Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa
File:                     2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa (raw, json)
Hash identifier:          1KMQX6RXoUZ+s0TFFbj+Z0h+45YXCXetA5lOZ4qHitU=
Subject key identifier:   4E:B6:B4:22:30:59:FE:76:95:95:EB:EE:A0:3C:4D:D6:27:27:E2:A1
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285848854B49BC3C67D1968AB61100
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     3755
IP address blocks:        199.110.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:49:bc:3c:67:d1:96:8a:b6:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=bf3f7b41-19fe-4154-9639-cdc0d8624364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0c:01:17:49:80:ec:d3:02:2c:9c:4d:3f:bd:
                    48:de:75:6d:9f:ab:ca:c1:1e:fa:75:b1:d4:0f:e4:
                    5c:46:88:5b:93:fd:7e:74:cf:49:ad:df:d4:57:26:
                    9e:09:cc:54:80:51:f2:22:4a:46:9e:50:e5:8d:49:
                    b3:ed:cc:c2:d6:f7:e5:45:ba:db:a3:ea:3c:82:69:
                    f9:74:a1:2e:63:5d:15:94:4b:c0:9d:83:5c:1d:ed:
                    3d:6c:95:87:4d:80:ed:81:78:50:30:5b:36:8b:90:
                    5c:71:9d:b3:53:27:dc:2f:1f:73:2f:d2:86:dc:b1:
                    99:32:da:9f:3f:b1:8d:cd:12:4c:8f:ff:12:1c:5d:
                    7c:6b:d8:ae:fd:ea:d1:5a:f0:21:f9:99:11:69:37:
                    5f:fe:e4:af:5d:5b:6a:5a:10:19:dd:20:b5:5f:16:
                    43:be:a5:20:8a:ed:9b:26:bb:36:3a:bb:8f:83:f1:
                    6d:2d:f4:62:83:d0:8e:bc:c1:53:16:ba:46:4c:0c:
                    07:ac:81:0c:1d:26:5b:29:2e:e4:2e:44:f8:07:4d:
                    44:ed:c4:a8:55:1b:ac:04:43:0c:c3:24:87:93:b0:
                    bb:54:f9:38:6a:d7:72:d2:c5:72:6a:51:64:cf:f8:
                    0c:72:dd:b4:a3:2e:83:43:ce:ff:6e:79:c3:92:24:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B6:B4:22:30:59:FE:76:95:95:EB:EE:A0:3C:4D:D6:27:27:E2:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.110.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:61:cf:04:5b:25:b8:c1:29:34:ec:96:5f:53:67:a8:bb:
         7c:3b:e8:31:38:80:2d:1a:04:dc:dd:5d:9c:0c:f1:ca:95:2b:
         c2:e0:3e:10:6c:8e:69:aa:a9:71:a5:53:a1:9e:35:76:30:a8:
         c7:9e:c4:46:44:eb:92:75:c8:7b:59:94:cc:32:cc:15:47:d0:
         a5:2e:5d:a2:77:33:80:bb:93:62:ee:d5:c8:18:3f:7b:47:95:
         94:ef:9c:41:50:58:9d:29:34:8a:92:c1:65:df:8b:46:74:8e:
         82:b7:f3:bb:07:cc:3d:46:ac:c8:9a:19:bb:d3:49:a1:b9:0d:
         d6:1a:f6:19:8a:cf:6d:e1:4d:a8:e9:71:2f:29:71:ad:60:ca:
         05:41:d9:d8:78:8f:fa:99:4c:a0:6c:fb:82:03:8c:ea:79:1d:
         34:cb:c7:db:df:22:b3:90:19:fe:4f:40:8e:d5:cd:54:98:e7:
         bd:33:02:55:b5:51:21:f9:c6:24:38:fd:8d:31:4a:95:b1:af:
         1a:03:3f:a0:1a:ed:ec:d1:63:8b:cb:e8:7c:f4:15:a3:e1:65:
         8f:64:15:b1:2d:1b:ec:7c:c3:a4:c4:84:55:ee:e9:39:b9:27:
         89:7e:67:8b:fe:a3:fe:75:1b:d4:3b:c4:62:59:39:61:a3:e1:
         31:5b:b4:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0m8PGfRloq2EQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz
ODdjMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
YmYzZjdiNDEtMTlmZS00MTU0LTk2MzktY2RjMGQ4NjI0MzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgwBF0mA7NMCLJxNP71I3nVtn6vKwR76dbHU
D+RcRohbk/1+dM9Jrd/UVyaeCcxUgFHyIkpGnlDljUmz7czC1vflRbrbo+o8gmn5
dKEuY10VlEvAnYNcHe09bJWHTYDtgXhQMFs2i5BccZ2zUyfcLx9zL9KG3LGZMtqf
P7GNzRJMj/8SHF18a9iu/erRWvAh+ZkRaTdf/uSvXVtqWhAZ3SC1XxZDvqUgiu2b
Jrs2OruPg/FtLfRig9COvMFTFrpGTAwHrIEMHSZbKS7kLkT4B01E7cSoVRusBEMM
wySHk7C7VPk4atdy0sVyalFkz/gMct20oy6DQ87/bnnDkiRAlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE62tCIwWf52lZXr7qA8TdYnJ+KhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm
NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMmE5OWY2ZDctYWVkNS0z
ZjQ3LThiMzEtN2FiNmQzOWNhYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0
ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4
Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy
OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx27wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADecYc8EWyW4wSk07JZfU2eou3w76DE4gC0aBNzdXZwM8cqVK8LgPhBs
jmmqqXGlU6GeNXYwqMeexEZE65J1yHtZlMwyzBVH0KUuXaJ3M4C7k2Lu1cgYP3tH
lZTvnEFQWJ0pNIqSwWXfi0Z0joK387sHzD1GrMiaGbvTSaG5DdYa9hmKz23hTajp
cS8pca1gygVB2dh4j/qZTKBs+4IDjOp5HTTLx9vfIrOQGf5PQI7VzVSY570zAlW1
USH5xiQ4/Y0xSpWxrxoDP6Aa7ezRY4vL6Hz0FaPhZY9kFbEtG+x8w6TEhFXu6Tm5
J4l+Z4v+o/51G9Q7xGJZOWGj4TFbtJc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:43:52 2025 by rpki-client