Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9358d6e3-15da-3f2d-9a4a-ff65c7980096.roa
File:                     9358d6e3-15da-3f2d-9a4a-ff65c7980096.roa (raw, json)
Hash identifier:          R0JlsKsUUq+sRvSOGsX81DWQ1WH3z67B2XhUKaJPNP0=
Subject key identifier:   38:FF:D2:94:B5:A5:7D:83:AF:BC:52:CE:B0:AD:AB:C7:53:71:17:AC
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584854703234BF9FDD41B5DAC600
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9358d6e3-15da-3f2d-9a4a-ff65c7980096.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     36511
IP address blocks:        192.149.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:32:34:bf:9f:dd:41:b5:da:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=4a4ce97e-e24d-405f-816d-cf76a3b4c2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:79:a1:7f:c7:92:31:b0:5c:e0:12:35:31:
                    7d:88:9c:d7:f8:3c:4a:05:be:c6:42:e9:b8:11:20:
                    88:05:5e:c9:a3:c5:63:65:9a:61:c3:fc:5c:e8:34:
                    95:1d:d3:50:e8:4c:8a:06:db:ca:5b:6d:1e:ff:47:
                    73:8d:44:9f:09:21:3f:11:6e:85:78:16:bd:b8:54:
                    d8:44:0f:ec:19:bc:ff:82:20:b7:0b:07:5b:3b:97:
                    fe:ff:2c:2b:7c:a2:83:43:6c:36:c2:6d:a6:34:c0:
                    99:c1:70:d5:3a:4d:50:b4:87:51:b8:8e:a7:ba:61:
                    07:d1:2b:c8:fc:3a:77:39:84:28:fb:52:86:3d:ed:
                    41:51:2d:a3:f7:e5:f7:b1:f3:64:0d:c9:5d:49:b5:
                    57:78:99:33:17:e4:97:0c:3a:69:c9:74:f7:d2:d1:
                    46:aa:08:48:d7:31:14:1e:55:42:0d:c1:6a:c7:80:
                    d8:08:18:12:1d:a8:1e:7e:a5:d3:42:ac:05:f4:31:
                    99:71:f9:1e:44:3a:52:df:d6:d7:4a:d9:e9:66:d1:
                    67:98:49:7b:a7:6b:f0:a0:82:a9:90:84:d6:90:20:
                    dc:91:f0:5d:04:0a:6d:b2:0c:30:ab:20:5e:ab:e8:
                    03:a7:e8:c9:39:67:1d:e3:7d:01:99:d4:e1:6d:71:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FF:D2:94:B5:A5:7D:83:AF:BC:52:CE:B0:AD:AB:C7:53:71:17:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9358d6e3-15da-3f2d-9a4a-ff65c7980096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:9e:5d:4f:7f:d2:93:b5:b9:f8:8d:c6:91:6d:a6:0f:24:95:
         a0:80:fd:0f:c5:23:a6:18:35:84:cd:8d:13:33:c9:ac:0e:69:
         cc:65:b9:d2:c5:2d:a6:31:ba:2c:b0:db:fc:7d:fe:b2:91:8a:
         4b:8d:9a:e4:70:d7:d1:f9:7e:c8:38:12:c9:06:e9:8f:d7:ad:
         b6:03:fc:d9:8d:1d:13:38:6e:c2:84:ae:e4:a2:15:42:03:5a:
         1d:d4:9e:37:4b:02:9e:cb:1c:28:b5:c4:bd:06:4e:4f:09:c8:
         95:76:bf:7a:6d:0d:9f:5b:b9:b0:63:02:11:ce:36:fe:66:52:
         ee:8b:b3:0c:02:45:c4:2f:49:82:e8:68:b4:98:83:c1:72:98:
         f9:87:2f:f9:57:0f:a0:95:45:0a:1e:a7:08:05:a8:93:9c:5a:
         33:60:25:c5:81:7c:6a:7c:22:59:c4:6a:91:02:01:4e:de:02:
         fd:c0:58:38:c5:85:fc:70:09:48:68:71:e7:aa:70:22:da:a3:
         70:82:c9:15:3a:fc:be:99:c5:71:c8:37:7e:1d:89:fc:c6:ee:
         a9:b2:74:53:ac:3c:e9:74:7e:29:23:45:c0:60:83:20:2b:a7:
         17:7e:41:3c:d2:60:cd:31:55:41:f7:66:7f:46:a9:c8:db:c1:
         87:77:a6:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcDI0v5/dQbXaxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
NGE0Y2U5N2UtZTI0ZC00MDVmLTgxNmQtY2Y3NmEzYjRjMmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLt5oX/HkjGwXOASNTF9iJzX+DxKBb7GQum4
ESCIBV7Jo8VjZZphw/xc6DSVHdNQ6EyKBtvKW20e/0dzjUSfCSE/EW6FeBa9uFTY
RA/sGbz/giC3CwdbO5f+/ywrfKKDQ2w2wm2mNMCZwXDVOk1QtIdRuI6numEH0SvI
/Dp3OYQo+1KGPe1BUS2j9+X3sfNkDcldSbVXeJkzF+SXDDppyXT30tFGqghI1zEU
HlVCDcFqx4DYCBgSHagefqXTQqwF9DGZcfkeRDpS39bXStnpZtFnmEl7p2vwoIKp
kITWkCDckfBdBAptsgwwqyBeq+gDp+jJOWcd430BmdThbXEggQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDj/0pS1pX2Dr7xSzrCtq8dTcResMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvOTM1OGQ2ZTMtMTVkYS0z
ZjJkLTlhNGEtZmY2NWM3OTgwMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWeXU9/0pO1ufiNxpFtpg8klaCA/Q/FI6YYNYTNjRMzyawOacxludLF
LaYxuiyw2/x9/rKRikuNmuRw19H5fsg4EskG6Y/XrbYD/NmNHRM4bsKEruSiFUID
Wh3UnjdLAp7LHCi1xL0GTk8JyJV2v3ptDZ9bubBjAhHONv5mUu6LswwCRcQvSYLo
aLSYg8FymPmHL/lXD6CVRQoepwgFqJOcWjNgJcWBfGp8IlnEapECAU7eAv3AWDjF
hfxwCUhoceeqcCLao3CCyRU6/L6ZxXHIN34difzG7qmydFOsPOl0fikjRcBggyAr
pxd+QTzSYM0xVUH3Zn9GqcjbwYd3ptg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:21 2025 by rpki-client