Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/9b11998f-c03e-3565-b33d-908b5f9e5a87.roa
File:                     9b11998f-c03e-3565-b33d-908b5f9e5a87.roa (raw, json)
Hash identifier:          KKi1U8oCuHYLw1QOPTbKPg4YOZEUt6gun4WZzWbf2UY=
Subject key identifier:   6F:01:D1:28:12:A1:8E:A8:47:AC:02:51:8C:FE:27:E0:CD:A6:2F:00
Certificate issuer:       /CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
Certificate serial:       010D0C9F4328584832F02A8E9D0680B2A6138980
Authority key identifier: B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/9b11998f-c03e-3565-b33d-908b5f9e5a87.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     13984
IP address blocks:        205.149.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:2a:8e:9d:06:80:b2:a6:13:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=157230f1-e523-47d3-86f2-67fb65df7004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4d:c4:7e:c3:65:26:48:b4:cd:75:ff:1a:79:
                    55:8d:dd:e6:66:ad:8b:0f:b3:bc:d5:c7:33:f8:1f:
                    b9:1e:2d:a7:50:03:e8:a1:e9:ea:d4:d0:2b:72:1b:
                    18:b6:2e:1b:13:37:f3:e9:4f:71:c0:60:b8:e1:44:
                    ab:d4:41:60:7f:e2:b6:ab:08:54:31:e2:0f:8d:5a:
                    ca:21:83:fd:af:b9:49:80:42:91:4a:30:7a:7c:cb:
                    20:68:e9:8e:b4:59:83:07:c5:22:03:d4:9a:94:3d:
                    02:45:5e:67:3e:74:54:db:07:25:0e:86:c1:74:5b:
                    9f:73:8c:2b:15:22:33:6c:3b:6d:5a:98:c1:ea:0a:
                    ee:99:5a:64:91:11:61:9f:66:82:d4:e2:55:65:d5:
                    ac:d5:c3:fa:b0:60:86:60:ef:34:07:b1:2e:f8:2e:
                    0f:2c:5b:0b:0d:0c:04:15:6f:c1:0b:38:ca:af:ea:
                    75:8a:5d:bd:c2:ab:56:b7:96:24:59:ac:28:42:f7:
                    26:35:f8:0b:a3:ab:ef:d1:37:24:c9:b2:0a:44:ad:
                    24:91:e2:4b:d0:70:32:f8:60:86:7e:17:a1:62:10:
                    02:a0:fb:0b:be:d4:a7:d9:35:a4:39:5f:d2:a8:5d:
                    5e:a6:81:cc:ea:10:82:5c:e2:32:e0:ca:3b:10:9c:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:01:D1:28:12:A1:8E:A8:47:AC:02:51:8C:FE:27:E0:CD:A6:2F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/9b11998f-c03e-3565-b33d-908b5f9e5a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl

            X509v3 Authority Key Identifier:
                keyid:B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.149.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:72:c9:60:7d:42:09:0f:d1:86:59:c1:bf:e4:20:ad:fb:
         00:59:eb:14:a7:b2:59:d1:f1:ff:65:60:2a:d0:a0:57:65:9a:
         34:41:4e:90:d2:ae:22:21:7a:cc:bd:02:7c:35:0b:9c:e3:76:
         82:4b:c5:cd:0a:99:9d:61:50:06:5e:cb:f0:89:0c:0b:9f:29:
         de:ce:b4:5c:79:ef:fd:2b:4d:42:22:e8:8b:f8:39:40:dd:f3:
         21:38:65:a8:0e:c5:f9:68:ea:67:a5:52:9d:d6:5a:f0:1d:a9:
         48:2e:06:e7:1c:78:66:25:05:62:34:df:a9:37:8f:19:68:98:
         dc:99:e1:9e:a7:7a:7b:84:d2:0b:55:a6:68:80:31:87:f0:1a:
         d7:ca:60:cb:44:eb:27:f0:d1:42:3c:10:30:a7:24:56:9d:e5:
         5d:1d:8a:fa:7a:66:cf:d0:ac:f4:3a:c9:50:1f:e9:5b:8c:90:
         ba:ec:ed:18:17:3b:41:44:f7:57:c6:3d:9b:6f:6f:18:2b:a7:
         a3:0f:8d:a6:b6:5e:e3:dd:5f:7b:4f:59:29:f3:43:72:dd:5e:
         d5:3e:05:f2:94:45:19:71:61:d5:5e:39:db:ec:9d:e0:6b:6d:
         27:d5:99:d8:18:2f:87:9f:ad:be:b8:c7:ba:e1:76:c5:84:d4:
         41:95:38:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8CqOnQaAsqYTiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2M0OGQ1ZmItMDU5Yi00ZmQyLTkyYTgtMzFmMTQzZjVm
NzE5MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTU3MjMwZjEtZTUyMy00N2QzLTg2ZjItNjdmYjY1ZGY3MDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk3EfsNlJki0zXX/GnlVjd3mZq2LD7O81ccz
+B+5Hi2nUAPooenq1NArchsYti4bEzfz6U9xwGC44USr1EFgf+K2qwhUMeIPjVrK
IYP9r7lJgEKRSjB6fMsgaOmOtFmDB8UiA9SalD0CRV5nPnRU2wclDobBdFufc4wr
FSIzbDttWpjB6grumVpkkRFhn2aC1OJVZdWs1cP6sGCGYO80B7Eu+C4PLFsLDQwE
FW/BCzjKr+p1il29wqtWt5YkWawoQvcmNfgLo6vv0TckybIKRK0kkeJL0HAy+GCG
fhehYhACoPsLvtSn2TWkOV/SqF1epoHM6hCCXOIy4Mo7EJwYywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8B0SgSoY6oR6wCUYz+J+DNpi8AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4
ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYxNDNmNWY3MTkvOWIxMTk5OGYtYzAzZS0z
NTY1LWIzM2QtOTA4YjVmOWU1YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M0OGQ1ZmItMDU5Yi00ZmQyLTky
YTgtMzFmMTQzZjVmNzE5LzdjNDhkNWZiLTA1OWItNGZkMi05MmE4LTMxZjE0M2Y1
ZjcxOS5jcmwwHwYDVR0jBBgwFoAUsNZ6EZWdK+SlsteNAwZ2bkyD94IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYx
NDNmNWY3MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzZWGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqmcslgfUIJD9GGWcG/5CCt+wBZ6xSnslnR8f9lYCrQoFdlmjRBTpDS
riIhesy9Anw1C5zjdoJLxc0KmZ1hUAZey/CJDAufKd7OtFx57/0rTUIi6Iv4OUDd
8yE4ZagOxflo6melUp3WWvAdqUguBucceGYlBWI036k3jxlomNyZ4Z6nenuE0gtV
pmiAMYfwGtfKYMtE6yfw0UI8EDCnJFad5V0divp6Zs/QrPQ6yVAf6VuMkLrs7RgX
O0FE91fGPZtvbxgrp6MPjaa2XuPdX3tPWSnzQ3LdXtU+BfKURRlxYdVeOdvsneBr
bSfVmdgYL4efrb64x7rhdsWE1EGVOEM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:56 2025 by rpki-client