Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/6930e720-f736-3e74-bc28-b349fe0e598b.roa
File:                     6930e720-f736-3e74-bc28-b349fe0e598b.roa (raw, json)
Hash identifier:          1q9FtVawl8jhQY4PNCYpme/h/nA9v+Xk/PjcV6pxHBM=
Subject key identifier:   D8:1B:8F:98:37:F2:4A:E5:9F:86:8B:0D:44:DC:B5:61:61:C6:54:9F
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F43285848573AD9095CAEB0AAE7F5F680
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/6930e720-f736-3e74-bc28-b349fe0e598b.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        199.96.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:d9:09:5c:ae:b0:aa:e7:f5:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=42c20856-41be-483e-a11f-1da85babe3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:52:e1:ca:59:32:1b:0f:a4:1f:52:55:09:28:
                    ab:fd:4a:ca:6a:e2:05:39:a5:26:cf:0f:32:f3:f8:
                    ec:6a:f6:2f:d8:6c:ad:09:8e:fe:b2:53:01:e3:1c:
                    77:50:a9:c8:9c:90:01:61:22:30:ae:7a:6d:04:76:
                    b7:b5:47:2c:e0:7e:11:a1:0b:a7:e3:43:ce:83:e5:
                    68:99:df:00:a8:85:65:0a:70:b7:0a:19:e4:35:fa:
                    0a:85:cd:27:48:1f:ae:71:dd:53:8b:7e:f1:c2:66:
                    49:0a:e7:46:05:0f:0b:58:44:c4:ad:02:18:73:37:
                    23:f0:0f:b7:13:1e:7a:c3:cd:6f:d5:9d:c5:2a:4d:
                    06:a0:3b:7b:17:12:8d:48:16:d2:48:c3:39:79:bb:
                    d5:14:e9:07:b0:25:e0:05:23:c3:db:90:70:7f:2e:
                    6d:a9:37:92:54:71:c3:f6:d2:6c:9e:0a:5d:71:ec:
                    0b:13:49:23:a1:c9:49:1f:0c:c4:28:9b:0c:79:37:
                    47:b3:2c:42:3a:e7:23:c6:37:64:b5:de:0c:f8:54:
                    7e:7e:5e:ea:bc:02:43:d8:6a:42:ab:d9:83:56:1f:
                    7f:c5:b4:01:0a:19:46:38:50:7a:df:0e:b7:c8:44:
                    c0:74:00:71:7b:05:52:e6:e6:59:70:f6:eb:de:0f:
                    7e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1B:8F:98:37:F2:4A:E5:9F:86:8B:0D:44:DC:B5:61:61:C6:54:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/6930e720-f736-3e74-bc28-b349fe0e598b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:e5:a4:61:1a:3c:cc:9c:9d:c7:7a:94:ea:01:f4:86:2f:
         81:8c:e3:2e:0f:49:42:33:10:7a:0c:50:9e:78:33:c3:33:bc:
         e5:06:1a:0f:b1:97:b9:57:b0:99:a9:26:c3:ed:a0:90:04:9f:
         56:b5:c9:5f:d1:40:79:03:5a:f0:7f:bc:0f:48:aa:00:68:63:
         31:f5:8d:ba:e5:71:2a:66:c8:07:1a:a8:e0:2d:11:6e:18:df:
         dc:8b:aa:97:3b:ba:a0:4a:96:83:f1:bd:bc:51:9e:de:4a:c3:
         af:5a:15:3e:d6:74:a4:e4:53:9d:08:c3:17:82:8d:ff:e5:e5:
         5f:b8:e2:d1:c5:f5:52:db:57:c0:08:98:d1:66:e4:94:72:9c:
         0b:20:6c:ef:0c:00:62:78:5f:95:0c:ae:01:fb:16:7b:37:ea:
         91:90:52:36:e6:e5:de:21:d9:1d:65:0f:87:ef:6f:de:6e:a1:
         7d:f7:bf:00:e8:14:59:0a:91:5c:ba:21:5c:4a:61:13:e1:7d:
         e9:f7:3c:34:6f:04:32:06:fb:ed:fa:54:00:25:88:16:2e:cc:
         d6:94:7c:4f:2c:40:f4:8a:a2:6f:59:ed:34:70:78:04:bc:84:
         ba:01:4c:66:2b:3f:ec:54:75:f2:e6:92:49:ef:d7:c1:2a:c1:
         5a:30:6e:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtkJXK6wquf19oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdkNmEwYmEtYzEyNC00NTQwLWI1ZWYtNmFiMjA5NDNh
ZjI0MB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
NDJjMjA4NTYtNDFiZS00ODNlLWExMWYtMWRhODViYWJlM2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVLhylkyGw+kH1JVCSir/UrKauIFOaUmzw8y
8/jsavYv2GytCY7+slMB4xx3UKnInJABYSIwrnptBHa3tUcs4H4RoQun40POg+Vo
md8AqIVlCnC3ChnkNfoKhc0nSB+ucd1Ti37xwmZJCudGBQ8LWETErQIYczcj8A+3
Ex56w81v1Z3FKk0GoDt7FxKNSBbSSMM5ebvVFOkHsCXgBSPD25Bwfy5tqTeSVHHD
9tJsngpdcewLE0kjoclJHwzEKJsMeTdHsyxCOucjxjdktd4M+FR+fl7qvAJD2GpC
q9mDVh9/xbQBChlGOFB63w63yETAdABxewVS5uZZcPbr3g9+UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNgbj5g38krln4aLDUTctWFhxlSfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zN2Q2
YTBiYS1jMTI0LTQ1NDAtYjVlZi02YWIyMDk0M2FmMjQvNjkzMGU3MjAtZjczNi0z
ZTc0LWJjMjgtYjM0OWZlMGU1OThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzdkNmEwYmEtYzEyNC00NTQwLWI1
ZWYtNmFiMjA5NDNhZjI0LzM3ZDZhMGJhLWMxMjQtNDU0MC1iNWVmLTZhYjIwOTQz
YWYyNC5jcmwwHwYDVR0jBBgwFoAUP8ZotPsCGtxVeLXUXxHyBKz91CEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zN2Q2YTBiYS1jMTI0LTQ1NDAtYjVlZi02YWIy
MDk0M2FmMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2CgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAob5aRhGjzMnJ3HepTqAfSGL4GM4y4PSUIzEHoMUJ54M8MzvOUGGg+x
l7lXsJmpJsPtoJAEn1a1yV/RQHkDWvB/vA9IqgBoYzH1jbrlcSpmyAcaqOAtEW4Y
39yLqpc7uqBKloPxvbxRnt5Kw69aFT7WdKTkU50IwxeCjf/l5V+44tHF9VLbV8AI
mNFm5JRynAsgbO8MAGJ4X5UMrgH7Fns36pGQUjbm5d4h2R1lD4fvb95uoX33vwDo
FFkKkVy6IVxKYRPhfen3PDRvBDIG++36VAAliBYuzNaUfE8sQPSKom9Z7TRweAS8
hLoBTGYrP+xUdfLmkknv18EqwVowbk8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:27 2025 by rpki-client