Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/74141ed7-cbdc-3ced-ba5d-a52ae3648bf6.roa
File:                     74141ed7-cbdc-3ced-ba5d-a52ae3648bf6.roa (raw, json)
Hash identifier:          XLGuXJD4NFxFaww1nTu+GhUspEK6sdbqtK7i/qrXofA=
Subject key identifier:   5A:02:49:D7:F8:28:4D:C0:97:CC:B6:7E:EE:08:67:AF:0E:7B:A4:7B
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848424AE4D0B56F4630D668E080
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/74141ed7-cbdc-3ced-ba5d-a52ae3648bf6.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        147.124.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e4:d0:b5:6f:46:30:d6:68:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=11d4d3ac-1439-4567-b70c-1c4ce5e07d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:d5:18:04:00:a5:aa:08:47:88:d6:be:46:
                    9b:59:ab:ba:6e:5c:74:00:48:0e:e6:73:f0:8d:f1:
                    20:68:97:6e:9e:36:77:82:03:86:42:aa:ac:7e:67:
                    8f:23:d7:e5:26:39:41:66:ba:61:6c:46:56:17:2d:
                    eb:bf:94:7a:56:25:78:73:fa:f8:ba:cd:e8:0b:a2:
                    71:3d:1e:41:58:2b:6a:30:58:bc:bb:97:f6:2a:5d:
                    fc:1d:ad:64:e4:fe:b5:72:74:61:e3:e7:53:2b:48:
                    26:8d:d4:cc:2d:80:0e:d9:e2:4a:ed:63:34:1c:f7:
                    cc:93:54:56:95:c3:98:33:2a:c3:e0:98:f2:5f:1c:
                    15:6e:3a:ef:b0:05:48:87:03:1a:df:12:d5:b3:ce:
                    71:f5:f1:2b:a3:e6:7b:ff:99:a2:52:a8:65:96:6b:
                    d5:65:dc:4f:e7:39:42:cf:23:b9:e9:1b:ff:9b:63:
                    a5:65:c0:97:fd:c4:f6:76:2f:54:f1:d7:1a:b4:b1:
                    02:cb:7f:a8:4f:e9:42:a3:a5:81:bc:90:ae:9a:e1:
                    c6:7d:d9:e6:2c:ad:9c:f0:a2:04:13:dc:4e:b3:15:
                    bd:a6:e1:fe:2a:89:0c:22:44:7f:d3:cd:83:04:35:
                    87:f9:c3:f0:60:c0:65:1e:94:5b:f1:43:f8:ee:a7:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:02:49:D7:F8:28:4D:C0:97:CC:B6:7E:EE:08:67:AF:0E:7B:A4:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/74141ed7-cbdc-3ced-ba5d-a52ae3648bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ec:6b:09:42:9d:4c:49:00:89:50:b4:9d:9d:c8:8f:01:0b:
         38:f3:cb:bb:fe:57:8c:87:c8:e8:ba:5c:ec:01:62:07:53:ca:
         97:58:38:ff:5b:29:09:78:e2:00:c1:bd:55:11:11:b9:b0:97:
         61:1a:a0:6f:58:23:0f:a3:1d:a6:2f:15:aa:93:cc:be:1b:03:
         3c:2b:ac:b2:49:35:25:29:25:72:34:90:67:59:e7:54:ef:f6:
         47:bb:a3:3f:97:86:1b:04:02:f4:aa:ce:8f:7f:d1:06:d5:b0:
         95:a9:da:0a:10:31:fc:23:67:29:b0:9a:2e:09:4a:2f:0a:ab:
         b1:9d:31:aa:27:ea:a9:68:74:ba:a7:a7:81:24:9f:63:c8:5a:
         e9:a8:05:d3:1a:6d:8e:ef:6c:56:ed:39:f4:d3:1b:dc:8f:16:
         1a:a5:93:c9:fc:df:dd:09:2f:e5:44:54:0a:50:3a:6e:7b:29:
         0e:27:84:e8:f7:e1:27:9f:9b:ea:45:d7:76:d3:b1:ab:20:4c:
         4a:65:d7:8c:41:59:24:8c:9d:30:42:a1:fa:71:72:c6:6a:4d:
         25:ef:a6:69:f8:e1:43:ef:f1:bb:45:b4:28:02:4c:b6:c1:99:
         45:e5:fd:be:ff:e6:1b:01:4a:3c:91:ec:26:c5:e3:c1:e6:f6:
         58:4a:12:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSuTQtW9GMNZo4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MTFkNGQzYWMtMTQzOS00NTY3LWI3MGMtMWM0Y2U1ZTA3ZDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPnVGAQApaoIR4jWvkabWau6blx0AEgO5nPw
jfEgaJdunjZ3ggOGQqqsfmePI9flJjlBZrphbEZWFy3rv5R6ViV4c/r4us3oC6Jx
PR5BWCtqMFi8u5f2Kl38Ha1k5P61cnRh4+dTK0gmjdTMLYAO2eJK7WM0HPfMk1RW
lcOYMyrD4JjyXxwVbjrvsAVIhwMa3xLVs85x9fEro+Z7/5miUqhllmvVZdxP5zlC
zyO56Rv/m2OlZcCX/cT2di9U8dcatLECy3+oT+lCo6WBvJCumuHGfdnmLK2c8KIE
E9xOsxW9puH+KokMIkR/082DBDWH+cPwYMBlHpRb8UP47qdvGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFoCSdf4KE3Al8y2fu4IZ68Oe6R7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNzQxNDFlZDctY2JkYy0z
Y2VkLWJhNWQtYTUyYWUzNjQ4YmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrsawlCnUxJAIlQtJ2dyI8BCzjzy7v+V4yHyOi6XOwBYgdTypdYOP9b
KQl44gDBvVUREbmwl2EaoG9YIw+jHaYvFaqTzL4bAzwrrLJJNSUpJXI0kGdZ51Tv
9ke7oz+XhhsEAvSqzo9/0QbVsJWp2goQMfwjZymwmi4JSi8Kq7GdMaon6qlodLqn
p4Ekn2PIWumoBdMabY7vbFbtOfTTG9yPFhqlk8n8390JL+VEVApQOm57KQ4nhOj3
4Sefm+pF13bTsasgTEpl14xBWSSMnTBCofpxcsZqTSXvpmn44UPv8btFtCgCTLbB
mUXl/b7/5hsBSjyR7CbF48Hm9lhKEvI=
-----END CERTIFICATE-----
Generated at Mon May 12 13:56:02 2025 by rpki-client