Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/4ee21dfc-36b2-372d-aed9-eb81a9135b91.roa
File:                     4ee21dfc-36b2-372d-aed9-eb81a9135b91.roa (raw, json)
Hash identifier:          K3oJFwQ9WKLInoGVNKMMAi9rnW30ePojTdu4n7kBMEk=
Subject key identifier:   08:1E:3F:4B:07:B8:7D:83:94:2E:67:54:C5:AD:D4:A7:08:18:E0:EB
Certificate issuer:       /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial:       010D0C9F43285848A1360F8BBB0489335C327100
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/4ee21dfc-36b2-372d-aed9-eb81a9135b91.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     15108
IP address blocks:        192.111.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:0f:8b:bb:04:89:33:5c:32:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=b0a751a7-dce4-44e4-beb5-a911c467414f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:49:76:5e:33:bb:4e:03:9f:87:db:bd:5e:
                    68:23:6d:2e:e6:14:41:2e:70:04:36:4e:a9:fa:b0:
                    8f:d1:25:37:87:9b:11:7b:8a:5e:ef:be:5b:2e:54:
                    c2:cc:62:0f:8a:e7:11:77:70:6a:24:11:69:64:cf:
                    c4:97:d6:55:50:92:8e:03:ed:5f:a9:6c:3f:b8:91:
                    03:c3:d5:c7:07:6d:d4:b4:02:48:76:2b:6b:2f:5d:
                    7d:10:35:34:53:77:ab:62:cb:b5:dd:a2:7e:7c:d6:
                    f0:b9:a1:a6:44:59:27:d7:44:f6:80:0c:ef:80:bb:
                    d6:f3:27:bc:50:aa:7b:36:94:05:29:1a:f7:e5:5b:
                    ac:cb:26:a4:6a:fe:62:fa:75:fb:8d:ec:33:60:86:
                    42:54:85:68:42:37:77:80:d2:7d:7e:42:54:47:c2:
                    ac:ec:31:8d:ab:b8:d8:4d:70:0f:db:2a:14:69:2f:
                    46:b5:be:83:3e:08:4d:75:e8:ce:da:14:09:73:bc:
                    87:f6:64:08:36:13:1c:15:d8:fc:3d:fc:0f:b1:82:
                    94:58:2a:ab:1a:ad:d8:52:e0:9c:ed:5a:a6:99:25:
                    ca:1e:52:58:d1:16:4c:c6:71:dd:2a:6b:21:50:c7:
                    6e:77:26:b7:7d:90:8c:4c:d5:94:27:c7:a3:b6:51:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1E:3F:4B:07:B8:7D:83:94:2E:67:54:C5:AD:D4:A7:08:18:E0:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/4ee21dfc-36b2-372d-aed9-eb81a9135b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:85:68:a9:99:60:f5:e5:c5:30:cb:d6:6d:df:93:d9:47:
         81:bd:d5:2c:ad:c8:a8:75:ca:1f:f2:fa:c1:05:c8:ff:0d:89:
         e6:70:48:70:ee:9d:1b:22:04:30:63:62:41:e8:3a:63:5d:23:
         aa:60:40:d6:1c:0a:d2:22:4f:1a:56:4e:0d:32:95:13:23:e4:
         02:8b:8f:13:4a:92:c3:76:e0:0f:21:ab:3c:9d:ee:e2:a7:18:
         30:22:f4:80:aa:3c:7e:1e:53:6a:e6:f3:1b:e7:f6:ab:24:fd:
         cc:52:f9:17:5f:5b:18:41:38:b1:76:05:33:0b:8b:fb:5c:d9:
         2d:d7:00:2d:56:a7:d8:1d:59:f7:7d:82:73:f4:df:55:d0:5c:
         4a:84:a8:e7:05:fe:b9:7b:0e:39:77:cb:73:11:54:89:48:94:
         55:a7:a1:c5:2f:55:ec:ff:b7:dc:31:f5:c3:d3:0d:45:6c:0d:
         de:39:bf:9f:a9:55:4f:ea:3b:17:ff:72:1e:c5:be:9e:d8:53:
         85:8f:ca:b8:6f:04:68:fb:27:9f:cc:d1:fd:a7:a7:91:2a:c3:
         7e:05:da:0e:49:4e:94:ee:d7:e1:de:e5:af:a1:ad:6b:c6:f4:
         b0:9e:0c:8a:e0:0f:1a:11:d2:f9:9d:0d:43:98:19:a5:93:2f:
         bd:96:cc:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNg+LuwSJM1wycQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4
ZmNkMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
YjBhNzUxYTctZGNlNC00NGU0LWJlYjUtYTkxMWM0Njc0MTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGZJdl4zu04Dn4fbvV5oI20u5hRBLnAENk6p
+rCP0SU3h5sRe4pe775bLlTCzGIPiucRd3BqJBFpZM/El9ZVUJKOA+1fqWw/uJED
w9XHB23UtAJIditrL119EDU0U3erYsu13aJ+fNbwuaGmRFkn10T2gAzvgLvW8ye8
UKp7NpQFKRr35Vusyyakav5i+nX7jewzYIZCVIVoQjd3gNJ9fkJUR8Ks7DGNq7jY
TXAP2yoUaS9Gtb6DPghNdejO2hQJc7yH9mQINhMcFdj8PfwPsYKUWCqrGq3YUuCc
7VqmmSXKHlJY0RZMxnHdKmshUMdudya3fZCMTNWUJ8ejtlGgNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgeP0sHuH2DlC5nVMWt1KcIGODrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3
YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvNGVlMjFkZmMtMzZiMi0z
NzJkLWFlZDktZWI4MWE5MTM1YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1
OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5
OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy
MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWxhWipmWD15cUwy9Zt35PZR4G91SytyKh1yh/y+sEFyP8NieZwSHDu
nRsiBDBjYkHoOmNdI6pgQNYcCtIiTxpWTg0ylRMj5AKLjxNKksN24A8hqzyd7uKn
GDAi9ICqPH4eU2rm8xvn9qsk/cxS+RdfWxhBOLF2BTMLi/tc2S3XAC1Wp9gdWfd9
gnP031XQXEqEqOcF/rl7Djl3y3MRVIlIlFWnocUvVez/t9wx9cPTDUVsDd45v5+p
VU/qOxf/ch7Fvp7YU4WPyrhvBGj7J5/M0f2np5Eqw34F2g5JTpTu1+He5a+hrWvG
9LCeDIrgDxoR0vmdDUOYGaWTL72WzPk=
-----END CERTIFICATE-----
Generated at Thu May 8 08:13:17 2025 by rpki-client