Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
File:                     e6965540-cbd0-3930-b638-a04886e69eac.roa (raw, json)
Hash identifier:          qkQiu5OPJi1mW31mEgY6VqpQFgLgMNi2qHDcdBzmhGo=
Subject key identifier:   F0:1F:AF:08:F7:F4:4A:D7:AB:8E:B4:A6:35:62:9D:53:90:21:14:3F
Certificate issuer:       /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
Certificate serial:       010D0C9F432858484C1025F8562760ABF0EC3A40
Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     4983
IP address blocks:        192.55.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:25:f8:56:27:60:ab:f0:ec:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=cccf9d5b-8a8c-49ba-823e-b2fe286aed09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:ac:3f:b2:28:71:09:da:52:98:cb:ce:d7:
                    18:39:b1:4a:48:a0:5e:56:46:1f:eb:23:e1:c3:a0:
                    90:b4:8e:ed:cd:4b:e8:f7:2c:8c:ab:a7:6c:63:64:
                    e6:00:ae:ed:b3:22:b0:93:1e:43:bc:84:dd:19:b9:
                    eb:af:ac:85:dd:ce:29:e3:c5:fc:db:c0:e6:1a:08:
                    41:f5:96:65:5b:9e:cf:41:94:9d:18:5c:70:9b:21:
                    e8:16:1d:5f:e5:cd:57:89:c3:30:e9:af:f7:84:c9:
                    c5:20:a9:36:63:b4:c0:63:74:cf:51:56:20:38:d9:
                    ab:5d:8f:be:61:d0:e4:a3:36:40:18:09:c1:7b:a8:
                    94:29:09:ba:51:db:ff:87:bf:d2:1a:17:12:29:a5:
                    ca:43:fd:bc:39:ec:c8:f9:c0:f3:54:eb:d9:39:a6:
                    a2:0c:89:27:c9:62:79:f4:a5:8f:fb:fc:51:7c:b1:
                    66:00:f7:86:63:65:04:e8:d0:d3:63:aa:85:03:1c:
                    86:26:66:cd:6a:fd:d0:db:7a:29:7b:c4:a6:af:6c:
                    71:27:9e:93:b0:55:8e:6a:a5:dc:98:db:0c:40:c7:
                    f3:b4:b1:60:c3:44:dc:a7:7b:93:f7:0a:4e:77:15:
                    19:fe:d2:94:a9:33:b2:d4:7d:7f:6c:bd:73:42:0b:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1F:AF:08:F7:F4:4A:D7:AB:8E:B4:A6:35:62:9D:53:90:21:14:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl

            X509v3 Authority Key Identifier:
                keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:77:09:08:19:51:c1:58:78:34:31:a0:66:32:d9:65:14:
         77:1a:57:e7:ec:7c:80:6e:4f:34:01:2c:56:27:14:14:c8:e2:
         02:b3:f7:5d:d5:f6:27:bf:a8:d7:74:9e:07:85:54:97:65:77:
         64:9e:35:b8:b4:17:86:10:a7:85:81:96:9c:9f:34:1f:b9:5c:
         98:b6:c8:7d:68:78:f3:87:64:7f:a0:82:07:a8:b1:5e:dc:45:
         3e:b9:f2:04:6a:ac:6a:ca:94:ce:15:cc:4b:9b:d3:75:be:b7:
         ae:06:18:a0:ce:88:22:43:ae:9f:97:83:28:bc:72:17:20:fe:
         97:a8:c1:4e:50:7e:d8:6b:2a:08:18:c0:7a:53:39:88:6f:9e:
         6b:15:e5:0c:44:00:70:f3:15:8c:35:91:0a:38:8c:94:20:d4:
         ec:19:81:af:d8:a1:2d:31:10:e8:be:c3:fa:04:92:99:5d:e5:
         f4:4f:15:0a:c9:4f:4b:a2:9f:fd:3f:9a:a7:a4:e0:23:0f:39:
         69:bd:85:71:5e:98:94:8a:70:a0:56:9f:e9:47:67:ea:24:29:
         53:f8:f4:95:dd:e0:c7:d4:25:bb:00:d0:c4:0c:b0:83:73:83:
         de:18:f1:36:3b:52:53:e1:b5:1e:07:4c:e3:eb:d4:8c:85:93:
         40:74:45:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMECX4Vidgq/DsOkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz
ZGMzMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
Y2NjZjlkNWItOGE4Yy00OWJhLTgyM2UtYjJmZTI4NmFlZDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MesP7IocQnaUpjLztcYObFKSKBeVkYf6yPh
w6CQtI7tzUvo9yyMq6dsY2TmAK7tsyKwkx5DvITdGbnrr6yF3c4p48X828DmGghB
9ZZlW57PQZSdGFxwmyHoFh1f5c1XicMw6a/3hMnFIKk2Y7TAY3TPUVYgONmrXY++
YdDkozZAGAnBe6iUKQm6Udv/h7/SGhcSKaXKQ/28OezI+cDzVOvZOaaiDIknyWJ5
9KWP+/xRfLFmAPeGY2UE6NDTY6qFAxyGJmbNav3Q23ope8Smr2xxJ56TsFWOaqXc
mNsMQMfztLFgw0Tcp3uT9wpOdxUZ/tKUqTOy1H1/bL1zQgt5zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAfrwj39ErXq460pjVinVOQIRQ/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh
NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvZTY5NjU1NDAtY2JkMC0z
OTMwLWI2MzgtYTA0ODg2ZTY5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw
ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy
M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy
NzhlMjNkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDcjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyydwkIGVHBWHg0MaBmMtllFHcaV+fsfIBuTzQBLFYnFBTI4gKz913V
9ie/qNd0ngeFVJdld2SeNbi0F4YQp4WBlpyfNB+5XJi2yH1oePOHZH+gggeosV7c
RT658gRqrGrKlM4VzEub03W+t64GGKDOiCJDrp+Xgyi8chcg/peowU5QfthrKggY
wHpTOYhvnmsV5QxEAHDzFYw1kQo4jJQg1OwZga/YoS0xEOi+w/oEkpld5fRPFQrJ
T0uin/0/mqek4CMPOWm9hXFemJSKcKBWn+lHZ+okKVP49JXd4MfUJbsA0MQMsINz
g94Y8TY7UlPhtR4HTOPr1IyFk0B0RWc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:24 2025 by rpki-client