Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/70b09f9a-fc73-38b5-a730-83149f6057c7.roa
File:                     70b09f9a-fc73-38b5-a730-83149f6057c7.roa (raw, json)
Hash identifier:          ls/RNPxUKyfCByd/hRzJzk8g1ZVDH+aVGtfIVg8tQfg=
Subject key identifier:   07:37:08:D2:72:94:B4:91:DC:97:9B:9F:86:3A:70:93:3E:DB:AE:5B
Certificate issuer:       /CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Certificate serial:       010D0C9F43285848302540C43ACA8237DAEC02C0
Authority key identifier: 1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/70b09f9a-fc73-38b5-a730-83149f6057c7.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     393906
IP address blocks:        198.153.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:40:c4:3a:ca:82:37:da:ec:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6431aabe-7ca9-4420-b394-80fd03294bc7
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=e044c55f-d3e1-4635-9e45-808ef41c3514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:9e:63:10:53:3d:8d:a3:59:5c:a0:a8:84:
                    02:8a:4b:27:74:40:8e:ca:cb:0e:27:13:3f:30:d1:
                    a0:bc:3b:05:e1:c6:ac:61:1f:a4:36:da:72:aa:3a:
                    b0:1d:68:8d:a3:0e:7f:69:3e:3c:26:c2:3e:87:56:
                    e4:ce:a8:3e:26:05:d5:1e:aa:bd:04:e5:0c:85:e2:
                    f3:9b:54:0f:bd:3e:c9:c7:6c:a8:78:8a:2f:ab:de:
                    bf:c7:18:62:f7:b0:48:a7:13:b7:38:35:ff:98:ce:
                    8d:7e:cb:5f:cb:4d:ff:59:49:67:c5:11:ce:ed:6f:
                    ad:12:69:7c:8b:bf:bd:30:ad:90:25:92:8e:41:7e:
                    57:45:4f:16:02:b0:00:d1:64:52:fa:fa:9d:ff:54:
                    bc:29:3b:3c:48:03:e4:e7:7b:79:a6:79:8d:49:b9:
                    57:c9:ba:7c:74:06:5b:46:c3:77:69:d6:ff:ea:25:
                    71:c9:04:5a:1c:ec:e9:40:3a:e5:8a:01:ea:95:46:
                    89:2d:f4:81:4d:c1:ca:f2:12:90:59:4f:c0:ac:2e:
                    8b:c5:d0:fb:ee:10:9c:06:88:4b:14:8e:a3:e7:58:
                    7c:50:89:53:ce:ca:51:6f:74:cc:34:bb:d8:58:09:
                    5f:86:b2:91:80:7a:82:6c:6d:92:fa:0d:37:0b:c6:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:08:D2:72:94:B4:91:DC:97:9B:9F:86:3A:70:93:3E:DB:AE:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/70b09f9a-fc73-38b5-a730-83149f6057c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.153.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:1d:a9:e8:47:b8:bc:8b:41:66:5f:b6:90:b9:49:5a:2b:
         e1:1a:5a:74:c8:83:ed:f9:63:97:9d:73:45:df:87:e2:99:e0:
         6d:2b:85:f8:35:c8:92:df:6c:55:4e:d2:11:a4:bb:96:2d:77:
         df:90:70:d0:86:66:30:b9:2d:46:92:15:e7:0c:df:a2:9f:77:
         72:49:d7:91:d0:cd:5c:f7:83:2c:6d:05:29:e3:85:db:f4:7f:
         39:d2:12:09:40:ad:2f:f7:2a:33:08:42:bc:a7:b2:85:b0:9a:
         9b:ab:73:ac:51:c9:e7:18:af:ce:76:83:d8:04:63:61:33:e1:
         3b:5f:c7:b9:2a:c1:eb:e0:c7:92:81:1c:bd:e1:1e:e5:8f:3e:
         1e:92:2e:5b:9b:0b:de:4d:ea:4d:98:a2:4b:5a:ab:3b:ce:6f:
         a6:65:0a:c9:a1:e4:d2:e6:13:69:45:68:d9:9f:b7:c7:53:eb:
         11:0f:a1:e6:2b:c3:3b:36:60:69:cf:57:d5:75:96:37:21:c0:
         06:c6:95:10:1e:fd:df:a2:39:85:6e:97:cb:75:1a:cc:70:17:
         44:67:3d:42:2e:31:61:a4:6e:86:72:95:38:57:1a:ca:4f:43:
         23:1e:06:6e:41:bb:55:98:3e:20:a6:7f:34:e9:39:4d:bc:42:
         21:9c:4c:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJUDEOsqCN9rsAsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQzMWFhYmUtN2NhOS00NDIwLWIzOTQtODBmZDAzMjk0
YmM3MB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk
ZTA0NGM1NWYtZDNlMS00NjM1LTllNDUtODA4ZWY0MWMzNTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1yeYxBTPY2jWVygqIQCiksndECOyssOJxM/
MNGgvDsF4casYR+kNtpyqjqwHWiNow5/aT48JsI+h1bkzqg+JgXVHqq9BOUMheLz
m1QPvT7Jx2yoeIovq96/xxhi97BIpxO3ODX/mM6Nfstfy03/WUlnxRHO7W+tEml8
i7+9MK2QJZKOQX5XRU8WArAA0WRS+vqd/1S8KTs8SAPk53t5pnmNSblXybp8dAZb
RsN3adb/6iVxyQRaHOzpQDrligHqlUaJLfSBTcHK8hKQWU/ArC6LxdD77hCcBohL
FI6j51h8UIlTzspRb3TMNLvYWAlfhrKRgHqCbG2S+g03C8a8dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAc3CNJylLSR3Jebn4Y6cJM+265bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NDMx
YWFiZS03Y2E5LTQ0MjAtYjM5NC04MGZkMDMyOTRiYzcvNzBiMDlmOWEtZmM3My0z
OGI1LWE3MzAtODMxNDlmNjA1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjQzMWFhYmUtN2NhOS00NDIwLWIz
OTQtODBmZDAzMjk0YmM3LzY0MzFhYWJlLTdjYTktNDQyMC1iMzk0LTgwZmQwMzI5
NGJjNy5jcmwwHwYDVR0jBBgwFoAUHES9M6jTCsuEtnySeyNNIfIrU3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82NDMxYWFiZS03Y2E5LTQ0MjAtYjM5NC04MGZk
MDMyOTRiYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpnxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4RHanoR7i8i0FmX7aQuUlaK+EaWnTIg+35Y5edc0Xfh+KZ4G0rhfg1
yJLfbFVO0hGku5Ytd9+QcNCGZjC5LUaSFecM36Kfd3JJ15HQzVz3gyxtBSnjhdv0
fznSEglArS/3KjMIQrynsoWwmpurc6xRyecYr852g9gEY2Ez4Ttfx7kqwevgx5KB
HL3hHuWPPh6SLlubC95N6k2YoktaqzvOb6ZlCsmh5NLmE2lFaNmft8dT6xEPoeYr
wzs2YGnPV9V1ljchwAbGlRAe/d+iOYVul8t1GsxwF0RnPUIuMWGkboZylThXGspP
QyMeBm5Bu1WYPiCmfzTpOU28QiGcTI4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:15:32 2025 by rpki-client