Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ea45e95-c5f3-3500-8d82-13c5eed02757.roa
File:                     6ea45e95-c5f3-3500-8d82-13c5eed02757.roa (raw, json)
Hash identifier:          CLe/YCz/6LjIhW6VHbT1KXu8FM58CrlKvbyN57NWC/c=
Subject key identifier:   D3:13:2D:F1:13:7E:8A:D6:53:1E:1A:82:56:C6:07:52:61:29:02:6F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584849457B8319294ACA3E9275C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ea45e95-c5f3-3500-8d82-13c5eed02757.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     7342
IP address blocks:        198.49.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:7b:83:19:29:4a:ca:3e:92:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=88228baf-cf4f-4300-a38c-dd4f97a0112e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:fa:89:af:28:54:4f:ac:64:4d:08:0f:c0:
                    6c:01:c7:c3:a8:28:1f:3e:f9:de:23:5c:55:db:13:
                    bf:ca:aa:11:84:16:ce:60:e6:f8:fa:cd:41:aa:47:
                    d9:d9:e7:8f:8e:33:d2:71:7a:5f:4a:3d:b2:61:90:
                    bc:f6:f6:b7:d0:bf:35:da:71:dd:f1:81:a2:d3:2c:
                    47:e3:9a:f8:e1:e4:86:2d:b8:8e:f1:48:a3:2d:a4:
                    94:7a:b7:12:2f:6e:d6:4c:87:0e:a2:7a:9d:ec:b6:
                    56:7c:89:a6:2b:d4:d2:58:30:15:2e:fe:22:66:04:
                    a8:c6:ae:1c:a6:5b:ef:5d:cc:aa:e0:21:1c:3d:b7:
                    64:61:bf:70:fe:cc:ef:af:43:22:be:82:ac:fc:ef:
                    ae:64:33:67:1d:92:be:de:5a:3b:97:e0:7d:74:23:
                    c4:78:25:e2:df:29:eb:08:71:8d:91:fb:f3:a2:7c:
                    8b:c7:66:58:ac:24:dd:66:b4:05:e0:f1:f7:dd:2f:
                    09:12:28:d4:3a:af:95:1b:b0:22:26:05:f4:6d:92:
                    78:93:fc:c9:06:0b:45:ff:53:cc:e9:9f:ef:27:9c:
                    74:c1:8f:f7:ee:09:99:cd:e1:7c:28:3c:71:c2:33:
                    32:c0:69:d1:10:c7:5c:6b:37:1d:f8:c2:2b:aa:fa:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:13:2D:F1:13:7E:8A:D6:53:1E:1A:82:56:C6:07:52:61:29:02:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ea45e95-c5f3-3500-8d82-13c5eed02757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:57:90:a9:27:8d:4e:2e:61:9e:68:c5:41:37:77:90:d8:62:
         d3:48:de:b9:3c:50:ef:48:3c:2f:f0:69:82:ef:34:29:ec:16:
         b6:bc:38:7a:b1:51:54:a3:a3:02:b9:71:c6:5a:72:c0:d1:44:
         4a:a0:24:dc:74:19:2b:fc:9f:a1:e9:d6:37:64:2d:26:5c:63:
         ba:01:7e:c2:31:1a:e1:53:0d:c2:32:b9:57:f1:f8:8c:46:58:
         7e:9b:2e:01:b1:b6:c4:07:af:44:ee:de:ff:a1:f1:dc:c5:10:
         b2:ef:28:57:47:8d:48:e6:0c:f7:54:8a:76:9b:95:74:a5:fb:
         4b:af:f7:c0:23:c7:1b:20:27:b9:51:d9:ca:9b:54:af:cf:35:
         48:03:cc:97:aa:7c:6d:02:e9:51:63:ba:8e:38:cc:61:c9:5c:
         50:1d:d8:12:3a:99:8e:e5:16:aa:cd:a6:74:04:54:ab:56:ea:
         61:b7:e3:f0:29:bb:9e:6d:0b:82:9d:85:e0:c3:e6:de:98:61:
         69:2b:dd:fa:b9:eb:5d:60:fd:32:67:83:a2:a5:dc:66:c5:a4:
         2d:b4:eb:46:aa:c3:4b:e2:74:f7:8e:4c:b2:b7:59:9d:04:fd:
         66:9a:a9:9d:0f:cd:7c:f8:58:05:8a:34:5c:32:23:ba:d8:d8:
         f0:a9:bc:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRXuDGSlKyj6SdcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
ODgyMjhiYWYtY2Y0Zi00MzAwLWEzOGMtZGQ0Zjk3YTAxMTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQP6ia8oVE+sZE0ID8BsAcfDqCgfPvneI1xV
2xO/yqoRhBbOYOb4+s1BqkfZ2eePjjPScXpfSj2yYZC89va30L812nHd8YGi0yxH
45r44eSGLbiO8UijLaSUercSL27WTIcOonqd7LZWfImmK9TSWDAVLv4iZgSoxq4c
plvvXcyq4CEcPbdkYb9w/szvr0MivoKs/O+uZDNnHZK+3lo7l+B9dCPEeCXi3ynr
CHGNkfvzonyLx2ZYrCTdZrQF4PH33S8JEijUOq+VG7AiJgX0bZJ4k/zJBgtF/1PM
6Z/vJ5x0wY/37gmZzeF8KDxxwjMywGnREMdcazcd+MIrqvosWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMTLfETforWUx4aglbGB1JhKQJvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmVhNDVlOTUtYzVmMy0z
NTAwLThkODItMTNjNWVlZDAyNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjGhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZXkKknjU4uYZ5oxUE3d5DYYtNI3rk8UO9IPC/waYLvNCnsFra8OHqx
UVSjowK5ccZacsDRREqgJNx0GSv8n6Hp1jdkLSZcY7oBfsIxGuFTDcIyuVfx+IxG
WH6bLgGxtsQHr0Tu3v+h8dzFELLvKFdHjUjmDPdUinablXSl+0uv98AjxxsgJ7lR
2cqbVK/PNUgDzJeqfG0C6VFjuo44zGHJXFAd2BI6mY7lFqrNpnQEVKtW6mG34/Ap
u55tC4KdheDD5t6YYWkr3fq5611g/TJng6Kl3GbFpC2060aqw0vidPeOTLK3WZ0E
/WaaqZ0PzXz4WAWKNFwyI7rY2PCpvJk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:55:41 2025 by rpki-client