Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1abf2ea8-e616-39d5-a95c-c5bab9f0677b.roa
File:                     1abf2ea8-e616-39d5-a95c-c5bab9f0677b.roa (raw, json)
Hash identifier:          LEu/j/bIHf1ehv0Umasd/A1ccicXNs+CV2FKk03N38I=
Subject key identifier:   45:7F:3E:88:A3:3F:25:D7:83:6C:31:75:A3:AA:F3:AE:93:5D:70:28
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858480A77E60E4049B8F93219A4C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1abf2ea8-e616-39d5-a95c-c5bab9f0677b.roa
Signing time:             Fri 29 Nov 2024 14:06:33 +0000
ROA not before:           Fri 29 Nov 2024 14:06:33 +0000
ROA not after:            Thu 27 Feb 2025 14:06:33 +0000
asID:                     53356
IP address blocks:        172.111.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:77:e6:0e:40:49:b8:f9:32:19:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov 29 14:06:33 2024 GMT
            Not After : Feb 27 14:06:33 2025 GMT
        Subject: CN=a4f06a46-d56d-4c44-ba35-426dec9bf92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:b2:12:91:32:a0:27:92:7a:9c:96:c9:6b:
                    b6:1e:31:0c:2a:0f:3c:ca:4c:cb:ea:5e:a4:f8:28:
                    03:21:35:ad:fe:24:4e:50:e4:d8:46:8d:1f:c9:78:
                    c0:11:e0:82:67:26:04:49:e8:2e:a1:33:b5:6c:95:
                    55:2b:38:c9:4e:de:63:4a:d4:f4:67:d5:cb:15:2a:
                    64:80:15:28:20:61:12:30:9b:67:7f:2b:d5:9c:24:
                    41:46:e1:1a:b3:08:52:8c:a1:ff:74:14:67:12:60:
                    ce:ec:d6:6b:a6:87:db:f2:91:9f:6e:46:74:2e:94:
                    62:47:51:eb:0f:c8:b0:70:95:3e:98:6a:5d:4c:8b:
                    c0:fc:9b:f9:2f:3a:f4:da:5f:29:a5:6e:85:73:57:
                    50:c3:9a:80:01:e6:6e:23:b8:38:06:fe:cc:40:20:
                    09:06:1c:ed:93:eb:41:e7:af:46:01:18:5d:7b:33:
                    b5:75:57:41:13:e3:65:af:10:0f:9e:f2:80:3a:6c:
                    23:30:72:65:f5:fd:1d:fd:c9:23:25:12:d9:00:0d:
                    7b:4e:00:d6:44:1f:95:0e:3f:ab:47:7f:c2:91:a7:
                    cb:30:07:e3:bc:3f:1d:26:f6:cc:69:78:81:4d:25:
                    71:fa:16:b4:53:a1:6e:a0:09:69:43:fc:e7:80:ac:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:3E:88:A3:3F:25:D7:83:6C:31:75:A3:AA:F3:AE:93:5D:70:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1abf2ea8-e616-39d5-a95c-c5bab9f0677b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:8f:81:97:0d:b2:73:79:7b:02:43:b2:20:2d:cd:fb:5c:
         6c:2d:1f:0e:03:cb:e3:06:eb:c6:86:3b:d9:cc:df:1b:7e:ca:
         55:b7:ac:5f:fa:9b:1a:8b:57:6c:bf:5b:fc:40:4b:40:7c:cb:
         08:17:c8:21:2d:73:75:6c:05:04:1c:47:43:a2:36:f2:dc:3f:
         59:75:44:28:26:95:84:8d:79:84:be:71:d5:03:a7:09:ca:82:
         d6:22:c0:6d:39:47:e1:12:48:d3:09:a0:66:ab:c7:cb:dc:99:
         40:72:63:6a:1b:fe:b8:2a:cc:b4:d4:0e:1d:bc:13:4a:01:c1:
         b6:ad:e8:42:10:03:b5:c5:c2:df:30:ad:96:b0:f4:8e:2e:da:
         39:b7:3f:fb:3f:2a:b1:32:2b:e5:75:07:8e:73:e2:fa:88:4a:
         70:c6:6e:74:c9:67:a7:a5:75:47:cc:12:8d:f9:d3:8b:e6:f2:
         6a:30:bc:84:89:c8:08:8d:7d:09:9f:a7:97:34:61:e7:7b:4c:
         18:b4:9b:ee:37:6a:c4:a9:fa:5c:c5:ce:2e:42:51:84:7d:a2:
         5f:6e:33:92:69:b7:19:20:6a:cb:5b:13:78:99:e8:fc:83:b0:
         45:e2:f3:9e:d1:1d:28:b2:59:61:1b:4e:f8:e9:ff:61:d6:16:
         04:7d:ae:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKd+YOQEm4+TIZpMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTEyOTE0MDYzM1oXDTI1MDIyNzE0MDYzM1owLzEtMCsGA1UEAxMk
YTRmMDZhNDYtZDU2ZC00YzQ0LWJhMzUtNDI2ZGVjOWJmOTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJWyEpEyoCeSepyWyWu2HjEMKg88ykzL6l6k
+CgDITWt/iROUOTYRo0fyXjAEeCCZyYESeguoTO1bJVVKzjJTt5jStT0Z9XLFSpk
gBUoIGESMJtnfyvVnCRBRuEaswhSjKH/dBRnEmDO7NZrpofb8pGfbkZ0LpRiR1Hr
D8iwcJU+mGpdTIvA/Jv5Lzr02l8ppW6Fc1dQw5qAAeZuI7g4Bv7MQCAJBhztk+tB
569GARhdezO1dVdBE+NlrxAPnvKAOmwjMHJl9f0d/ckjJRLZAA17TgDWRB+VDj+r
R3/CkafLMAfjvD8dJvbMaXiBTSVx+ha0U6FuoAlpQ/zngKzKIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEV/PoijPyXXg2wxdaOq866TXXAoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWFiZjJlYTgtZTYxNi0z
OWQ1LWE5NWMtYzViYWI5ZjA2NzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIfj4GXDbJzeXsCQ7IgLc37XGwtHw4Dy+MG68aGO9nM3xt+ylW3rF/6
mxqLV2y/W/xAS0B8ywgXyCEtc3VsBQQcR0OiNvLcP1l1RCgmlYSNeYS+cdUDpwnK
gtYiwG05R+ESSNMJoGarx8vcmUByY2ob/rgqzLTUDh28E0oBwbat6EIQA7XFwt8w
rZaw9I4u2jm3P/s/KrEyK+V1B45z4vqISnDGbnTJZ6eldUfMEo3504vm8mowvISJ
yAiNfQmfp5c0Yed7TBi0m+43asSp+lzFzi5CUYR9ol9uM5JptxkgastbE3iZ6PyD
sEXi857RHSiyWWEbTvjp/2HWFgR9rsE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:27 2025 by rpki-client