Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d603a26c-ea53-32b6-85e8-790c5c1c3366.roa
File:                     d603a26c-ea53-32b6-85e8-790c5c1c3366.roa (raw, json)
Hash identifier:          wvfdU1RuF3J+BzCS62pBZjjrQ7VMfgm17NwbCCAKl6M=
Subject key identifier:   50:44:8C:15:13:EB:0F:B5:8C:30:66:B3:12:71:A6:50:70:E5:A0:AF
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F432858486D90449DADF141D9CF0CD340
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d603a26c-ea53-32b6-85e8-790c5c1c3366.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     63129
IP address blocks:        130.51.96.0/22 maxlen: 24
                          2602:f87f::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:44:9d:ad:f1:41:d9:cf:0c:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=dcf708ec-e7c1-4ac1-9794-201a8d6b7ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:ed:bd:5a:14:f1:1e:f6:07:59:69:9c:52:
                    87:c9:b1:07:b4:5c:9a:d3:c4:01:71:18:ec:11:ad:
                    a0:af:f5:72:6e:e4:33:14:4c:2b:7a:93:69:23:05:
                    e4:91:58:68:41:a9:70:75:05:d6:b1:e2:85:3a:8a:
                    70:8b:1f:70:8f:e6:56:5f:a7:38:f0:54:e2:71:bf:
                    0f:44:cd:88:45:0a:1c:7e:85:c6:83:69:6f:1f:a3:
                    fa:a9:cf:78:db:83:7c:90:cf:b8:2a:12:65:19:cf:
                    31:a0:93:b5:ef:bf:44:ca:29:3d:a1:dc:5a:60:e1:
                    a8:73:40:a9:ce:e0:94:c1:cf:5f:6a:bb:f2:a1:c2:
                    e1:44:b5:ba:08:b5:68:ad:04:6e:65:1c:69:4f:28:
                    c6:ac:15:4e:fc:f2:ad:7c:99:70:3e:e7:c9:d2:d7:
                    32:51:97:e5:45:1c:19:60:f3:0f:0d:76:38:1c:2f:
                    3f:e7:03:8c:83:d0:b9:68:34:30:6c:51:1b:31:8e:
                    ed:ec:73:bc:7e:85:a4:15:d1:82:c4:11:a8:f8:4e:
                    27:fd:d6:a9:1c:72:b5:f2:56:d7:e5:a1:85:7c:13:
                    8f:9c:01:fe:51:7f:86:be:5d:80:af:12:70:06:cf:
                    66:c8:64:99:a4:f5:5e:f6:a4:88:1e:98:9c:ef:68:
                    2f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:44:8C:15:13:EB:0F:B5:8C:30:66:B3:12:71:A6:50:70:E5:A0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d603a26c-ea53-32b6-85e8-790c5c1c3366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.96.0/22
                IPv6:
                  2602:f87f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:13:a8:df:3c:c5:f9:67:f3:22:ea:5e:21:52:e1:49:d9:0a:
         23:57:e5:8c:aa:9b:fd:32:f2:10:85:d0:c7:0f:eb:7b:2a:d3:
         6e:81:78:01:ff:d1:24:90:2e:f2:c8:23:0b:e0:53:63:bd:f9:
         7c:99:fe:e0:3c:b7:99:b8:e6:a1:26:02:cb:df:d4:81:ef:f8:
         d9:4f:4d:0f:e8:7e:10:8f:ca:dd:5c:0f:61:9c:05:7b:82:de:
         c6:fd:92:44:a1:43:ce:9e:a8:0a:cb:a5:7d:cb:2b:7e:1f:87:
         89:40:5a:fe:71:a5:bf:89:39:5d:fe:35:7c:e5:3b:32:1c:72:
         fc:88:20:f6:40:18:d9:68:b7:2c:59:73:20:b7:23:95:ba:bd:
         6c:42:50:3d:c2:76:8c:79:d3:82:37:43:3e:60:cb:73:4a:9d:
         a1:21:c8:70:bc:43:ec:aa:72:d8:b0:9f:6c:3f:99:5e:cb:d2:
         2c:2d:3b:79:42:4a:23:83:2a:f4:7b:ad:38:03:cd:97:04:70:
         f7:60:ae:25:08:87:d1:a4:fc:9a:c6:fc:d2:b0:81:9d:c0:77:
         3a:bb:e4:50:b6:d5:d7:42:ae:26:3e:fd:88:c3:08:fd:57:07:
         f7:5b:4b:c3:75:a9:39:94:f7:3b:dc:36:04:4f:b8:26:2e:43:
         ad:91:e6:91
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhtkESdrfFB2c8M00AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU5YjgyNjgtNjRjZS00N2VmLTk5M2QtYTNiYjc4MmJk
N2E5MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZGNmNzA4ZWMtZTdjMS00YWMxLTk3OTQtMjAxYThkNmI3YWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cbtvVoU8R72B1lpnFKHybEHtFya08QBcRjs
Ea2gr/VybuQzFEwrepNpIwXkkVhoQalwdQXWseKFOopwix9wj+ZWX6c48FTicb8P
RM2IRQocfoXGg2lvH6P6qc9424N8kM+4KhJlGc8xoJO1779Eyik9odxaYOGoc0Cp
zuCUwc9farvyocLhRLW6CLVorQRuZRxpTyjGrBVO/PKtfJlwPufJ0tcyUZflRRwZ
YPMPDXY4HC8/5wOMg9C5aDQwbFEbMY7t7HO8foWkFdGCxBGo+E4n/dapHHK18lbX
5aGFfBOPnAH+UX+Gvl2ArxJwBs9myGSZpPVe9qSIHpic72gvRQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFFBEjBUT6w+1jDBmsxJxplBw5aCvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNTli
ODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2JiNzgyYmQ3YTkvZDYwM2EyNmMtZWE1My0z
MmI2LTg1ZTgtNzkwYzVjMWMzMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTU5YjgyNjgtNjRjZS00N2VmLTk5
M2QtYTNiYjc4MmJkN2E5LzE1OWI4MjY4LTY0Y2UtNDdlZi05OTNkLWEzYmI3ODJi
ZDdhOS5jcmwwHwYDVR0jBBgwFoAUoN/rIMKe9QONZjwZATOREHKcd1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNTliODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2Ji
NzgyYmQ3YTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCgjNgMA4E
AgACMAgDBgQmAvh/ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFE6jfPMX5Z/Mi6l4hUuFJ2QojV+WMqpv9
MvIQhdDHD+t7KtNugXgB/9EkkC7yyCML4FNjvfl8mf7gPLeZuOahJgLL39SB7/jZ
T00P6H4Qj8rdXA9hnAV7gt7G/ZJEoUPOnqgKy6V9yyt+H4eJQFr+caW/iTld/jV8
5TsyHHL8iCD2QBjZaLcsWXMgtyOVur1sQlA9wnaMedOCN0M+YMtzSp2hIchwvEPs
qnLYsJ9sP5ley9IsLTt5Qkojgyr0e604A82XBHD3YK4lCIfRpPyaxvzSsIGdwHc6
u+RQttXXQq4mPv2Iwwj9Vwf3W0vDdak5lPc73DYET7gmLkOtkeaR
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:03 2025 by rpki-client