Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/364d88cd-1340-35a7-87b3-d07d0dcee455.roa
File:                     364d88cd-1340-35a7-87b3-d07d0dcee455.roa (raw, json)
Hash identifier:          46HBNcuqxQ72tHxukZROofxO3yXbaeN6tubOtAfyNOc=
Subject key identifier:   10:23:89:D4:76:11:7B:55:6B:2D:4A:15:E7:5C:7D:CE:AA:95:96:C2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847F84F7F160C21FE93B171AC00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/364d88cd-1340-35a7-87b3-d07d0dcee455.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     397630
IP address blocks:        130.254.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:7f:16:0c:21:fe:93:b1:71:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=b97e1a5b-271b-4af6-9cff-470c7a91b403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:0c:b3:16:d9:96:27:ec:73:9c:c1:c7:fe:
                    93:fa:76:23:5c:f3:43:b1:ef:b4:39:a5:cc:b8:83:
                    ae:0a:f6:ce:05:58:95:42:97:d6:eb:24:87:85:2b:
                    f8:da:2a:f0:64:ab:54:de:49:56:12:26:47:31:aa:
                    59:c7:99:4a:49:14:23:91:8c:fe:bb:ad:ef:ef:37:
                    85:29:ab:cc:00:b5:29:8c:77:b6:d4:30:b1:ec:27:
                    94:82:c6:2e:86:b8:51:c2:36:35:2b:a8:d3:9e:22:
                    ab:53:81:1d:4a:a1:58:2d:b3:e8:fd:a4:33:6a:6d:
                    ee:79:f2:db:4a:ca:76:f6:af:37:9a:8d:47:7c:1d:
                    ca:da:06:4e:ae:fd:49:e3:d3:c3:b1:8e:f5:aa:e9:
                    30:c3:0f:13:94:85:b8:8f:9d:b7:97:e0:d4:27:a3:
                    9f:80:aa:dd:38:1e:c7:f3:f8:ab:31:44:d2:92:85:
                    a2:0f:36:11:33:5c:40:31:c6:be:fb:4d:9c:7d:66:
                    ed:da:71:de:32:f2:6f:5c:d5:b3:8d:5a:9d:ad:56:
                    54:88:56:75:25:f1:98:f7:94:e3:31:c0:d9:53:86:
                    9c:05:40:6e:9c:8a:c6:29:f9:3a:74:75:7a:6b:e1:
                    87:08:72:d8:fe:af:53:9a:cd:63:b8:fa:46:f3:b8:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:23:89:D4:76:11:7B:55:6B:2D:4A:15:E7:5C:7D:CE:AA:95:96:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/364d88cd-1340-35a7-87b3-d07d0dcee455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:c8:98:ed:29:be:43:48:05:e2:e6:74:98:1e:ee:40:e0:d2:
         f8:f6:d6:33:f6:2e:60:24:4b:a5:fe:99:82:09:e5:a7:58:76:
         2e:48:ee:a5:a5:dd:ef:59:16:eb:88:14:22:18:82:84:0a:27:
         da:2f:f5:3e:b8:2c:1b:c5:9c:95:17:f6:bc:c7:e4:b2:ec:9f:
         df:4a:9e:a9:36:fa:e2:18:cb:6e:2c:4a:ea:0b:84:c8:1c:4a:
         0f:11:da:13:1e:cb:07:42:e0:c1:1e:3b:47:4d:a8:d6:65:82:
         10:a2:3c:19:0d:a7:0d:86:fa:b1:99:24:ee:ce:cd:2b:82:44:
         54:bc:ec:26:b4:f1:17:40:ac:36:50:63:e1:96:51:83:32:aa:
         f6:7d:f3:59:ea:a0:ec:70:18:58:93:e0:b5:01:c1:e0:bc:94:
         29:c1:04:b2:d2:40:a0:58:d4:6d:ab:2b:fd:58:c2:0a:4b:19:
         75:33:e1:aa:f5:14:bd:2d:55:94:ce:41:29:70:0a:c0:14:91:
         3b:a1:c7:2e:90:68:f8:ec:34:84:2a:be:99:c9:e9:a8:3e:c5:
         e8:d1:e2:9f:8c:a9:9c:75:34:09:7a:a6:4e:26:67:b4:3f:15:
         cb:79:9b:74:86:0f:48:af:47:70:50:8e:35:1a:f4:56:37:e2:
         55:46:4c:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T38WDCH+k7FxrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk
Yjk3ZTFhNWItMjcxYi00YWY2LTljZmYtNDcwYzdhOTFiNDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopoMsxbZlifsc5zBx/6T+nYjXPNDse+0OaXM
uIOuCvbOBViVQpfW6ySHhSv42irwZKtU3klWEiZHMapZx5lKSRQjkYz+u63v7zeF
KavMALUpjHe21DCx7CeUgsYuhrhRwjY1K6jTniKrU4EdSqFYLbPo/aQzam3uefLb
Ssp29q83mo1HfB3K2gZOrv1J49PDsY71qukwww8TlIW4j523l+DUJ6OfgKrdOB7H
8/irMUTSkoWiDzYRM1xAMca++02cfWbt2nHeMvJvXNWzjVqdrVZUiFZ1JfGY95Tj
McDZU4acBUBunIrGKfk6dHV6a+GHCHLY/q9Tms1juPpG87h6vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBAjidR2EXtVay1KFedcfc6qlZbCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzY0ZDg4Y2QtMTM0MC0z
NWE3LTg3YjMtZDA3ZDBkY2VlNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv50MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMPImO0pvkNIBeLmdJge7kDg0vj21jP2LmAkS6X+mYIJ5adYdi5I7qWl
3e9ZFuuIFCIYgoQKJ9ov9T64LBvFnJUX9rzH5LLsn99Knqk2+uIYy24sSuoLhMgc
Sg8R2hMeywdC4MEeO0dNqNZlghCiPBkNpw2G+rGZJO7OzSuCRFS87Ca08RdArDZQ
Y+GWUYMyqvZ981nqoOxwGFiT4LUBweC8lCnBBLLSQKBY1G2rK/1YwgpLGXUz4ar1
FL0tVZTOQSlwCsAUkTuhxy6QaPjsNIQqvpnJ6ag+xejR4p+MqZx1NAl6pk4mZ7Q/
Fct5m3SGD0ivR3BQjjUa9FY34lVGTPA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:00:34 2025 by rpki-client