Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/d8245dfd-03d6-3032-84b2-33440c1495df.roa
File:                     d8245dfd-03d6-3032-84b2-33440c1495df.roa (raw, json)
Hash identifier:          IBKpFKwmwgkJi52bWMn4NC0nPaGgTVNEbymaT2z1U3o=
Subject key identifier:   5A:A5:97:06:C0:A4:81:E8:41:5C:31:2E:B9:40:99:6E:93:D0:3E:2F
Certificate issuer:       /CN=55bf3e52-332a-4f98-b430-2ed284592ddb
Certificate serial:       010D0C9F4328584871C07D2C2EBAD710C5DBBD80
Authority key identifier: 99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/d8245dfd-03d6-3032-84b2-33440c1495df.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     216030
IP address blocks:        192.41.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:7d:2c:2e:ba:d7:10:c5:db:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55bf3e52-332a-4f98-b430-2ed284592ddb
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=5687b327-9eca-41bf-8222-474d7c59a04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1d:7b:03:83:f1:b8:d7:b1:5f:06:3b:b3:4b:
                    ed:66:63:01:19:4c:cd:28:8b:a9:d4:07:2e:25:fc:
                    51:30:6b:fd:57:5f:58:15:fb:78:b0:8a:f6:c7:bc:
                    11:23:3c:2c:21:7c:1b:c3:17:39:e8:34:d5:38:97:
                    a3:19:f1:4c:b0:2a:40:de:d1:6e:cc:32:a0:ab:23:
                    ab:a3:b7:88:12:be:52:b8:bf:e7:8d:39:be:3c:f0:
                    ae:99:60:51:80:09:67:b6:df:ab:34:14:68:21:4b:
                    12:bb:10:c2:da:9f:6e:46:3e:99:78:10:d8:10:66:
                    19:46:eb:f3:36:a0:f5:aa:72:70:52:85:17:8b:a0:
                    a5:2b:df:e0:3d:86:3f:9a:11:e2:75:ea:5e:c1:24:
                    e9:3f:b9:e8:4a:b5:c6:6f:0a:5a:3c:ce:c9:86:1e:
                    9b:db:8c:2f:03:8b:99:ad:cc:66:03:63:03:64:22:
                    8b:d7:b6:66:9f:a8:19:30:c9:27:0e:f1:57:61:00:
                    88:51:77:76:2e:dd:32:2a:1e:73:eb:42:db:70:64:
                    07:73:39:1b:c0:a6:59:52:cd:71:5f:c7:11:77:95:
                    a8:13:b6:83:30:61:e2:98:a8:e2:4b:87:b3:9d:c4:
                    35:f5:7d:79:3d:70:64:29:fc:2c:36:1e:33:6d:a3:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A5:97:06:C0:A4:81:E8:41:5C:31:2E:B9:40:99:6E:93:D0:3E:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/d8245dfd-03d6-3032-84b2-33440c1495df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.crl

            X509v3 Authority Key Identifier:
                keyid:99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:01:27:03:5b:a8:1d:f3:71:29:57:ab:91:ea:74:4b:61:d9:
         4a:4b:30:5a:13:18:19:76:f0:83:ab:55:3f:4a:89:85:e0:7a:
         a3:e4:83:1e:0e:5a:a4:e4:f5:8b:1f:f6:3f:63:4e:d1:cf:f7:
         dd:d3:d5:5a:14:91:aa:c4:c5:69:20:f2:d0:d8:8d:d5:85:97:
         f1:d4:74:33:11:ce:2e:0d:a7:03:f0:dc:11:b1:9f:d0:c5:91:
         fd:5b:20:56:2b:4f:45:1d:f8:69:69:64:3e:9c:ec:c4:3d:3b:
         59:38:33:5d:b5:1c:ab:cc:8f:68:5d:86:30:98:e7:cc:1a:a1:
         cd:97:f6:e3:0c:32:29:99:44:23:bd:f8:4d:b4:95:77:30:b3:
         33:55:04:55:b0:10:6e:6b:eb:3c:70:b9:cf:76:76:db:2a:54:
         7e:96:57:4d:de:ae:1e:aa:32:98:b8:b2:aa:81:f9:3b:4a:a2:
         a7:e9:6e:36:24:45:4e:76:3b:5b:04:ad:ac:3d:ca:e9:57:17:
         88:b7:f4:d7:93:20:5e:dc:1e:f6:cb:15:7e:32:62:03:49:53:
         23:f2:85:72:63:e5:c2:49:4a:0e:06:65:34:6b:70:db:3d:8e:
         e9:53:4d:af:7d:37:28:ca:e2:ee:09:f3:cd:34:9a:fa:85:6f:
         53:ea:4c:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwH0sLrrXEMXbvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTViZjNlNTItMzMyYS00Zjk4LWI0MzAtMmVkMjg0NTky
ZGRiMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTY4N2IzMjctOWVjYS00MWJmLTgyMjItNDc0ZDdjNTlhMDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB17A4PxuNexXwY7s0vtZmMBGUzNKIup1Acu
JfxRMGv9V19YFft4sIr2x7wRIzwsIXwbwxc56DTVOJejGfFMsCpA3tFuzDKgqyOr
o7eIEr5SuL/njTm+PPCumWBRgAlntt+rNBRoIUsSuxDC2p9uRj6ZeBDYEGYZRuvz
NqD1qnJwUoUXi6ClK9/gPYY/mhHidepewSTpP7noSrXGbwpaPM7Jhh6b24wvA4uZ
rcxmA2MDZCKL17Zmn6gZMMknDvFXYQCIUXd2Lt0yKh5z60LbcGQHczkbwKZZUs1x
X8cRd5WoE7aDMGHimKjiS4ezncQ19X15PXBkKfwsNh4zbaOw3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqllwbApIHoQVwxLrlAmW6T0D4vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NWJm
M2U1Mi0zMzJhLTRmOTgtYjQzMC0yZWQyODQ1OTJkZGIvZDgyNDVkZmQtMDNkNi0z
MDMyLTg0YjItMzM0NDBjMTQ5NWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTViZjNlNTItMzMyYS00Zjk4LWI0
MzAtMmVkMjg0NTkyZGRiLzU1YmYzZTUyLTMzMmEtNGY5OC1iNDMwLTJlZDI4NDU5
MmRkYi5jcmwwHwYDVR0jBBgwFoAUmVLQ86figaVvg4KuMvIJCntlFbEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81NWJmM2U1Mi0zMzJhLTRmOTgtYjQzMC0yZWQy
ODQ1OTJkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwClmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYBJwNbqB3zcSlXq5HqdEth2UpLMFoTGBl28IOrVT9KiYXgeqPkgx4O
WqTk9Ysf9j9jTtHP993T1VoUkarExWkg8tDYjdWFl/HUdDMRzi4NpwPw3BGxn9DF
kf1bIFYrT0Ud+GlpZD6c7MQ9O1k4M121HKvMj2hdhjCY58waoc2X9uMMMimZRCO9
+E20lXcwszNVBFWwEG5r6zxwuc92dtsqVH6WV03erh6qMpi4sqqB+TtKoqfpbjYk
RU52O1sEraw9yulXF4i39NeTIF7cHvbLFX4yYgNJUyPyhXJj5cJJSg4GZTRrcNs9
julTTa99NyjK4u4J8800mvqFb1PqTL4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:07:55 2025 by rpki-client