Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5227a00f-e981-345e-81e2-cd5f0ff2364a.roa
File:                     5227a00f-e981-345e-81e2-cd5f0ff2364a.roa (raw, json)
Hash identifier:          Np5511dv03lT+R2GEjiNUZsBnIJsQ1bw2Fi/89ARvk4=
Subject key identifier:   B8:85:4B:86:D2:BD:8B:22:14:C6:64:F2:CF:60:DD:BA:40:78:67:EB
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285848911B4045A98B2AF529D15220
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5227a00f-e981-345e-81e2-cd5f0ff2364a.roa
Signing time:             Thu 16 Jan 2025 19:34:00 +0000
ROA not before:           Thu 16 Jan 2025 19:34:00 +0000
ROA not after:            Wed 16 Apr 2025 18:34:00 +0000
asID:                     30336
IP address blocks:        207.96.244.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:1b:40:45:a9:8b:2a:f5:29:d1:52:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jan 16 19:34:00 2025 GMT
            Not After : Apr 16 18:34:00 2025 GMT
        Subject: CN=d054b91c-52ed-443b-94e8-5777a26d4627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:8a:3d:c1:18:74:a6:12:ae:4a:b8:af:3b:
                    b7:f8:df:82:d5:42:24:ca:11:bf:ec:96:c1:84:32:
                    09:a1:85:f4:b1:93:8c:e7:aa:e0:31:cd:60:10:92:
                    d7:d2:6e:82:63:bc:d8:e1:a0:ee:65:6a:e7:c2:03:
                    d6:fd:ac:f8:c3:cb:fd:6c:d8:05:24:01:dc:d1:76:
                    72:92:bd:6b:1a:d4:ff:0f:e6:03:23:c5:fe:bf:6f:
                    19:14:75:5d:7b:5e:a4:81:24:3c:9a:b3:e8:32:d6:
                    44:7f:ec:97:68:a7:e7:7a:ac:f2:96:c8:53:69:a1:
                    f3:cf:09:fd:ce:33:41:4a:3c:53:71:7e:1a:c0:93:
                    93:22:a5:14:15:44:67:3b:ee:d3:c3:67:b0:2b:e8:
                    87:08:5b:a1:46:0d:24:22:53:ee:9e:29:36:2c:49:
                    f9:62:47:30:e2:e5:60:23:43:34:9f:d7:87:5e:15:
                    d9:9f:78:45:31:0c:13:ad:e6:b1:23:35:7a:d6:d2:
                    67:a6:83:70:3d:15:3f:d3:6c:3b:e7:5b:76:57:45:
                    5a:cc:e4:fc:f7:5d:a9:dd:ce:56:fa:7d:50:ae:3c:
                    b7:22:14:34:42:18:ab:ac:88:0a:c7:1f:1f:89:58:
                    cf:8c:5d:3c:63:a3:df:b5:6a:a7:8e:16:4d:40:85:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:85:4B:86:D2:BD:8B:22:14:C6:64:F2:CF:60:DD:BA:40:78:67:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5227a00f-e981-345e-81e2-cd5f0ff2364a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:53:f4:8c:b6:9e:03:0d:4c:fd:61:be:18:33:4e:2f:76:73:
         02:ca:6b:9c:a4:09:57:fd:73:27:e3:37:9e:5d:9e:da:8b:42:
         b2:b2:e9:7b:95:d6:5b:c2:de:69:3b:d8:21:db:c0:77:0d:62:
         3e:87:63:46:ab:f5:63:fe:a5:84:84:35:c4:89:f6:eb:89:bb:
         c3:c0:65:a1:7e:68:ef:93:f2:b7:96:de:13:a0:6f:bd:66:ff:
         9a:f4:73:a2:81:55:65:e0:66:8d:b3:4a:fc:1e:21:36:0e:1b:
         b9:6a:d0:fa:95:cb:3e:10:40:de:ad:f7:40:63:67:8e:38:e8:
         bd:1a:4f:2b:23:ae:bf:9b:cf:4f:8c:b9:b6:1c:61:c2:49:23:
         0e:d3:e8:ee:95:25:5f:ff:90:ad:aa:37:2f:73:4c:ad:e4:63:
         db:13:a7:87:27:68:7a:dd:ea:db:55:c4:38:88:35:04:27:24:
         ca:f1:d8:bd:9f:e0:87:bb:f6:cd:19:47:e1:76:14:b0:a7:06:
         5b:7f:03:3b:03:4b:94:8e:1e:9d:54:31:33:e7:a1:bd:d3:7f:
         6d:ef:86:51:89:58:fc:bf:f2:30:77:59:98:82:54:c1:e9:bd:
         88:7a:18:d8:fc:04:ed:b7:7d:06:54:5e:f5:a4:43:1e:26:bb:
         18:ac:54:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiRG0BFqYsq9SnRUiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDExNjE5MzQwMFoXDTI1MDQxNjE4MzQwMFowLzEtMCsGA1UEAxMk
ZDA1NGI5MWMtNTJlZC00NDNiLTk0ZTgtNTc3N2EyNmQ0NjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSuKPcEYdKYSrkq4rzu3+N+C1UIkyhG/7JbB
hDIJoYX0sZOM56rgMc1gEJLX0m6CY7zY4aDuZWrnwgPW/az4w8v9bNgFJAHc0XZy
kr1rGtT/D+YDI8X+v28ZFHVde16kgSQ8mrPoMtZEf+yXaKfneqzylshTaaHzzwn9
zjNBSjxTcX4awJOTIqUUFURnO+7Tw2ewK+iHCFuhRg0kIlPunik2LEn5Ykcw4uVg
I0M0n9eHXhXZn3hFMQwTreaxIzV61tJnpoNwPRU/02w751t2V0VazOT8912p3c5W
+n1Qrjy3IhQ0QhirrIgKxx8fiVjPjF08Y6PftWqnjhZNQIXUNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLiFS4bSvYsiFMZk8s9g3bpAeGfrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNTIyN2EwMGYtZTk4MS0z
NDVlLTgxZTItY2Q1ZjBmZjIzNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz2D0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9T9Iy2ngMNTP1hvhgzTi92cwLKa5ykCVf9cyfjN55dntqLQrKy6XuV
1lvC3mk72CHbwHcNYj6HY0ar9WP+pYSENcSJ9uuJu8PAZaF+aO+T8reW3hOgb71m
/5r0c6KBVWXgZo2zSvweITYOG7lq0PqVyz4QQN6t90BjZ4446L0aTysjrr+bz0+M
ubYcYcJJIw7T6O6VJV//kK2qNy9zTK3kY9sTp4cnaHrd6ttVxDiINQQnJMrx2L2f
4Ie79s0ZR+F2FLCnBlt/AzsDS5SOHp1UMTPnob3Tf23vhlGJWPy/8jB3WZiCVMHp
vYh6GNj8BO23fQZUXvWkQx4muxisVJk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:09 2025 by rpki-client