Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa
File:                     e69787f3-2ec1-3f53-901b-4da1c04da846.roa (raw, json)
Hash identifier:          dkjkEWLDPbTVwfbjR3CbRQhnZcp8v1Mwcq6s9U0KtNg=
Subject key identifier:   8A:23:61:C7:91:60:20:3F:5C:AC:C6:12:73:D7:9F:DD:DB:49:2A:0C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F155290ED1C328CAF4D81060
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        40.141.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:29:0e:d1:c3:28:ca:f4:d8:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=d9865c37-8240-4f00-a76e-1739bb2a33b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:71:fe:18:bb:d6:dc:fc:de:09:d9:af:6e:ef:
                    df:bf:f6:52:75:4c:d5:ae:ac:13:5c:6e:fc:ab:8e:
                    8e:88:78:b2:91:95:22:8b:9b:d0:b1:28:51:ee:3c:
                    ea:9f:9c:f4:89:0a:ee:e2:d7:1b:4a:fa:d9:62:79:
                    51:aa:b3:13:fe:b8:3f:cf:35:43:21:5b:55:bb:e3:
                    4a:33:13:e6:a0:50:4b:d2:b0:32:99:92:06:c7:21:
                    b9:a7:e4:e7:b2:35:be:8e:04:df:8d:d2:de:0f:61:
                    0f:8c:82:12:db:87:e7:22:47:47:72:bc:95:9f:f0:
                    3c:1a:09:ba:5e:16:dd:8d:ed:d8:eb:34:80:49:b6:
                    5a:4c:92:c9:ae:4b:60:0c:67:63:8a:f5:f9:8e:c6:
                    3b:ca:88:a4:68:2c:71:ee:e6:23:af:c6:ff:98:da:
                    6f:b6:e9:60:00:5d:66:2b:a1:b7:a9:21:de:26:9c:
                    c5:b6:fa:3a:55:f1:a8:c6:d7:5a:26:00:24:39:8f:
                    22:fd:ab:27:22:a8:d1:17:8c:79:06:0d:22:a5:70:
                    5f:91:0c:28:ae:f2:5b:70:13:be:0e:1c:17:b8:ae:
                    62:d8:b9:db:73:f0:55:e5:3a:2a:af:61:88:92:19:
                    60:97:90:81:f3:01:35:da:c7:88:e9:75:d6:05:b9:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:61:C7:91:60:20:3F:5C:AC:C6:12:73:D7:9F:DD:DB:49:2A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.141.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e6:c1:c2:a3:09:57:39:a6:61:dd:70:35:7f:02:38:d0:8b:
         c6:d8:30:a7:45:86:9b:7d:19:76:9d:df:7b:ac:74:d9:98:14:
         ea:30:0f:af:34:f1:3d:d2:bc:0e:37:b6:2c:ed:c6:4e:26:c7:
         6d:80:1f:ed:18:c7:84:7a:70:d5:a0:a4:54:94:20:2f:65:e4:
         0b:8f:9a:9d:2a:ce:0d:e0:02:ee:a3:bd:46:e7:9f:36:90:fc:
         7e:66:52:fe:00:fd:ff:9e:3f:7e:31:d9:fb:92:be:49:0f:59:
         66:43:44:8e:6b:03:fe:a5:ee:27:ca:e1:d6:ee:c7:cf:59:d6:
         77:f9:c5:8f:e5:24:9d:82:f8:6c:86:d5:1b:e5:51:65:a5:d2:
         56:41:00:7c:49:5b:78:22:c7:88:a6:41:a9:45:3c:7a:d1:af:
         9a:5c:14:58:a0:e5:30:7e:3a:44:7d:84:7f:29:af:2e:44:57:
         d0:ac:23:dc:9d:18:54:11:0c:a0:4c:92:4b:21:55:35:04:50:
         ab:8a:63:56:69:e3:da:76:5f:51:12:52:be:86:2b:31:42:f2:
         27:9c:a9:07:f6:2b:64:80:ca:d5:63:97:2e:11:d9:ce:b0:a9:
         d1:e4:6a:9e:b7:98:7c:c8:7d:6c:48:b5:31:53:69:1c:9f:34:
         06:92:b3:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVSkO0cMoyvTYEGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
ZDk4NjVjMzctODI0MC00ZjAwLWE3NmUtMTczOWJiMmEzM2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHH+GLvW3PzeCdmvbu/fv/ZSdUzVrqwTXG78
q46OiHiykZUii5vQsShR7jzqn5z0iQru4tcbSvrZYnlRqrMT/rg/zzVDIVtVu+NK
MxPmoFBL0rAymZIGxyG5p+TnsjW+jgTfjdLeD2EPjIIS24fnIkdHcryVn/A8Ggm6
Xhbdje3Y6zSASbZaTJLJrktgDGdjivX5jsY7yoikaCxx7uYjr8b/mNpvtulgAF1m
K6G3qSHeJpzFtvo6VfGoxtdaJgAkOY8i/asnIqjRF4x5Bg0ipXBfkQworvJbcBO+
DhwXuK5i2Lnbc/BV5Toqr2GIkhlgl5CB8wE12seI6XXWBbldxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIojYceRYCA/XKzGEnPXn93bSSoMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY5Nzg3ZjMtMmVjMS0z
ZjUzLTkwMWItNGRhMWMwNGRhODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI2lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLmwcKjCVc5pmHdcDV/AjjQi8bYMKdFhpt9GXad33usdNmYFOowD680
8T3SvA43tiztxk4mx22AH+0Yx4R6cNWgpFSUIC9l5AuPmp0qzg3gAu6jvUbnnzaQ
/H5mUv4A/f+eP34x2fuSvkkPWWZDRI5rA/6l7ifK4dbux89Z1nf5xY/lJJ2C+GyG
1RvlUWWl0lZBAHxJW3gix4imQalFPHrRr5pcFFig5TB+OkR9hH8pry5EV9CsI9yd
GFQRDKBMkkshVTUEUKuKY1Zp49p2X1ESUr6GKzFC8iecqQf2K2SAytVjly4R2c6w
qdHkap63mHzIfWxItTFTaRyfNAaSs0c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:55:40 2025 by rpki-client