Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa
File:                     6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa (raw, json)
Hash identifier:          wP9tGQympntxKIRGEk+5ybl5OrhPGZyKNlHjF0jkK7w=
Subject key identifier:   E6:25:19:04:FC:3B:4B:BF:52:A8:F6:7A:22:85:86:01:68:9E:0A:55
Certificate issuer:       /CN=5e6cd83f-36e6-4be6-ab7c-53801cda4fef
Certificate serial:       010D0C9F432858485CD02F5A227C665105B82C80
Authority key identifier: 81:71:EA:33:12:1B:1C:A1:EC:E9:79:1D:B1:21:86:92:37:E2:CE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     197867
IP address blocks:        140.235.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:2f:5a:22:7c:66:51:05:b8:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6cd83f-36e6-4be6-ab7c-53801cda4fef
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=4c848284-2dbb-4cd6-987f-b7e8ba0574b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:2c:0a:d5:29:54:85:01:b8:1b:7e:f2:fc:
                    c4:98:4f:1b:2f:c3:a7:5b:e1:e8:3d:3b:e0:f2:de:
                    28:60:15:d7:7e:0c:4e:25:fb:c2:a0:0c:26:e0:62:
                    8b:b5:96:5f:97:02:fd:e8:1b:2f:ef:5a:d5:3a:23:
                    84:12:44:8f:ea:77:53:f4:b4:11:5d:e1:bf:7a:65:
                    66:8c:3e:cc:8b:86:50:5a:18:9b:f8:9f:2e:d4:2d:
                    5d:ec:fa:cb:c6:fe:1b:18:25:39:d3:1c:75:dd:5f:
                    fe:b5:11:aa:42:b4:e7:bd:53:30:fa:7d:36:6c:c5:
                    06:b4:57:17:20:aa:22:97:77:64:eb:83:44:f0:ce:
                    cf:5c:a0:83:9d:ac:3f:0c:f2:cb:c8:15:03:28:d1:
                    96:5c:3c:aa:45:32:e6:9a:7c:07:a1:fc:64:78:48:
                    c9:fc:8e:8c:d0:aa:19:32:e2:c0:29:0f:2c:99:8c:
                    b0:f3:f0:38:30:c4:24:a1:9a:2b:a9:49:73:1e:ee:
                    86:76:12:7c:bd:35:3a:84:af:d3:37:19:e2:42:70:
                    b8:f4:cd:f1:ad:2a:e1:b8:b9:71:86:ce:c8:94:c9:
                    fb:bc:ea:dd:21:a2:09:f0:15:5e:8b:fa:fd:2b:1b:
                    54:bf:73:4b:d0:69:2d:60:51:0f:34:9e:40:05:6f:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:25:19:04:FC:3B:4B:BF:52:A8:F6:7A:22:85:86:01:68:9E:0A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.crl

            X509v3 Authority Key Identifier:
                keyid:81:71:EA:33:12:1B:1C:A1:EC:E9:79:1D:B1:21:86:92:37:E2:CE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:50:af:94:e7:f2:87:54:c6:0c:fe:06:ac:2d:f6:d4:2b:a4:
         f3:a6:ba:ab:1f:48:35:81:84:52:a6:39:cc:15:9c:ce:9f:d5:
         cb:ee:e8:5b:db:19:4e:e4:b8:d6:a7:16:e4:3c:2a:ba:57:4e:
         dd:d5:1b:b2:44:44:1f:8a:fa:2d:f8:b0:1b:b1:f1:9c:0c:af:
         d7:32:c4:44:e1:d8:8f:c0:24:5a:02:60:43:09:27:f9:af:6d:
         a1:f3:02:5b:2d:58:6c:53:18:80:87:0d:52:e5:9e:4e:fe:2e:
         26:08:80:4e:72:68:70:f2:62:de:da:17:01:ad:b0:b1:7a:ce:
         56:d4:40:13:0c:54:53:cc:94:66:89:94:ef:ab:21:3d:c2:35:
         71:f2:5f:1b:cb:e3:2c:2a:fc:d8:a9:bb:e9:65:0f:80:8e:0e:
         16:01:6c:46:1e:37:69:ea:ad:11:54:42:f4:30:49:ce:ef:2e:
         f4:6f:e9:71:1d:4e:81:4a:79:11:59:a8:ec:fb:b0:21:ef:f1:
         8e:18:61:7f:0a:29:0e:08:68:03:f4:0e:c2:10:7f:13:2d:74:
         23:04:eb:7e:1f:a5:d3:25:92:3f:fb:0f:b6:08:be:16:95:cb:
         a6:d7:f9:93:72:51:ea:48:06:4e:48:63:77:99:09:fc:ad:3b:
         a5:16:d2:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0C9aInxmUQW4LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU2Y2Q4M2YtMzZlNi00YmU2LWFiN2MtNTM4MDFjZGE0
ZmVmMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
NGM4NDgyODQtMmRiYi00Y2Q2LTk4N2YtYjdlOGJhMDU3NGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbssCtUpVIUBuBt+8vzEmE8bL8OnW+HoPTvg
8t4oYBXXfgxOJfvCoAwm4GKLtZZflwL96Bsv71rVOiOEEkSP6ndT9LQRXeG/emVm
jD7Mi4ZQWhib+J8u1C1d7PrLxv4bGCU50xx13V/+tRGqQrTnvVMw+n02bMUGtFcX
IKoil3dk64NE8M7PXKCDnaw/DPLLyBUDKNGWXDyqRTLmmnwHofxkeEjJ/I6M0KoZ
MuLAKQ8smYyw8/A4MMQkoZorqUlzHu6GdhJ8vTU6hK/TNxniQnC49M3xrSrhuLlx
hs7IlMn7vOrdIaIJ8BVei/r9KxtUv3NL0GktYFEPNJ5ABW8y5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOYlGQT8O0u/Uqj2eiKFhgFongpVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTZj
ZDgzZi0zNmU2LTRiZTYtYWI3Yy01MzgwMWNkYTRmZWYvNjg1N2ExYTktZWI5ZC0z
NmFkLWFiN2EtNDdmYTgyY2MyZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWU2Y2Q4M2YtMzZlNi00YmU2LWFi
N2MtNTM4MDFjZGE0ZmVmLzVlNmNkODNmLTM2ZTYtNGJlNi1hYjdjLTUzODAxY2Rh
NGZlZi5jcmwwHwYDVR0jBBgwFoAUgXHqMxIbHKHs6XkdsSGGkjfizq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTZjZDgzZi0zNmU2LTRiZTYtYWI3Yy01Mzgw
MWNkYTRmZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOvWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENQr5Tn8odUxgz+Bqwt9tQrpPOmuqsfSDWBhFKmOcwVnM6f1cvu6Fvb
GU7kuNanFuQ8KrpXTt3VG7JERB+K+i34sBux8ZwMr9cyxETh2I/AJFoCYEMJJ/mv
baHzAlstWGxTGICHDVLlnk7+LiYIgE5yaHDyYt7aFwGtsLF6zlbUQBMMVFPMlGaJ
lO+rIT3CNXHyXxvL4ywq/Nipu+llD4CODhYBbEYeN2nqrRFUQvQwSc7vLvRv6XEd
ToFKeRFZqOz7sCHv8Y4YYX8KKQ4IaAP0DsIQfxMtdCME634fpdMlkj/7D7YIvhaV
y6bX+ZNyUepIBk5IY3eZCfytO6UW0o8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:31 2025 by rpki-client