Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa
File:                     5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa (raw, json)
Hash identifier:          50/Vh3q0hSG7muf9WYNQUK6f9yMV2bN2X7KL5X1o0s0=
Subject key identifier:   49:0E:7F:9C:B6:33:47:B5:01:F9:71:B9:BB:FD:1C:F8:F4:F5:FD:DD
Certificate issuer:       /CN=054cd560-1f7c-4ac0-bbeb-7cceeefb5e55
Certificate serial:       010D0C9F432858487B85BA275D8851ADA0FFE500
Authority key identifier: 76:90:60:51:89:83:11:47:15:70:BA:67:C4:27:D6:0C:4F:D0:81:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     399051
IP address blocks:        190.211.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:ba:27:5d:88:51:ad:a0:ff:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054cd560-1f7c-4ac0-bbeb-7cceeefb5e55
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=965c1db3-2d3d-4efe-9f2a-7f139e57a098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:63:ad:70:81:63:b9:05:9c:ee:e3:cb:08:
                    15:0c:cc:44:7b:02:5f:63:84:0c:e0:9b:37:30:d8:
                    64:18:38:a7:13:24:a2:5a:82:0d:27:f4:52:70:ea:
                    c3:7a:0a:64:79:b7:ee:3b:9f:f4:d8:2c:9b:e5:8c:
                    66:3d:ba:d9:61:7d:1e:c8:fe:5a:df:9f:b3:26:64:
                    33:90:d6:73:d0:c2:5a:9b:b8:89:a1:87:f4:13:e5:
                    42:a0:f2:f7:0e:d0:30:53:67:f6:86:74:bb:f5:96:
                    b7:1d:05:9d:a7:7c:41:8c:2d:10:fe:2a:0f:66:7b:
                    0b:eb:b3:f1:98:a5:ac:89:49:c8:f8:ba:b4:72:61:
                    02:b2:06:9a:b4:b3:ff:8e:7d:bf:05:7b:40:8f:52:
                    fc:b4:53:6b:31:6f:0d:83:33:52:98:9b:93:ff:99:
                    e2:4c:23:c0:a8:d9:3b:87:31:86:3b:f2:91:29:f7:
                    89:c9:33:28:d4:df:fa:de:9c:da:1f:32:5b:7f:0c:
                    4a:c5:42:08:d5:12:68:8c:5e:4a:b6:81:ef:40:6b:
                    32:20:a6:cc:5d:d7:fc:d7:4f:c8:0c:a9:c7:e6:3c:
                    4b:e1:1e:b7:ac:da:e1:08:b4:4f:3b:e1:85:98:7c:
                    9a:c4:c4:16:ba:ce:7e:64:a4:97:3e:7e:1a:c4:63:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0E:7F:9C:B6:33:47:B5:01:F9:71:B9:BB:FD:1C:F8:F4:F5:FD:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.crl

            X509v3 Authority Key Identifier:
                keyid:76:90:60:51:89:83:11:47:15:70:BA:67:C4:27:D6:0C:4F:D0:81:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:7a:36:7b:b6:34:99:6c:bd:cc:66:ce:6f:47:17:ea:16:b8:
         cd:6b:29:be:0a:2c:11:2a:9e:00:81:49:04:b3:15:38:f6:59:
         dd:49:cd:dd:84:16:1e:62:f9:90:4e:8f:b9:30:53:18:74:bc:
         71:1d:24:35:d5:c2:49:84:bb:bb:31:81:e4:2a:7c:9b:e0:18:
         17:76:59:a7:3d:53:d8:52:51:d3:a0:ab:28:22:c1:94:91:87:
         e2:20:ea:3c:60:7f:19:8f:aa:ed:eb:7d:b0:61:14:60:f4:80:
         ec:7c:a8:d4:0f:9e:0c:b4:ef:cb:97:a0:f4:59:5b:74:41:f3:
         0d:4d:ea:54:e2:46:cf:13:cf:a9:33:1a:16:38:4f:8e:a5:35:
         5f:ee:e2:aa:9b:38:17:2e:ca:d4:fd:17:f9:59:2d:cf:9c:51:
         31:e0:50:22:4f:f1:0b:01:ba:8d:65:c5:07:0f:a0:98:1f:36:
         df:ae:bc:be:84:e3:a1:b3:0c:76:f3:a6:13:05:96:47:af:d7:
         8d:ec:16:9d:d2:7b:8b:33:ca:0c:8e:c1:33:0d:e2:13:32:e0:
         f9:9b:c3:67:99:04:73:9e:38:65:5e:f8:ff:a3:fc:45:a1:7f:
         e6:0a:aa:c7:2b:62:48:4d:bc:5a:ab:aa:03:47:6e:aa:93:c3:
         5c:c4:53:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh7hbonXYhRraD/5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU0Y2Q1NjAtMWY3Yy00YWMwLWJiZWItN2NjZWVlZmI1
ZTU1MB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk
OTY1YzFkYjMtMmQzZC00ZWZlLTlmMmEtN2YxMzllNTdhMDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoljrXCBY7kFnO7jywgVDMxEewJfY4QM4Js3
MNhkGDinEySiWoINJ/RScOrDegpkebfuO5/02Cyb5YxmPbrZYX0eyP5a35+zJmQz
kNZz0MJam7iJoYf0E+VCoPL3DtAwU2f2hnS79Za3HQWdp3xBjC0Q/ioPZnsL67Px
mKWsiUnI+Lq0cmECsgaatLP/jn2/BXtAj1L8tFNrMW8NgzNSmJuT/5niTCPAqNk7
hzGGO/KRKfeJyTMo1N/63pzaHzJbfwxKxUII1RJojF5KtoHvQGsyIKbMXdf810/I
DKnH5jxL4R63rNrhCLRPO+GFmHyaxMQWus5+ZKSXPn4axGPuqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkOf5y2M0e1Aflxubv9HPj09f3dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wNTRj
ZDU2MC0xZjdjLTRhYzAtYmJlYi03Y2NlZWVmYjVlNTUvNTg1NzM4NWMtODdiMC0z
NGIzLWEwZjUtODU1YjM3YzFiZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDU0Y2Q1NjAtMWY3Yy00YWMwLWJi
ZWItN2NjZWVlZmI1ZTU1LzA1NGNkNTYwLTFmN2MtNGFjMC1iYmViLTdjY2VlZWZi
NWU1NS5jcmwwHwYDVR0jBBgwFoAUdpBgUYmDEUcVcLpnxCfWDE/Qgf8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wNTRjZDU2MC0xZjdjLTRhYzAtYmJlYi03Y2Nl
ZWVmYjVlNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvtOVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJN6Nnu2NJlsvcxmzm9HF+oWuM1rKb4KLBEqngCBSQSzFTj2Wd1Jzd2E
Fh5i+ZBOj7kwUxh0vHEdJDXVwkmEu7sxgeQqfJvgGBd2Wac9U9hSUdOgqygiwZSR
h+Ig6jxgfxmPqu3rfbBhFGD0gOx8qNQPngy078uXoPRZW3RB8w1N6lTiRs8Tz6kz
GhY4T46lNV/u4qqbOBcuytT9F/lZLc+cUTHgUCJP8QsBuo1lxQcPoJgfNt+uvL6E
46GzDHbzphMFlkev143sFp3Se4szygyOwTMN4hMy4Pmbw2eZBHOeOGVe+P+j/EWh
f+YKqscrYkhNvFqrqgNHbqqTw1zEU+0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:07 2025 by rpki-client