Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa
File:                     09ddca0c-00ea-3e20-b685-50e6b951950b.roa (raw, json)
Hash identifier:          GZyU6DLh2SOQSf/bEMSuHMbFEmYfDSFJ37oBTrkL59Q=
Subject key identifier:   52:FD:B5:65:81:3B:57:2A:E0:E0:21:01:8C:F0:52:24:38:F2:80:61
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584840E557375B2AB0AFC0BF7300
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     203
IP address blocks:        199.249.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:57:37:5b:2a:b0:af:c0:bf:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=61983c49-a311-47f8-bb0e-223f142aa1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7b:eb:1c:ba:1f:29:37:52:72:2a:6a:89:6d:
                    f7:b3:0b:31:1a:68:51:c9:71:41:40:1d:79:2a:08:
                    fe:02:54:c0:74:92:ec:50:21:e1:e4:97:94:11:74:
                    37:88:fb:98:66:7b:96:61:1e:41:44:e5:45:0f:97:
                    aa:93:35:5b:f4:1c:ef:9d:54:89:82:b7:80:7d:04:
                    3d:0e:28:8e:01:f4:17:f1:a9:37:ca:c5:b3:d3:da:
                    9a:4e:6b:f4:33:cc:f8:c0:90:91:70:64:17:55:19:
                    77:28:72:32:dc:2c:69:c6:67:93:89:f5:52:55:00:
                    41:5c:a8:c4:97:28:4b:4a:c6:37:6c:d6:9a:00:18:
                    c2:2c:51:a0:27:e9:11:43:cb:51:b3:f4:85:be:e9:
                    b7:fe:31:2c:e1:05:d1:c5:ca:04:51:60:be:10:80:
                    b5:14:ca:01:cf:1e:47:5b:9a:43:38:e2:8b:0f:6b:
                    39:ac:a5:8a:19:c7:32:4b:49:6b:53:d0:81:3c:15:
                    c4:41:46:ba:dc:c3:68:ae:79:ed:87:62:0a:12:27:
                    cc:a3:c2:43:03:7c:06:b0:d0:ca:4f:74:9e:76:38:
                    a8:69:18:c4:e1:49:25:66:8f:fa:f1:91:26:84:f8:
                    57:5f:40:a7:f7:d3:99:36:63:59:5f:a7:2e:08:36:
                    72:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FD:B5:65:81:3B:57:2A:E0:E0:21:01:8C:F0:52:24:38:F2:80:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:c3:27:e4:ba:36:ed:d3:04:e1:4a:67:fb:7d:a5:85:38:
         45:ce:7b:51:20:09:6b:ca:f9:59:67:de:a0:f3:2b:b8:4c:37:
         38:1c:70:40:50:d3:1f:3a:06:c2:94:a2:48:b3:4c:b9:d1:94:
         a6:94:b9:21:90:24:3b:82:39:5a:b9:09:e7:1b:ee:bc:31:16:
         2d:76:93:dc:87:f0:fd:d4:fc:65:b0:7f:ec:e4:cb:df:65:1a:
         7d:da:18:91:cd:d7:ea:e3:8e:f7:49:67:21:9d:e8:f1:f7:29:
         96:03:52:59:56:b0:e7:01:d3:d4:56:e9:00:c8:6b:1b:0c:1a:
         f8:4a:d7:93:5a:ba:d2:5e:31:9d:0b:d4:61:c8:80:40:5b:d7:
         a1:51:3f:34:75:51:4c:06:42:8c:31:9b:32:e7:43:ef:a3:27:
         16:8a:6e:49:70:00:a9:6f:3b:36:16:b8:e0:b3:26:42:17:f3:
         34:5c:42:fe:02:bd:97:c6:9a:e4:9a:23:48:73:db:e8:9f:91:
         08:b6:7f:6c:2f:a4:bb:25:bf:03:75:4e:30:d8:14:79:e5:0d:
         01:69:8e:c4:6b:4f:cc:62:d1:45:07:cb:3e:ae:18:a1:0e:3e:
         5e:19:17:56:7f:c7:96:bd:74:6c:91:02:4f:12:8c:10:6f:18:
         9f:7a:9b:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5Vc3Wyqwr8C/cwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3
N2YxMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NjE5ODNjNDktYTMxMS00N2Y4LWJiMGUtMjIzZjE0MmFhMWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnvrHLofKTdScipqiW33swsxGmhRyXFBQB15
Kgj+AlTAdJLsUCHh5JeUEXQ3iPuYZnuWYR5BROVFD5eqkzVb9BzvnVSJgreAfQQ9
DiiOAfQX8ak3ysWz09qaTmv0M8z4wJCRcGQXVRl3KHIy3CxpxmeTifVSVQBBXKjE
lyhLSsY3bNaaABjCLFGgJ+kRQ8tRs/SFvum3/jEs4QXRxcoEUWC+EIC1FMoBzx5H
W5pDOOKLD2s5rKWKGccyS0lrU9CBPBXEQUa63MNornnth2IKEifMo8JDA3wGsNDK
T3SedjioaRjE4UklZo/68ZEmhPhXX0Cn99OZNmNZX6cuCDZyIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFL9tWWBO1cq4OAhAYzwUiQ48oBhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1
MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvMDlkZGNhMGMtMDBlYS0z
ZTIwLWI2ODUtNTBlNmI5NTE5NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl
N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1
NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0
ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzwwyfkujbt0wThSmf7faWFOEXOe1EgCWvK+Vln3qDzK7hMNzgccEBQ
0x86BsKUokizTLnRlKaUuSGQJDuCOVq5Cecb7rwxFi12k9yH8P3U/GWwf+zky99l
Gn3aGJHN1+rjjvdJZyGd6PH3KZYDUllWsOcB09RW6QDIaxsMGvhK15NautJeMZ0L
1GHIgEBb16FRPzR1UUwGQowxmzLnQ++jJxaKbklwAKlvOzYWuOCzJkIX8zRcQv4C
vZfGmuSaI0hz2+ifkQi2f2wvpLslvwN1TjDYFHnlDQFpjsRrT8xi0UUHyz6uGKEO
Pl4ZF1Z/x5a9dGyRAk8SjBBvGJ96m78=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:28 2025 by rpki-client