0a:1a:ad:a3:1b:92:
                    76:34:69:96:79:e0:ff:aa:a2:65:e7:9e:4b:7d:a5:
                    c8:2c:98:a4:61:8d:de:6c:19:e8:21:0d:1e:09:c6:
                    8f:35:04:d8:a9:c3:10:34:ef:19:8f:96:a9:64:61:
                    6d:a3:44:db:fb:88:5c:27:40:c3:ad:25:a0:b8:e5:
                    9a:42:e4:9c:b1:f8:21:2c:0b:44:60:5c:3b:80:a6:
                    bc:ed:d3:f8:94:eb:76:dc:56:30:48:03:81:1b:0f:
                    e7:fc:76:c1:f1:ee:5d:a4:48:04:fa:28:e8:00:0f:
                    ca:64:73:68:62:f2:91:ea:f5:f2:4f:02:96:1e:c8:
                    2b:0c:ab:93:37:5c:ba:a1:60:70:b9:73:f0:53:80:
                    74:70:03:58:48:72:e5:71:c4:c7:9f:17:01:49:56:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:19:F5:43:E0:66:FB:D6:C6:3A:81:C7:CC:05:63:0A:0C:46:A3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/d1c8e9a3-24cf-3529-a567-e444eb557798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl

            X509v3 Authority Key Identifier:
                keyid:70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.84.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:81:ee:2f:1c:94:ff:06:11:d0:a6:a5:4f:59:15:02:de:7d:
         ef:a0:a8:c1:77:b3:5d:ea:63:67:0b:8c:f9:1d:a3:49:39:7e:
         58:7c:7b:b9:8c:ae:39:39:a3:24:b7:c7:ff:00:bb:0f:1e:b4:
         b1:4d:00:fa:0b:ce:87:47:07:00:b3:19:44:ac:fc:56:a4:e5:
         cf:fb:e1:4e:dd:94:ac:b3:4b:65:1f:dd:0c:02:39:02:74:5a:
         9c:e6:3b:15:b5:b7:82:12:16:c7:f4:f5:5a:a0:8b:5a:59:20:
         15:05:90:99:09:58:f7:6b:7f:01:ab:b7:ce:27:73:08:3c:bc:
         29:2b:f7:ba:f9:c6:32:89:a0:3f:b0:25:a2:7d:4c:b0:ea:f0:
         72:68:16:b3:a0:6f:d2:3c:0e:79:7a:e3:b4:d8:73:ee:4a:29:
         94:64:b0:33:11:22:87:bf:bc:50:8b:b9:2c:73:46:e1:56:5b:
         c9:77:d1:40:40:37:cb:92:d6:5e:83:43:9f:43:c4:d2:ce:b2:
         34:14:30:e0:92:46:6e:68:18:e0:d6:85:d8:ad:e8:2f:4d:08:
         f1:c5:ea:bc:78:2b:b2:bd:16:9c:d3:92:57:4a:5d:6d:99:62:
         ba:46:be:6d:d1:ab:61:1e:93:80:94:1d:02:29:45:e6:8a:e3:
         90:ea:4b:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXzGmtztxfMiqokmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg5NTBjM2QtM2I0My00NWI4LTkzY2ItZmJmOTk1Njhj
MzExMB4XDTI0MTIwNDA4NDIyMVoXDTI1MDMwNDA4NDIyMVowLzEtMCsGA1UEAxMk
MTQ2YWMzYmMtY2RhOS00OGNmLWE2ZmEtZjY2YmYyNDY2ZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3AC03u0KSykfyF7YwI386kLwJb5V/UNOynu
gZtQH/GLth9AIUJBZphlzhNJMRVFzX47PMdF0MZSAq9DqcX589T9SimkU+7RhnZ6
/OgvKxqhQIk2kWfwRnTZt/DLAnopDoUKGq2jG5J2NGmWeeD/qqJl555LfaXILJik
YY3ebBnoIQ0eCcaPNQTYqcMQNO8Zj5apZGFto0Tb+4hcJ0DDrSWguOWaQuScsfgh
LAtEYFw7gKa87dP4lOt23FYwSAOBGw/n/HbB8e5dpEgE+ijoAA/KZHNoYvKR6vXy
TwKWHsgrDKuTN1y6oWBwuXPwU4B0cANYSHLlccTHnxcBSVbc6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUZ9UPgZvvWxjqBx8wFYwoMRqOrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lODk1
MGMzZC0zYjQzLTQ1YjgtOTNjYi1mYmY5OTU2OGMzMTEvZDFjOGU5YTMtMjRjZi0z
NTI5LWE1NjctZTQ0NGViNTU3Nzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTg5NTBjM2QtM2I0My00NWI4LTkz
Y2ItZmJmOTk1NjhjMzExL2U4OTUwYzNkLTNiNDMtNDViOC05M2NiLWZiZjk5NTY4
YzMxMS5jcmwwHwYDVR0jBBgwFoAUcIVIM7amlvXdt+DyVMqKKYD/SYowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lODk1MGMzZC0zYjQzLTQ1YjgtOTNjYi1mYmY5
OTU2OGMzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFc1TAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeB7i8clP8GEdCmpU9ZFQLefe+gqMF3s13qY2cLjPkdo0k5flh8e7mM
rjk5oyS3x/8Auw8etLFNAPoLzodHBwCzGUSs/Fak5c/74U7dlKyzS2Uf3QwCOQJ0
WpzmOxW1t4ISFsf09Vqgi1pZIBUFkJkJWPdrfwGrt84ncwg8vCkr97r5xjKJoD+w
JaJ9TLDq8HJoFrOgb9I8Dnl647TYc+5KKZRksDMRIoe/vFCLuSxzRuFWW8l30UBA
N8uS1l6DQ59DxNLOsjQUMOCSRm5oGODWhdit6C9NCPHF6rx4K7K9FpzTkldKXW2Z
YrpGvm3Rq2Eek4CUHQIpReaK45DqS+8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:46 2025 by rpki-client