Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa
File:                     535be0a1-254e-39da-b317-25ebb54be9fc.roa (raw, json)
Hash identifier:          TAqFxhnlG0HF3oYQ5Ay4KXr2m+bL+QWbuJ49xFU0XQU=
Subject key identifier:   4B:76:8B:CB:71:37:7F:1A:61:F2:60:0D:B8:97:24:8C:6C:79:0E:40
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584802082DCA7A0E50570F87BC60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa
Signing time:             Tue 26 Nov 2024 13:34:59 +0000
ROA not before:           Tue 26 Nov 2024 13:34:59 +0000
ROA not after:            Mon 24 Feb 2025 13:34:59 +0000
asID:                     397212
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:08:2d:ca:7a:0e:50:57:0f:87:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 26 13:34:59 2024 GMT
            Not After : Feb 24 13:34:59 2025 GMT
        Subject: CN=bdafcc56-72da-4a91-b5d6-bbc616ca1eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:dc:91:e5:67:18:48:0a:8d:2b:a1:3c:b0:
                    b2:74:23:91:71:6a:5a:06:95:4c:32:53:be:27:9f:
                    99:d8:31:d3:e3:d1:07:ec:6f:da:43:80:47:d2:93:
                    81:68:4b:64:41:e2:04:6d:a9:7e:4f:43:0c:11:02:
                    c4:2d:0e:6a:fb:30:44:b3:d3:0f:59:ef:f4:fc:c2:
                    62:9c:74:75:47:94:97:ee:8c:07:0d:e5:cb:02:7e:
                    07:60:8b:a8:98:e7:10:1d:16:82:f9:aa:73:3d:23:
                    64:b8:7a:04:7b:cc:73:1b:35:d4:f3:bb:56:14:c0:
                    7a:fb:53:ed:5a:14:40:cc:30:cd:14:96:8e:25:2d:
                    f5:7f:70:ae:fd:bb:72:f1:0b:4f:b2:82:5e:39:a4:
                    c5:da:d3:45:4b:ec:43:ef:ad:30:18:bc:fb:e6:dc:
                    7b:e6:79:13:44:91:48:92:02:ce:38:a3:b2:8a:34:
                    53:9c:0d:da:9e:8c:a4:70:c1:dc:3d:8a:68:b4:c0:
                    07:f8:ee:9a:37:6f:b2:62:24:b9:c9:5d:20:e5:b1:
                    db:9a:da:87:d5:14:41:db:3b:cc:51:d2:d7:86:89:
                    af:0e:e2:46:5b:2b:79:2a:30:cf:2d:fe:b6:6f:a1:
                    d7:04:57:1c:67:24:99:33:b1:19:f4:a7:fa:71:d1:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:76:8B:CB:71:37:7F:1A:61:F2:60:0D:B8:97:24:8C:6C:79:0E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e2:ff:9a:68:af:a8:58:3e:19:ed:db:4b:3c:3a:cc:8b:93:
         ce:8b:73:fe:19:42:4c:33:ec:ec:cf:e7:1e:04:ea:d3:83:f7:
         1a:0f:dd:6b:70:40:70:29:14:99:33:3e:8f:65:24:2a:b5:7c:
         9c:55:21:27:94:65:06:3f:26:9b:72:ad:07:ae:93:55:e8:23:
         d4:a8:40:10:22:c7:9c:d0:a5:46:5c:73:7a:8a:c5:fe:b9:b1:
         48:c4:01:17:9b:19:fc:41:06:99:41:31:8b:85:b1:ea:a3:7e:
         74:56:a5:25:07:00:75:58:dd:da:46:c5:f8:8f:d2:be:10:35:
         b2:28:57:38:f6:93:4e:6b:a5:3f:bc:d5:49:ef:eb:e4:6e:64:
         a1:f1:a3:87:e5:0f:73:ca:51:9c:ba:be:54:8d:8e:a7:73:7d:
         9a:25:08:0d:3d:37:4d:d1:cd:0b:ba:d0:81:31:07:26:ae:46:
         ef:86:5a:79:cf:2b:2b:4a:99:0b:d6:34:a4:26:5d:00:45:5b:
         20:3d:e3:4b:da:cd:5a:f0:96:a4:0a:8a:52:07:d4:8d:96:89:
         f2:52:89:5c:22:34:a2:3f:27:ca:3a:ca:92:a8:1f:ef:92:85:
         41:f3:34:f2:e3:d1:64:cd:34:a0:df:e2:70:e0:64:63:1c:3f:
         a3:fd:e8:56
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgCCC3Keg5QVw+HvGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyNjEzMzQ1OVoXDTI1MDIyNDEzMzQ1OVowLzEtMCsGA1UEAxMk
YmRhZmNjNTYtNzJkYS00YTkxLWI1ZDYtYmJjNjE2Y2ExZWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXfckeVnGEgKjSuhPLCydCORcWpaBpVMMlO+
J5+Z2DHT49EH7G/aQ4BH0pOBaEtkQeIEbal+T0MMEQLELQ5q+zBEs9MPWe/0/MJi
nHR1R5SX7owHDeXLAn4HYIuomOcQHRaC+apzPSNkuHoEe8xzGzXU87tWFMB6+1Pt
WhRAzDDNFJaOJS31f3Cu/bty8QtPsoJeOaTF2tNFS+xD760wGLz75tx75nkTRJFI
kgLOOKOyijRTnA3anoykcMHcPYpotMAH+O6aN2+yYiS5yV0g5bHbmtqH1RRB2zvM
UdLXhomvDuJGWyt5KjDPLf62b6HXBFccZySZM7EZ9Kf6cdEa4QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEt2i8txN38aYfJgDbiXJIxseQ5AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTM1YmUwYTEtMjU0ZS0z
OWRhLWIzMTctMjVlYmI1NGJlOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCE4v+aaK+oWD4Z7dtLPDrMi5POi3P+GUJMM+zsz+ceBOrTg/caD91r
cEBwKRSZMz6PZSQqtXycVSEnlGUGPyabcq0HrpNV6CPUqEAQIsec0KVGXHN6isX+
ubFIxAEXmxn8QQaZQTGLhbHqo350VqUlBwB1WN3aRsX4j9K+EDWyKFc49pNOa6U/
vNVJ7+vkbmSh8aOH5Q9zylGcur5UjY6nc32aJQgNPTdN0c0LutCBMQcmrkbvhlp5
zysrSpkL1jSkJl0ARVsgPeNL2s1a8JakCopSB9SNlonyUolcIjSiPyfKOsqSqB/v
koVB8zTy49FkzTSg3+Jw4GRjHD+j/ehW
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:40:22 2025 by rpki-client