Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/647cf0cf-742d-39ca-8ee4-d7c099db9991.roa
File:                     647cf0cf-742d-39ca-8ee4-d7c099db9991.roa (raw, json)
Hash identifier:          RYRu07kqh6wJbidWjwn9/bZ9N59RnFJxGiiwnmlJwZ0=
Subject key identifier:   86:D3:E0:0A:CE:E1:AC:A5:45:75:3E:BB:D3:36:D4:F7:E4:5B:62:80
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848020828DBED6EB54D3EBAEA40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/647cf0cf-742d-39ca-8ee4-d7c099db9991.roa
Signing time:             Tue 26 Nov 2024 13:34:57 +0000
ROA not before:           Tue 26 Nov 2024 13:34:57 +0000
ROA not after:            Mon 24 Feb 2025 13:34:57 +0000
asID:                     396561
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:08:28:db:ed:6e:b5:4d:3e:ba:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 26 13:34:57 2024 GMT
            Not After : Feb 24 13:34:57 2025 GMT
        Subject: CN=91d54ed4-c244-4e6e-a6a0-97495a35c5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:34:2d:b3:f4:61:02:21:94:33:3e:63:07:
                    ef:06:16:df:7e:67:07:cf:6b:81:d9:df:ba:b3:69:
                    38:77:e8:10:b9:8c:2c:2a:f0:e3:5a:da:64:4e:4b:
                    88:21:0e:68:c8:eb:a5:13:6b:db:dc:13:e8:54:90:
                    21:03:69:ba:c1:80:37:bc:01:42:63:42:50:bb:ec:
                    03:5d:3b:bf:0f:c6:b7:f5:e5:cb:45:8c:57:d4:71:
                    4c:df:de:62:6d:b8:75:56:8a:b1:02:62:81:5f:a9:
                    ab:ff:8a:f1:84:77:76:7f:7b:9a:dc:c1:2c:92:05:
                    f2:72:21:a1:38:57:81:0c:a7:0c:ac:12:c0:e8:3a:
                    e9:ae:56:57:f3:31:0e:e7:9b:a3:eb:e5:c9:2f:eb:
                    7e:02:18:4e:11:79:7e:58:46:85:72:4f:e9:8d:c2:
                    f6:a4:a2:8e:80:71:0a:66:75:c1:ab:fe:40:4e:92:
                    88:7d:42:fc:30:b5:bb:50:72:a3:e3:9b:1b:d5:b8:
                    2b:01:0b:9d:a0:42:35:a5:72:ea:b5:da:4e:97:99:
                    70:f7:4b:bd:7e:70:bf:78:f1:ea:32:a5:0a:14:dd:
                    91:18:57:42:46:46:70:13:17:a8:6c:1d:e5:15:82:
                    b6:ce:8e:70:f5:f9:a6:d6:64:31:f7:f1:ab:1c:fa:
                    9f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D3:E0:0A:CE:E1:AC:A5:45:75:3E:BB:D3:36:D4:F7:E4:5B:62:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/647cf0cf-742d-39ca-8ee4-d7c099db9991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e4:7c:ff:f3:1a:ed:4f:cf:eb:e0:2a:96:3e:d8:f1:b9:a8:
         7b:ab:f3:14:0b:4f:06:e5:94:ef:1c:5c:de:34:1f:b2:2c:74:
         70:51:f6:e1:0b:d1:cc:1f:f2:b0:11:fc:c3:91:3e:17:57:34:
         bc:44:cf:18:7c:12:e7:15:f3:ba:f3:30:ba:c1:0f:9b:d3:24:
         e0:7a:14:2b:2b:f5:c6:e8:c5:76:98:e8:e5:99:a2:ce:f1:c5:
         fd:22:60:2f:32:10:d2:8d:2b:e1:ee:ac:e3:33:40:d0:06:3f:
         61:5f:b5:36:0a:da:dd:70:f7:e7:f5:2d:68:12:86:ef:a6:c9:
         5d:a6:8f:34:b9:46:02:80:ce:4d:ba:d0:16:0c:11:a6:dd:6c:
         46:f6:7d:b7:07:5c:e9:0d:7b:1a:68:b6:a9:21:ef:20:be:d7:
         8a:76:2c:0e:8c:da:ba:72:24:f7:fa:41:e7:b1:ac:64:3c:33:
         75:bb:5f:6c:7c:54:01:2f:8e:3e:d7:1b:cc:64:e3:02:48:9d:
         01:62:93:92:5e:f7:a6:45:2e:04:8f:f5:75:0a:ba:e8:f2:67:
         ae:73:4f:ae:2c:47:9c:bb:90:23:f1:4f:81:c0:e8:e5:e7:4e:
         95:c9:ce:78:10:0c:f0:c5:c2:e0:d8:63:19:af:73:c8:46:37:
         22:38:a8:32
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgCCCjb7W61TT666kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyNjEzMzQ1N1oXDTI1MDIyNDEzMzQ1N1owLzEtMCsGA1UEAxMk
OTFkNTRlZDQtYzI0NC00ZTZlLWE2YTAtOTc0OTVhMzVjNWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa00LbP0YQIhlDM+YwfvBhbffmcHz2uB2d+6
s2k4d+gQuYwsKvDjWtpkTkuIIQ5oyOulE2vb3BPoVJAhA2m6wYA3vAFCY0JQu+wD
XTu/D8a39eXLRYxX1HFM395ibbh1VoqxAmKBX6mr/4rxhHd2f3ua3MEskgXyciGh
OFeBDKcMrBLA6DrprlZX8zEO55uj6+XJL+t+AhhOEXl+WEaFck/pjcL2pKKOgHEK
ZnXBq/5ATpKIfUL8MLW7UHKj45sb1bgrAQudoEI1pXLqtdpOl5lw90u9fnC/ePHq
MqUKFN2RGFdCRkZwExeobB3lFYK2zo5w9fmm1mQx9/GrHPqfYQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIbT4ArO4aylRXU+u9M21PfkW2KAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjQ3Y2YwY2YtNzQyZC0z
OWNhLThlZTQtZDdjMDk5ZGI5OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAF5Hz/8xrtT8/r4CqWPtjxuah7q/MUC08G5ZTvHFzeNB+yLHRwUfbh
C9HMH/KwEfzDkT4XVzS8RM8YfBLnFfO68zC6wQ+b0yTgehQrK/XG6MV2mOjlmaLO
8cX9ImAvMhDSjSvh7qzjM0DQBj9hX7U2CtrdcPfn9S1oEobvpsldpo80uUYCgM5N
utAWDBGm3WxG9n23B1zpDXsaaLapIe8gvteKdiwOjNq6ciT3+kHnsaxkPDN1u19s
fFQBL44+1xvMZOMCSJ0BYpOSXvemRS4Ej/V1Crro8meuc0+uLEecu5Aj8U+BwOjl
506Vyc54EAzwxcLg2GMZr3PIRjciOKgy
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:53:35 2025 by rpki-client