Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/67641ce0-f5ca-3f14-bfe4-51010fe44704.roa
File:                     67641ce0-f5ca-3f14-bfe4-51010fe44704.roa (raw, json)
Hash identifier:          fbl8UCNlGc2M28iKqbQyqDP/nEEof962XcAEffqsQ94=
Subject key identifier:   A9:D9:BD:82:2D:BD:87:CA:24:0D:9D:E9:C0:CD:70:09:22:EC:B0:B0
Certificate issuer:       /CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
Certificate serial:       010D0C9F4328584827C543D592DA26316527A240
Authority key identifier: 26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/67641ce0-f5ca-3f14-bfe4-51010fe44704.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        192.94.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:43:d5:92:da:26:31:65:27:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=97e5d378-9220-44a4-aa0f-4600b95f3b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:5f:31:31:7f:9f:5a:bb:72:67:4f:27:c2:
                    6c:86:7f:f6:ad:e0:e9:7f:7e:70:ed:cf:5e:78:77:
                    23:90:20:8c:ae:c9:bd:b6:ba:ce:b4:24:b6:a5:45:
                    6b:6e:4b:39:b6:99:b8:49:f6:66:a9:90:c2:a8:56:
                    27:53:23:5b:19:79:c8:a9:fd:f3:83:74:2f:7b:87:
                    63:dd:73:04:61:c3:a2:9a:e7:d1:09:82:b6:68:e6:
                    c2:15:81:af:f0:ae:eb:f3:ea:4a:40:48:33:c9:51:
                    b2:23:2e:b0:5f:fd:bf:cc:8d:bf:88:d8:6a:3f:57:
                    87:bc:39:53:e0:c0:f8:1a:d2:41:fc:9c:7f:52:8d:
                    25:f1:ea:5e:55:9e:0a:0b:81:18:97:83:81:1e:0a:
                    31:22:bb:69:71:de:1a:96:07:6e:2c:36:1a:84:9a:
                    a6:04:79:c9:3e:c1:7b:94:1a:f4:f1:7d:d6:98:e5:
                    e2:cc:b0:de:4f:60:bf:82:c7:06:5d:eb:a6:57:24:
                    04:77:14:fe:4f:60:a3:db:52:ca:c8:66:08:d7:4f:
                    f4:9e:c8:f8:17:cf:16:c7:0d:eb:c5:62:15:38:ee:
                    c3:b1:61:1e:ff:68:c6:ae:eb:57:fc:2c:c9:61:32:
                    54:2d:6a:a8:af:01:15:e8:36:95:ca:2e:f4:e7:e2:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D9:BD:82:2D:BD:87:CA:24:0D:9D:E9:C0:CD:70:09:22:EC:B0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/67641ce0-f5ca-3f14-bfe4-51010fe44704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.crl

            X509v3 Authority Key Identifier:
                keyid:26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b8:6d:80:17:8b:76:a5:4b:8e:8f:3c:90:54:62:bd:d5:bf:
         6a:60:b7:23:fc:80:38:69:6c:ec:3c:f8:29:8f:d4:f5:36:7e:
         8b:35:a9:40:d5:9c:41:e9:23:f4:71:67:2a:f4:c0:2a:ec:13:
         ce:92:e6:2c:26:ee:56:a8:b6:26:73:3c:70:cb:10:0c:46:44:
         cb:b9:59:37:b8:b6:a4:26:7c:32:46:1c:be:a7:ab:5c:80:95:
         e9:8b:e3:c6:ab:e5:bc:69:d6:5c:4a:14:be:dd:e3:e5:e9:56:
         75:c9:f4:98:f9:2e:84:0a:9b:03:36:53:10:68:a6:8d:58:9b:
         18:6f:4a:08:3a:31:55:5b:8c:e9:83:0f:0a:36:9e:8e:b7:c0:
         c9:35:ae:e6:32:a7:0a:b8:3c:60:1f:45:23:19:90:72:1f:5a:
         47:c9:26:ff:5a:68:b6:0d:d8:d0:d7:11:3a:ba:a8:8e:65:ba:
         c3:75:9e:43:68:e4:01:2d:3f:87:d4:66:64:63:f2:be:fd:40:
         98:36:56:74:5a:16:65:d4:d2:f3:0a:3a:61:3a:15:3d:cb:ba:
         7e:84:6f:31:0a:0c:06:67:54:8b:06:91:4d:eb:f2:0a:75:46:
         63:0a:f8:a8:7e:43:2b:4f:ef:cc:56:bd:0d:7a:ac:d8:01:b9:
         56:48:cd:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxUPVktomMWUnokAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI1NzhmY2QtMDRhNS00NDdjLTgyMmQtYWFmOWY3NTgw
Y2RkMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
OTdlNWQzNzgtOTIyMC00NGE0LWFhMGYtNDYwMGI5NWYzYjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVNfMTF/n1q7cmdPJ8Jshn/2reDpf35w7c9e
eHcjkCCMrsm9trrOtCS2pUVrbks5tpm4SfZmqZDCqFYnUyNbGXnIqf3zg3Qve4dj
3XMEYcOimufRCYK2aObCFYGv8K7r8+pKQEgzyVGyIy6wX/2/zI2/iNhqP1eHvDlT
4MD4GtJB/Jx/Uo0l8epeVZ4KC4EYl4OBHgoxIrtpcd4algduLDYahJqmBHnJPsF7
lBr08X3WmOXizLDeT2C/gscGXeumVyQEdxT+T2Cj21LKyGYI10/0nsj4F88Wxw3r
xWIVOO7DsWEe/2jGrutX/CzJYTJULWqorwEV6DaVyi705+JHGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKnZvYItvYfKJA2d6cDNcAki7LCwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMjU3
OGZjZC0wNGE1LTQ0N2MtODIyZC1hYWY5Zjc1ODBjZGQvNjc2NDFjZTAtZjVjYS0z
ZjE0LWJmZTQtNTEwMTBmZTQ0NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTI1NzhmY2QtMDRhNS00NDdjLTgy
MmQtYWFmOWY3NTgwY2RkLzEyNTc4ZmNkLTA0YTUtNDQ3Yy04MjJkLWFhZjlmNzU4
MGNkZC5jcmwwHwYDVR0jBBgwFoAUJgD/MIdktPWThbJgps+LPcTKJNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMjU3OGZjZC0wNGE1LTQ0N2MtODIyZC1hYWY5
Zjc1ODBjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwF58MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFW4bYAXi3alS46PPJBUYr3Vv2pgtyP8gDhpbOw8+CmP1PU2fos1qUDV
nEHpI/RxZyr0wCrsE86S5iwm7laotiZzPHDLEAxGRMu5WTe4tqQmfDJGHL6nq1yA
lemL48ar5bxp1lxKFL7d4+XpVnXJ9Jj5LoQKmwM2UxBopo1YmxhvSgg6MVVbjOmD
Dwo2no63wMk1ruYypwq4PGAfRSMZkHIfWkfJJv9aaLYN2NDXETq6qI5lusN1nkNo
5AEtP4fUZmRj8r79QJg2VnRaFmXU0vMKOmE6FT3Lun6EbzEKDAZnVIsGkU3r8gp1
RmMK+Kh+QytP78xWvQ16rNgBuVZIzcc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:04 2025 by rpki-client