Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61cec2be-b72f-36f8-90ab-025d2b0e9c13.roa
File:                     61cec2be-b72f-36f8-90ab-025d2b0e9c13.roa (raw, json)
Hash identifier:          vRU71nFQXSEUebYB1Syp7m0SAS5uzmMPmABOXdPLQks=
Subject key identifier:   E2:5B:A9:B0:83:B9:09:7C:31:77:84:54:4F:C9:66:92:36:87:C5:FD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584802082ABA9D6DE82DFBF9BF00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61cec2be-b72f-36f8-90ab-025d2b0e9c13.roa
Signing time:             Tue 26 Nov 2024 13:34:58 +0000
ROA not before:           Tue 26 Nov 2024 13:34:58 +0000
ROA not after:            Mon 24 Feb 2025 13:34:58 +0000
asID:                     396591
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:08:2a:ba:9d:6d:e8:2d:fb:f9:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 26 13:34:58 2024 GMT
            Not After : Feb 24 13:34:58 2025 GMT
        Subject: CN=46dd7a70-c85f-4a67-811d-524e23c18518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cb:40:d5:e3:f4:39:b0:44:41:29:23:45:d4:
                    5c:f5:cd:b1:1c:20:c1:15:25:8a:b9:17:6c:7b:e8:
                    e8:c5:d9:88:27:72:a5:05:bf:34:53:0a:1a:e9:08:
                    ba:d5:e2:95:e7:b4:e9:c2:3a:6d:0e:91:b0:d0:72:
                    43:89:02:ba:75:ae:75:cd:df:31:f1:2e:05:55:e9:
                    41:23:c8:b2:9c:b7:63:ce:7c:bb:b4:39:11:7a:17:
                    5b:fc:24:4b:c0:24:76:51:04:ff:62:aa:79:8c:23:
                    94:47:e6:7f:0b:10:e3:4b:24:51:20:e8:07:55:94:
                    4a:5d:5c:d6:80:a4:aa:57:24:5d:42:18:0c:4f:22:
                    95:c3:b8:d9:f1:d3:64:a5:a2:bd:09:be:fd:b5:47:
                    53:91:81:ff:c9:71:1f:72:6a:d8:ee:e6:23:34:0c:
                    5a:8e:76:7a:96:ca:cb:d1:d4:b1:43:ee:f3:90:bf:
                    97:22:1d:c9:a4:c7:19:bf:93:6a:53:18:cd:30:34:
                    8d:a0:57:85:29:df:63:45:c5:ba:12:53:02:b9:97:
                    aa:80:95:ea:60:0f:09:c7:5f:28:e7:da:5e:ee:f3:
                    dd:8e:04:83:c6:bc:4a:06:a9:9d:9a:6b:39:e0:69:
                    fd:a2:12:b4:51:17:ea:2f:a9:bb:6c:8e:91:53:4e:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5B:A9:B0:83:B9:09:7C:31:77:84:54:4F:C9:66:92:36:87:C5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61cec2be-b72f-36f8-90ab-025d2b0e9c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:65:0b:66:99:ab:05:a5:10:bf:51:a6:82:00:49:78:8a:
         94:76:6d:ce:ed:34:e2:33:55:78:44:a3:1d:71:50:29:a9:75:
         1f:13:ec:83:26:48:b8:a5:01:c8:ca:71:f6:0b:13:7a:e6:e2:
         1d:8d:ef:26:6e:fc:f3:26:f1:bc:1c:a3:c1:77:42:2f:fa:c7:
         e1:b9:2b:8d:d1:2d:fc:00:fa:89:11:8f:db:ef:cc:4c:f2:a3:
         01:66:ee:89:81:de:cb:9b:a7:44:b6:0b:dc:f1:34:77:a7:6f:
         c0:01:c8:63:c8:90:93:aa:a9:13:e9:18:6b:8f:a3:99:59:e2:
         9e:24:fd:5d:a4:d3:ee:0b:27:e3:a7:98:49:ba:a8:d1:80:76:
         e3:6a:50:b8:e9:8c:c8:da:7d:fe:79:ee:be:0b:4f:ce:d2:e2:
         3c:f6:c3:d7:75:24:89:26:4a:9a:fd:3b:5b:c8:0d:2f:10:40:
         6a:ba:a0:de:a6:d9:05:08:9e:3c:d7:12:7f:63:74:69:ee:e3:
         e6:83:bb:37:fb:93:f5:a8:4e:85:4f:51:f4:fa:1b:10:98:9a:
         d6:6b:40:63:2e:a3:5f:b0:c3:f1:c5:97:b6:86:28:03:3b:c6:
         aa:b2:18:19:3c:04:17:79:18:b7:53:d7:d4:a3:17:1f:3e:2a:
         08:c0:d2:b5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgCCCq6nW3oLfv5vwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyNjEzMzQ1OFoXDTI1MDIyNDEzMzQ1OFowLzEtMCsGA1UEAxMk
NDZkZDdhNzAtYzg1Zi00YTY3LTgxMWQtNTI0ZTIzYzE4NTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAistA1eP0ObBEQSkjRdRc9c2xHCDBFSWKuRds
e+joxdmIJ3KlBb80Uwoa6Qi61eKV57TpwjptDpGw0HJDiQK6da51zd8x8S4FVelB
I8iynLdjzny7tDkRehdb/CRLwCR2UQT/Yqp5jCOUR+Z/CxDjSyRRIOgHVZRKXVzW
gKSqVyRdQhgMTyKVw7jZ8dNkpaK9Cb79tUdTkYH/yXEfcmrY7uYjNAxajnZ6lsrL
0dSxQ+7zkL+XIh3JpMcZv5NqUxjNMDSNoFeFKd9jRcW6ElMCuZeqgJXqYA8Jx18o
59pe7vPdjgSDxrxKBqmdmms54Gn9ohK0URfqL6m7bI6RU05gjwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOJbqbCDuQl8MXeEVE/JZpI2h8X9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjFjZWMyYmUtYjcyZi0z
NmY4LTkwYWItMDI1ZDJiMGU5YzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA/TmULZpmrBaUQv1GmggBJeIqUdm3O7TTiM1V4RKMdcVApqXUfE+yD
Jki4pQHIynH2CxN65uIdje8mbvzzJvG8HKPBd0Iv+sfhuSuN0S38APqJEY/b78xM
8qMBZu6Jgd7Lm6dEtgvc8TR3p2/AAchjyJCTqqkT6Rhrj6OZWeKeJP1dpNPuCyfj
p5hJuqjRgHbjalC46YzI2n3+ee6+C0/O0uI89sPXdSSJJkqa/TtbyA0vEEBquqDe
ptkFCJ481xJ/Y3Rp7uPmg7s3+5P1qE6FT1H0+hsQmJrWa0BjLqNfsMPxxZe2higD
O8aqshgZPAQXeRi3U9fUoxcfPioIwNK1
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:51:29 2025 by rpki-client