Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/e118b462-93ab-3146-891f-cfd3ad717961.roa
File:                     e118b462-93ab-3146-891f-cfd3ad717961.roa (raw, json)
Hash identifier:          uNPbCwLDjRxcJqgWvNrGTSakxwYmSlrykRhdn2A1/z8=
Subject key identifier:   B7:CF:A5:12:36:56:63:3B:F7:E4:9B:70:8F:7D:E4:00:51:46:01:94
Certificate issuer:       /CN=1c3c552c-5e23-4989-8af0-9450094442e8
Certificate serial:       010D0C9F43285847E78F5B88F16F31886CD3D380
Authority key identifier: 1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/e118b462-93ab-3146-891f-cfd3ad717961.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     16509
IP address blocks:        142.225.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:5b:88:f1:6f:31:88:6c:d3:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c3c552c-5e23-4989-8af0-9450094442e8
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=ea542946-6b32-4830-a259-5a532acd191a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:a5:78:6f:52:3e:9a:48:df:c6:71:a5:38:
                    07:45:8b:93:ec:ea:e4:3e:0e:89:77:99:96:db:10:
                    aa:ef:81:02:71:55:29:bf:c4:44:1b:d5:aa:6d:b7:
                    34:e6:f3:e7:97:df:f5:31:2b:77:88:f3:1d:3b:a5:
                    3c:cf:16:d9:29:d2:85:5c:68:93:83:f7:db:bf:e7:
                    5b:8b:e9:30:cc:39:89:fb:60:cd:74:46:a1:3f:c7:
                    16:5a:b1:51:c9:a8:fb:01:a9:61:cc:79:2e:a0:49:
                    ce:bb:57:29:62:d6:2c:dd:bc:c1:2e:20:21:2f:1b:
                    d2:03:c6:4c:4f:d6:bc:4f:de:d3:0d:c6:34:bb:25:
                    ae:21:16:b0:ac:15:41:e9:f7:6d:71:d1:0a:de:7b:
                    e6:fb:71:ef:58:b0:e6:70:6a:94:f9:32:0c:61:85:
                    7b:47:79:f8:21:fa:2b:03:50:22:fa:79:ae:7d:5f:
                    25:e8:68:0d:af:fa:ba:f9:30:fa:fd:0b:88:c4:95:
                    36:21:58:3f:b1:c4:42:04:c5:f5:14:21:a5:5d:b6:
                    98:5a:c8:27:ae:fc:27:00:25:9a:38:5a:18:01:99:
                    df:d9:26:cf:52:c3:fe:bf:1e:ca:be:8e:4e:68:c3:
                    5f:85:f4:67:80:ff:ec:6f:b1:a0:25:63:ba:83:3a:
                    6a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CF:A5:12:36:56:63:3B:F7:E4:9B:70:8F:7D:E4:00:51:46:01:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/e118b462-93ab-3146-891f-cfd3ad717961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl

            X509v3 Authority Key Identifier:
                keyid:1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.225.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4a:4e:ed:b6:d7:b3:55:8c:6b:66:48:19:b2:65:ce:3f:ac:
         13:7c:45:8f:76:58:cc:57:be:2d:89:ea:2d:b4:a0:df:13:37:
         9e:5e:67:67:da:b4:7e:6d:71:8e:62:b5:cf:81:d6:f8:b7:b4:
         96:bf:b1:c6:25:8c:51:32:a4:7d:b7:d2:e0:0e:23:20:6d:fc:
         46:d0:07:17:1a:03:ee:b2:96:47:ff:c5:76:71:bf:44:f1:11:
         ed:da:5e:d4:bd:82:a6:03:b8:73:ce:c3:5d:59:ee:15:2c:4d:
         cc:7a:37:6c:69:38:ef:22:40:7a:ca:40:90:12:d5:fe:39:6a:
         10:52:18:43:e9:80:79:b4:80:93:24:82:2c:1f:3b:b7:37:00:
         87:32:b4:26:6d:df:c4:56:70:19:86:53:c8:2c:58:30:4f:1d:
         41:3b:4c:e5:81:33:36:7c:c7:3d:d0:c3:f8:b9:67:6c:49:4f:
         fa:28:48:9e:e5:dc:57:bc:6d:e7:c5:bc:b2:64:9d:2d:54:e2:
         d8:a9:41:99:1d:f1:46:34:28:81:7f:d4:4f:7c:ef:c1:31:13:
         2e:22:52:f0:a2:2d:ce:55:cf:01:33:98:32:b9:13:a8:44:d5:
         d3:a3:9c:88:a5:d1:84:06:97:74:57:79:4a:91:44:45:41:3f:
         ef:34:5c:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj1uI8W8xiGzT04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWMzYzU1MmMtNWUyMy00OTg5LThhZjAtOTQ1MDA5NDQ0
MmU4MB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk
ZWE1NDI5NDYtNmIzMi00ODMwLWEyNTktNWE1MzJhY2QxOTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoemleG9SPppI38ZxpTgHRYuT7OrkPg6Jd5mW
2xCq74ECcVUpv8REG9Wqbbc05vPnl9/1MSt3iPMdO6U8zxbZKdKFXGiTg/fbv+db
i+kwzDmJ+2DNdEahP8cWWrFRyaj7AalhzHkuoEnOu1cpYtYs3bzBLiAhLxvSA8ZM
T9a8T97TDcY0uyWuIRawrBVB6fdtcdEK3nvm+3HvWLDmcGqU+TIMYYV7R3n4Ifor
A1Ai+nmufV8l6GgNr/q6+TD6/QuIxJU2IVg/scRCBMX1FCGlXbaYWsgnrvwnACWa
OFoYAZnf2SbPUsP+vx7Kvo5OaMNfhfRngP/sb7GgJWO6gzpqBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLfPpRI2VmM79+SbcI995ABRRgGUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNj
NTUyYy01ZTIzLTQ5ODktOGFmMC05NDUwMDk0NDQyZTgvZTExOGI0NjItOTNhYi0z
MTQ2LTg5MWYtY2ZkM2FkNzE3OTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWMzYzU1MmMtNWUyMy00OTg5LThh
ZjAtOTQ1MDA5NDQ0MmU4LzFjM2M1NTJjLTVlMjMtNDk4OS04YWYwLTk0NTAwOTQ0
NDJlOC5jcmwwHwYDVR0jBBgwFoAUGpOw4GB9XUWnpf4CDPsZhiD+zJ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNjNTUyYy01ZTIzLTQ5ODktOGFmMC05NDUw
MDk0NDQyZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxKTu2217NVjGtmSBmyZc4/rBN8RY92WMxXvi2J6i20oN8TN55eZ2fa
tH5tcY5itc+B1vi3tJa/scYljFEypH230uAOIyBt/EbQBxcaA+6ylkf/xXZxv0Tx
Ee3aXtS9gqYDuHPOw11Z7hUsTcx6N2xpOO8iQHrKQJAS1f45ahBSGEPpgHm0gJMk
giwfO7c3AIcytCZt38RWcBmGU8gsWDBPHUE7TOWBMzZ8xz3Qw/i5Z2xJT/ooSJ7l
3Fe8befFvLJknS1U4tipQZkd8UY0KIF/1E9878ExEy4iUvCiLc5VzwEzmDK5E6hE
1dOjnIil0YQGl3RXeUqRREVBP+80XIw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:58 2025 by rpki-client