Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30a27fb-ee6e-3942-b52e-ce8fcfd432d2.roa
File:                     f30a27fb-ee6e-3942-b52e-ce8fcfd432d2.roa (raw, json)
Hash identifier:          xOU/GAp7MnPcJLJPpogTV0mhPUgmEmk2xy5lvCBCgfc=
Subject key identifier:   E7:FE:D1:73:A5:C5:50:8B:27:44:00:F9:8A:1C:EA:D4:89:5E:42:0F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848020826DBAC9770902FDD2800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30a27fb-ee6e-3942-b52e-ce8fcfd432d2.roa
Signing time:             Tue 26 Nov 2024 13:34:56 +0000
ROA not before:           Tue 26 Nov 2024 13:34:56 +0000
ROA not after:            Mon 24 Feb 2025 13:34:56 +0000
asID:                     36632
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:08:26:db:ac:97:70:90:2f:dd:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 26 13:34:56 2024 GMT
            Not After : Feb 24 13:34:56 2025 GMT
        Subject: CN=1ab7114d-193a-4f33-97a0-792a9ad03b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d4:51:a0:bd:bb:83:d8:c3:71:a7:c3:80:eb:
                    d3:2e:6d:34:cd:f0:67:d8:19:f2:04:cf:3b:1c:75:
                    d5:50:74:da:2f:36:a7:6e:4b:03:d6:4d:c5:7a:57:
                    3e:93:08:61:65:a8:fe:32:2f:c4:91:0a:43:87:3a:
                    97:4e:1f:bd:c0:d7:94:85:8e:0c:2b:96:ae:a0:6c:
                    9a:b6:d5:a8:97:0f:a1:1b:9d:f8:7e:5e:78:e4:c3:
                    be:d5:51:a4:d8:0d:80:34:4f:72:01:45:7a:9d:c0:
                    21:b6:51:5b:66:e3:88:df:61:a8:5c:05:28:33:30:
                    57:56:43:ae:f3:5f:dd:c6:f3:70:78:01:8b:16:c9:
                    81:bd:e6:65:52:38:b6:bb:f6:7d:fa:75:35:cd:80:
                    6b:aa:93:c7:7a:c1:ab:ee:cf:92:1c:4a:ff:89:d1:
                    43:dd:b2:ad:c9:a3:0b:96:fc:d2:c7:76:77:36:92:
                    1d:c1:e6:63:f3:c6:72:cb:b7:5b:cb:44:e4:d1:4d:
                    c1:ac:d1:02:5b:43:33:7b:08:3e:a8:73:d8:32:e7:
                    7b:e6:e5:0d:aa:74:cd:08:97:0c:b7:2c:19:bc:f8:
                    ee:78:1f:4e:1d:da:b0:d4:f7:59:f8:5c:08:d2:23:
                    5e:c7:f8:52:43:55:34:af:ff:71:1f:72:ad:55:50:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FE:D1:73:A5:C5:50:8B:27:44:00:F9:8A:1C:EA:D4:89:5E:42:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30a27fb-ee6e-3942-b52e-ce8fcfd432d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:64:a2:58:68:7c:01:ba:0d:dd:cc:6d:f9:d3:b9:4a:5f:c6:
         5f:95:4e:eb:95:d7:77:c8:1f:f0:e9:b1:73:9e:2d:3c:d0:ab:
         4c:c2:83:b2:ea:e1:42:de:f2:04:6c:aa:77:f8:c9:02:58:7a:
         84:3c:58:88:13:00:df:cc:8b:2f:33:64:64:db:38:93:72:d1:
         24:37:f3:ad:1e:63:08:ca:b9:e5:8f:8b:a5:aa:c9:d6:2a:df:
         e1:47:a7:b8:93:6b:d7:61:27:83:8c:fc:bc:09:a6:7a:2a:01:
         06:a7:f0:79:aa:60:67:89:2b:86:80:a4:1a:fe:f6:fb:96:6b:
         1a:4e:0e:1e:5c:c5:4b:4b:c8:1b:4f:0f:8a:ee:ff:43:03:06:
         4c:e9:9c:e8:6f:fb:51:60:47:42:ab:cd:cc:b8:3f:9b:46:68:
         97:e5:1e:eb:5a:f6:d9:2f:b4:9f:86:31:67:d5:cc:21:56:e6:
         2a:af:2d:ca:72:ae:79:5f:57:6d:24:0b:b7:9e:e9:66:32:ed:
         cf:6d:0b:8c:38:fc:8e:ba:14:28:e4:81:a5:43:04:aa:d6:e6:
         48:c0:ed:5d:5b:18:2f:31:62:8a:9a:fb:20:be:4a:5f:74:fa:
         f1:48:ef:f2:07:c4:ec:d4:0f:f5:79:e1:53:a0:07:62:4f:a6:
         2c:b7:90:84
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgCCCbbrJdwkC/dKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyNjEzMzQ1NloXDTI1MDIyNDEzMzQ1NlowLzEtMCsGA1UEAxMk
MWFiNzExNGQtMTkzYS00ZjMzLTk3YTAtNzkyYTlhZDAzYjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9RRoL27g9jDcafDgOvTLm00zfBn2BnyBM87
HHXVUHTaLzanbksD1k3Felc+kwhhZaj+Mi/EkQpDhzqXTh+9wNeUhY4MK5auoGya
ttWolw+hG534fl545MO+1VGk2A2ANE9yAUV6ncAhtlFbZuOI32GoXAUoMzBXVkOu
81/dxvNweAGLFsmBveZlUji2u/Z9+nU1zYBrqpPHesGr7s+SHEr/idFD3bKtyaML
lvzSx3Z3NpIdweZj88Zyy7dby0Tk0U3BrNECW0Mzewg+qHPYMud75uUNqnTNCJcM
tywZvPjueB9OHdqw1PdZ+FwI0iNex/hSQ1U0r/9xH3KtVVCQ/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOf+0XOlxVCLJ0QA+Yoc6tSJXkIPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjMwYTI3ZmItZWU2ZS0z
OTQyLWI1MmUtY2U4ZmNmZDQzMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAFZKJYaHwBug3dzG3507lKX8ZflU7rldd3yB/w6bFzni080KtMwoOy
6uFC3vIEbKp3+MkCWHqEPFiIEwDfzIsvM2Rk2ziTctEkN/OtHmMIyrnlj4ulqsnW
Kt/hR6e4k2vXYSeDjPy8CaZ6KgEGp/B5qmBniSuGgKQa/vb7lmsaTg4eXMVLS8gb
Tw+K7v9DAwZM6Zzob/tRYEdCq83MuD+bRmiX5R7rWvbZL7SfhjFn1cwhVuYqry3K
cq55X1dtJAu3nulmMu3PbQuMOPyOuhQo5IGlQwSq1uZIwO1dWxgvMWKKmvsgvkpf
dPrxSO/yB8Ts1A/1eeFToAdiT6Yst5CE
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:59:55 2025 by rpki-client