Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa
File:                     f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa (raw, json)
Hash identifier:          UoGG6Ya8oztkOJuQw9ip6VPv35H9xp52BoM4Q6BCdMM=
Subject key identifier:   FF:62:F0:A9:B4:8C:D7:3C:EB:E6:47:3B:62:8D:3B:E2:A9:17:9F:9E
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584851A57535F07352F27A939280
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        158.115.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:75:35:f0:73:52:f2:7a:93:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=24eae963-5e01-4f50-8375-55bf2926edc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:9a:5a:43:73:02:46:8c:65:ff:a1:8f:06:
                    48:fb:67:d1:cc:77:60:ab:1c:46:ae:1e:cb:07:8f:
                    5d:6c:5e:69:4f:27:b2:88:4c:23:d0:6d:ea:0b:68:
                    d7:a0:a4:b3:fc:3c:f4:dc:06:ce:23:00:62:e7:ae:
                    b7:c1:00:49:4c:2e:c2:eb:5d:6b:ef:b9:60:dd:e9:
                    99:b8:4c:28:bf:4f:b5:8b:97:92:29:c1:a6:97:8b:
                    5d:c9:e2:25:61:c7:4c:8d:e8:18:17:62:05:f3:61:
                    69:0f:94:8f:71:9e:6a:a4:4a:64:a0:b9:2d:a4:9e:
                    3a:2b:16:d6:c9:89:6a:ad:5e:a6:53:86:4d:e3:b5:
                    97:b4:4e:74:52:e8:b3:51:33:3a:80:e8:10:a5:90:
                    86:dc:5e:03:a7:b0:ae:49:78:d9:9b:6b:3b:2b:70:
                    57:81:0d:21:c2:2b:30:42:d4:eb:d2:1f:00:9d:6b:
                    dc:2d:b1:31:85:3a:84:12:59:44:d7:f6:d8:85:00:
                    e4:4f:25:cc:b8:b0:62:a2:92:21:cd:fa:38:2b:f8:
                    00:c1:22:6f:dc:16:a5:be:65:05:6b:c6:61:2d:34:
                    4b:87:f4:d5:9f:af:67:dc:76:41:57:04:53:c9:cd:
                    14:e2:c0:db:4a:8c:c7:11:ae:34:c3:00:31:6b:8b:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:62:F0:A9:B4:8C:D7:3C:EB:E6:47:3B:62:8D:3B:E2:A9:17:9F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:67:39:66:26:6e:6a:14:2e:46:50:bd:aa:eb:e6:be:e1:01:
         a9:da:a9:8e:f3:1a:8b:75:69:bc:ac:43:b0:b0:74:45:fb:3a:
         00:81:56:c7:d2:1f:72:50:9c:a4:c4:54:99:7b:33:f0:f0:e7:
         9d:43:c6:c9:5e:7d:0d:c1:c0:5f:a8:37:92:e5:10:5f:26:f8:
         0d:ca:88:d6:57:93:43:42:8e:5e:cb:4b:d1:b9:21:da:25:28:
         70:be:1e:69:be:46:42:c3:f8:43:56:cd:b2:75:7f:3c:9f:7e:
         9e:ee:f7:60:16:8d:c6:4e:4d:a7:69:10:1d:48:3c:6c:6e:25:
         8a:2a:c8:c0:59:b0:5f:41:35:eb:24:b6:60:ec:b8:0c:24:12:
         4a:2c:4e:36:3d:d9:9e:9e:78:af:c3:87:ab:b5:65:c9:dc:a0:
         c1:7f:72:ad:34:03:05:ed:1a:03:ac:39:f0:05:2d:05:a3:9e:
         57:79:18:66:84:e3:bc:08:d0:89:76:8c:a4:ec:98:9c:a4:a9:
         fa:f8:a3:d5:b4:26:85:28:25:f0:dd:3a:85:b2:68:0c:cd:bf:
         34:d2:07:94:97:72:af:3f:29:6d:6e:23:e1:e4:e1:8d:c1:31:
         af:56:c6:06:08:06:d2:e1:c0:1b:e8:4b:a5:df:5d:a7:80:82:
         c7:ab:83:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXU18HNS8nqTkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
MjRlYWU5NjMtNWUwMS00ZjUwLTgzNzUtNTViZjI5MjZlZGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwGaWkNzAkaMZf+hjwZI+2fRzHdgqxxGrh7L
B49dbF5pTyeyiEwj0G3qC2jXoKSz/Dz03AbOIwBi5663wQBJTC7C611r77lg3emZ
uEwov0+1i5eSKcGml4tdyeIlYcdMjegYF2IF82FpD5SPcZ5qpEpkoLktpJ46KxbW
yYlqrV6mU4ZN47WXtE50UuizUTM6gOgQpZCG3F4Dp7CuSXjZm2s7K3BXgQ0hwisw
QtTr0h8AnWvcLbExhTqEEllE1/bYhQDkTyXMuLBiopIhzfo4K/gAwSJv3BalvmUF
a8ZhLTRLh/TVn69n3HZBVwRTyc0U4sDbSozHEa40wwAxa4tfJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9i8Km0jNc86+ZHO2KNO+KpF5+eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZjhkNmU5NzgtMmQzZi0z
ZDA0LWJmYjgtMzdmYzY1NTc2MWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhnOWYmbmoULkZQvarr5r7hAanaqY7zGot1abysQ7CwdEX7OgCBVsfS
H3JQnKTEVJl7M/Dw551DxslefQ3BwF+oN5LlEF8m+A3KiNZXk0NCjl7LS9G5Idol
KHC+Hmm+RkLD+ENWzbJ1fzyffp7u92AWjcZOTadpEB1IPGxuJYoqyMBZsF9BNesk
tmDsuAwkEkosTjY92Z6eeK/Dh6u1ZcncoMF/cq00AwXtGgOsOfAFLQWjnld5GGaE
47wI0Il2jKTsmJykqfr4o9W0JoUoJfDdOoWyaAzNvzTSB5SXcq8/KW1uI+Hk4Y3B
Ma9WxgYIBtLhwBvoS6XfXaeAgsergzQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:07 2025 by rpki-client