Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/06165fb0-9da3-3f49-9f8e-7682bf0d65e2.roa
File:                     06165fb0-9da3-3f49-9f8e-7682bf0d65e2.roa (raw, json)
Hash identifier:          5TK4Tg3gqr6Hyfl/zLzBF/XpWjtFgHrMxB4PO+EkJi0=
Subject key identifier:   7C:21:59:C5:12:1A:8C:06:49:C2:35:70:0F:61:B4:A1:7C:92:D4:AE
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F432858486D90508670298B8C8E1A6940
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/06165fb0-9da3-3f49-9f8e-7682bf0d65e2.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     63145
IP address blocks:        149.112.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:50:86:70:29:8b:8c:8e:1a:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=056dd9ac-ced4-4ae0-a78b-f9fe83b9054c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:a4:46:ea:e8:25:1c:b2:01:4c:75:33:0b:
                    10:74:e6:53:d5:21:50:39:0d:ec:a8:50:b0:38:c7:
                    54:6d:f8:f9:4f:eb:8c:e1:d9:93:a3:2c:7e:2e:19:
                    fa:c7:90:02:01:30:85:86:11:a4:90:2f:71:b8:cb:
                    44:f4:03:3c:7c:95:d1:cc:6b:7e:1c:06:27:d7:0b:
                    ae:87:66:73:8b:bf:6f:e2:66:c8:3d:6b:fc:72:bc:
                    ab:77:d3:50:b1:36:b0:74:95:c2:79:d2:3c:8c:37:
                    66:b0:83:50:b3:5d:9b:d2:80:26:cc:9e:82:07:7c:
                    db:b3:f4:6d:5f:d7:d4:d8:7c:94:a4:ca:2b:b5:65:
                    e3:31:9a:f3:af:99:d8:55:ed:6e:e3:a3:d3:f4:ad:
                    6e:1c:03:b6:cc:59:d5:50:65:d0:f1:5a:f2:d0:3d:
                    36:3e:a9:00:ff:30:0e:88:b6:18:46:ff:9f:1f:e2:
                    a7:7d:88:5f:b2:92:2a:a2:bb:f3:f1:98:57:bd:86:
                    56:3a:9b:d7:18:02:f6:f6:ab:d1:05:17:5c:83:9b:
                    fa:eb:c0:3a:f5:66:58:b9:d2:89:f1:ed:6a:84:ec:
                    77:92:24:43:7c:7b:79:45:75:3f:cb:8c:90:69:92:
                    10:7f:70:71:cb:9c:89:4a:fb:eb:8b:46:4d:58:1c:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:21:59:C5:12:1A:8C:06:49:C2:35:70:0F:61:B4:A1:7C:92:D4:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/06165fb0-9da3-3f49-9f8e-7682bf0d65e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:5a:2e:89:21:b2:f9:c8:5b:e6:19:b7:cf:25:3d:0f:c7:
         b8:43:ea:22:85:d8:b1:cc:70:c1:fc:dd:99:e6:a4:a4:32:a8:
         dd:e2:5e:dd:09:ad:80:3a:22:69:35:6c:55:99:ed:fa:07:34:
         d5:fd:42:1a:07:5e:b7:5c:7c:57:e5:21:53:09:7f:72:2c:b4:
         bc:77:b9:68:e2:bb:50:7a:8a:06:65:12:50:f2:3e:10:e7:9f:
         2a:ec:cb:c3:26:54:70:de:88:70:0d:94:ff:a1:7d:34:8a:dc:
         fa:05:08:ef:10:b2:b7:fe:ad:93:01:f4:ab:04:ca:a7:3c:51:
         59:a6:11:9b:37:4a:c2:4c:56:3a:69:14:70:e9:d2:ca:63:1d:
         76:f5:3a:39:f7:1f:94:49:c1:d5:73:07:58:ce:d1:5a:99:15:
         95:25:75:86:42:b0:ef:3e:59:d3:bd:99:aa:70:0e:99:ab:ae:
         91:92:28:1d:9d:8a:04:3a:9f:30:7e:1b:3d:d8:58:87:63:89:
         12:16:68:a3:b0:75:e0:b2:fd:1a:34:81:54:1c:76:8b:c1:28:
         c9:47:38:4d:35:0a:8f:d1:1c:c9:da:00:60:19:56:49:a4:66:
         ad:24:4c:d7:00:78:79:b5:27:2e:07:b3:8e:a6:24:ca:b5:bd:
         18:c6:1a:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFCGcCmLjI4aaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2
NTFkMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDU2ZGQ5YWMtY2VkNC00YWUwLWE3OGItZjlmZTgzYjkwNTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8WkRuroJRyyAUx1MwsQdOZT1SFQOQ3sqFCw
OMdUbfj5T+uM4dmToyx+Lhn6x5ACATCFhhGkkC9xuMtE9AM8fJXRzGt+HAYn1wuu
h2Zzi79v4mbIPWv8cryrd9NQsTawdJXCedI8jDdmsINQs12b0oAmzJ6CB3zbs/Rt
X9fU2HyUpMortWXjMZrzr5nYVe1u46PT9K1uHAO2zFnVUGXQ8Vry0D02PqkA/zAO
iLYYRv+fH+KnfYhfspIqorvz8ZhXvYZWOpvXGAL29qvRBRdcg5v668A69WZYudKJ
8e1qhOx3kiRDfHt5RXU/y4yQaZIQf3Bxy5yJSvvri0ZNWBwGXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwhWcUSGowGScI1cA9htKF8ktSuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1
ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvMDYxNjVmYjAtOWRhMy0z
ZjQ5LTlmOGUtNzY4MmJmMGQ2NWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi
NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2
NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri
ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAt5Wi6JIbL5yFvmGbfPJT0Px7hD6iKF2LHMcMH83ZnmpKQyqN3iXt0J
rYA6Imk1bFWZ7foHNNX9QhoHXrdcfFflIVMJf3IstLx3uWjiu1B6igZlElDyPhDn
nyrsy8MmVHDeiHANlP+hfTSK3PoFCO8Qsrf+rZMB9KsEyqc8UVmmEZs3SsJMVjpp
FHDp0spjHXb1Ojn3H5RJwdVzB1jO0VqZFZUldYZCsO8+WdO9mapwDpmrrpGSKB2d
igQ6nzB+Gz3YWIdjiRIWaKOwdeCy/Ro0gVQcdovBKMlHOE01Co/RHMnaAGAZVkmk
Zq0kTNcAeHm1Jy4Hs46mJMq1vRjGGs0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:58 2025 by rpki-client