Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa
File:                     0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa (raw, json)
Hash identifier:          zyP181AvWLAYMzjh0jE6cArMkOtAKiQWkwGEBhB0YDI=
Subject key identifier:   9E:29:34:71:BD:5C:01:F9:74:8B:8C:05:7A:C0:5D:F3:E1:5F:34:CC
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285848467ABB11CA27D5C6D680EA00
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa
Signing time:             Sat 21 Dec 2024 02:00:39 +0000
ROA not before:           Sat 21 Dec 2024 02:00:39 +0000
ROA not after:            Fri 21 Mar 2025 01:00:39 +0000
asID:                     398156
IP address blocks:        168.220.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:7a:bb:11:ca:27:d5:c6:d6:80:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Dec 21 02:00:39 2024 GMT
            Not After : Mar 21 01:00:39 2025 GMT
        Subject: CN=fcf9cba9-e233-4e8f-9e56-4818ddcc4ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:0a:c9:85:43:f0:fe:c5:7c:9c:2a:5d:35:
                    f9:62:9c:8f:b6:9f:dd:1b:6e:43:e9:4e:66:ad:a4:
                    68:45:bd:b8:3b:e6:57:29:3e:83:b8:d8:42:a7:4b:
                    cf:1b:a6:f6:8f:2c:13:4b:c5:79:c3:9a:64:95:02:
                    1e:f6:d8:ff:45:ad:c9:83:d0:16:b0:f0:da:aa:7c:
                    d6:c1:c8:2b:e1:22:8e:14:91:09:bb:a8:39:75:1d:
                    ae:69:0c:08:99:98:b4:f5:e9:42:95:80:71:7a:7a:
                    07:b4:ed:0a:5b:06:0b:4b:c2:be:a0:70:14:d0:ad:
                    30:0f:f8:21:a7:47:fb:65:7b:0c:f4:60:b4:b5:58:
                    de:37:df:77:ae:58:9e:f1:a1:3b:a9:e4:e2:5b:05:
                    bb:74:4f:f2:ad:82:5c:4e:fc:e4:f4:76:8a:51:e3:
                    50:ba:aa:6d:e9:53:dc:c9:2b:98:ad:ff:52:ea:50:
                    ae:f4:05:5d:b8:5b:37:da:c9:1c:2e:99:56:c7:9d:
                    4a:7f:1c:51:ce:28:d8:72:ce:aa:4a:d9:78:16:d8:
                    9c:8a:5d:1b:c4:eb:c8:d9:c1:70:59:67:58:4e:92:
                    1f:b4:75:0c:87:48:04:b6:11:7f:74:6c:15:c6:e6:
                    5a:9c:17:7a:ca:58:98:77:11:f0:91:3d:03:65:3c:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:29:34:71:BD:5C:01:F9:74:8B:8C:05:7A:C0:5D:F3:E1:5F:34:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f2:91:58:a3:2e:c5:dd:5d:2e:3e:35:3d:7c:70:2a:50:89:
         ea:dc:e4:39:58:e0:39:43:57:cc:a2:2a:fc:81:02:db:54:69:
         0f:16:9e:8b:bf:ca:5a:af:18:98:96:c3:b4:a7:2b:fd:38:bc:
         28:50:65:65:5a:2f:80:19:5c:85:22:b6:c3:fb:e1:e5:c3:c2:
         bc:31:5e:1c:c7:48:ab:65:6d:4b:79:22:77:ab:58:cd:84:b1:
         47:6c:f8:94:5b:2f:47:7b:6c:7b:2b:cf:7a:be:23:ff:12:b8:
         12:3d:60:93:13:83:96:ba:3f:6a:6e:0c:53:dc:33:1c:1a:97:
         7f:85:84:5a:d4:8e:65:b0:ae:9c:24:89:41:47:bd:14:74:6a:
         c6:63:69:57:e7:51:d3:a8:d4:2e:fd:1d:de:c5:31:a5:05:8c:
         bd:89:1d:ba:0b:10:d5:8b:d5:1b:3b:36:9c:d7:b5:81:30:54:
         a0:13:ea:10:87:fb:ac:62:e6:b5:3e:c5:b7:a1:80:14:be:5c:
         8c:e0:df:52:f8:c8:98:e2:32:67:17:88:cd:b9:ff:37:08:88:
         04:54:e5:4a:be:82:ca:0e:57:a7:b8:9f:32:40:86:8a:5d:fd:
         a2:4d:61:d4:59:c2:1b:07:42:c7:91:88:cd:42:2b:48:4d:56:
         11:59:2e:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGersRyifVxtaA6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmNmOWNiYTktZTIzMy00ZThmLTllNTYtNDgxOGRkY2M0YWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GAKyYVD8P7FfJwqXTX5YpyPtp/dG25D6U5m
raRoRb24O+ZXKT6DuNhCp0vPG6b2jywTS8V5w5pklQIe9tj/Ra3Jg9AWsPDaqnzW
wcgr4SKOFJEJu6g5dR2uaQwImZi09elClYBxenoHtO0KWwYLS8K+oHAU0K0wD/gh
p0f7ZXsM9GC0tVjeN993rlie8aE7qeTiWwW7dE/yrYJcTvzk9HaKUeNQuqpt6VPc
ySuYrf9S6lCu9AVduFs32skcLplWx51KfxxRzijYcs6qStl4Fticil0bxOvI2cFw
WWdYTpIftHUMh0gEthF/dGwVxuZanBd6yliYdxHwkT0DZTznJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4pNHG9XAH5dIuMBXrAXfPhXzTMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMGZjZTk1YjYtM2JmNi0z
ZWY4LTk4OGMtZmQyY2I3Y2FlMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDykVijLsXdXS4+NT18cCpQierc5DlY4DlDV8yiKvyBAttUaQ8Wnou/
ylqvGJiWw7SnK/04vChQZWVaL4AZXIUitsP74eXDwrwxXhzHSKtlbUt5InerWM2E
sUds+JRbL0d7bHsrz3q+I/8SuBI9YJMTg5a6P2puDFPcMxwal3+FhFrUjmWwrpwk
iUFHvRR0asZjaVfnUdOo1C79Hd7FMaUFjL2JHboLENWL1Rs7NpzXtYEwVKAT6hCH
+6xi5rU+xbehgBS+XIzg31L4yJjiMmcXiM25/zcIiARU5Uq+gsoOV6e4nzJAhopd
/aJNYdRZwhsHQseRiM1CK0hNVhFZLv4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:59 2025 by rpki-client