Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5be89785-9063-3d1e-a17e-33301847b70b.roa
File:                     5be89785-9063-3d1e-a17e-33301847b70b.roa (raw, json)
Hash identifier:          lqX/FMbPIyTirz820A4/qIpL4rU+gZoHRfSj/Te20uo=
Subject key identifier:   A6:49:64:B8:4C:6C:4B:3A:38:E2:7F:EA:FF:0B:7A:B7:65:3C:16:EC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858486695C967B5EF0A36930B4180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5be89785-9063-3d1e-a17e-33301847b70b.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     22773
IP address blocks:        24.249.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c9:67:b5:ef:0a:36:93:0b:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=2dab5654-d2d0-4430-b2e2-e53850aecbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:a8:5c:7a:3f:b6:5e:f4:2f:06:a1:0d:21:
                    be:d2:4b:a1:3d:9a:69:7c:17:61:89:37:c4:04:8e:
                    c1:e2:f8:9e:d7:1a:ca:58:62:ca:c5:5f:3b:9c:ff:
                    32:cc:95:e4:5d:b0:c1:02:aa:f6:2a:e6:ec:0c:50:
                    05:a4:a9:7d:0b:4f:4b:a6:37:35:6f:8e:73:33:0c:
                    30:4a:ce:d5:e5:21:8f:23:d6:fe:17:6c:e8:ee:d0:
                    77:b4:f2:3a:8d:c7:c8:3d:b3:7d:e4:48:cf:3d:a3:
                    58:d5:66:38:b8:39:3f:16:74:34:7e:41:4c:dc:ab:
                    16:4c:fc:1b:6f:81:6f:1f:8a:fd:90:62:84:5a:e3:
                    aa:64:6d:75:72:c7:3b:99:e5:80:44:7a:f5:f5:d4:
                    8a:65:fa:31:40:e7:52:bb:7c:ce:33:62:04:92:99:
                    72:bf:34:03:3d:62:77:a7:e4:49:3d:75:62:d9:05:
                    32:c4:29:4b:a8:7d:86:78:c6:61:5a:e7:3b:70:c2:
                    d4:b4:d7:1e:41:b4:2a:e2:9d:7b:44:3d:2c:8c:e1:
                    ef:72:50:e7:27:43:29:03:ed:f3:2d:07:7a:20:83:
                    9a:3f:ac:a2:1a:3d:9a:cd:ef:67:91:ae:ab:ca:16:
                    8c:90:6f:0b:bd:4f:62:23:3d:c2:25:f9:15:11:bc:
                    e5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:49:64:B8:4C:6C:4B:3A:38:E2:7F:EA:FF:0B:7A:B7:65:3C:16:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5be89785-9063-3d1e-a17e-33301847b70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.249.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:46:c5:d2:e7:12:d3:d6:4a:55:2e:a8:ac:7b:4c:d1:b4:49:
         3b:16:de:71:26:db:15:2b:ac:2c:98:18:c6:dc:b6:5f:a8:d9:
         c3:be:8c:2c:60:12:a9:de:79:cb:79:cc:93:68:65:90:05:25:
         20:c7:46:78:6f:bc:32:be:d0:04:14:47:7c:d2:31:5a:32:a1:
         e4:59:3c:b4:5d:9a:cf:e0:63:d6:03:cd:26:e6:93:48:e6:47:
         7b:0b:3b:5e:0b:34:e8:44:00:b5:e2:06:4e:f2:df:2a:ba:64:
         dc:7f:fe:08:cd:9f:c9:e5:db:d5:3d:f5:9e:2b:e1:3c:1b:29:
         b9:a1:ae:4a:a6:74:0a:0f:24:a6:62:3c:2a:44:0e:03:f2:97:
         9f:58:4d:6f:ca:3f:2d:f8:c9:40:e9:d8:be:a0:6e:2d:52:32:
         f9:fe:fe:45:9a:b7:40:d6:88:92:d7:fe:52:9e:93:3e:77:f4:
         0c:86:ab:d2:38:dd:29:b4:fc:23:4d:b9:3a:57:a9:33:0c:76:
         9d:7a:13:32:f9:26:a3:27:61:3e:1e:d4:80:c8:87:c0:fd:ec:
         41:ed:68:3b:c4:04:1e:3f:e3:46:aa:9d:37:7b:eb:17:11:83:
         af:61:bc:3c:eb:db:0c:c7:15:c9:13:19:a2:7a:ca:5c:9e:d4:
         f7:d0:c6:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlclnte8KNpMLQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
MmRhYjU2NTQtZDJkMC00NDMwLWIyZTItZTUzODUwYWVjYmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ+oXHo/tl70LwahDSG+0kuhPZppfBdhiTfE
BI7B4vie1xrKWGLKxV87nP8yzJXkXbDBAqr2KubsDFAFpKl9C09Lpjc1b45zMwww
Ss7V5SGPI9b+F2zo7tB3tPI6jcfIPbN95EjPPaNY1WY4uDk/FnQ0fkFM3KsWTPwb
b4FvH4r9kGKEWuOqZG11csc7meWARHr19dSKZfoxQOdSu3zOM2IEkplyvzQDPWJ3
p+RJPXVi2QUyxClLqH2GeMZhWuc7cMLUtNceQbQq4p17RD0sjOHvclDnJ0MpA+3z
LQd6IIOaP6yiGj2aze9nka6ryhaMkG8LvU9iIz3CJfkVEbzlywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZJZLhMbEs6OOJ/6v8LerdlPBbsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWJlODk3ODUtOTA2My0z
ZDFlLWExN2UtMzMzMDE4NDdiNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPl7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1GxdLnEtPWSlUuqKx7TNG0STsW3nEm2xUrrCyYGMbctl+o2cO+jCxg
Eqneect5zJNoZZAFJSDHRnhvvDK+0AQUR3zSMVoyoeRZPLRdms/gY9YDzSbmk0jm
R3sLO14LNOhEALXiBk7y3yq6ZNx//gjNn8nl29U99Z4r4TwbKbmhrkqmdAoPJKZi
PCpEDgPyl59YTW/KPy34yUDp2L6gbi1SMvn+/kWat0DWiJLX/lKekz539AyGq9I4
3Sm0/CNNuTpXqTMMdp16EzL5JqMnYT4e1IDIh8D97EHtaDvEBB4/40aqnTd76xcR
g69hvDzr2wzHFckTGaJ6ylye1PfQxq4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:26:12 2025 by rpki-client