Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c2f01357-03d4-3e48-a94c-be6b3c386109.roa
File:                     c2f01357-03d4-3e48-a94c-be6b3c386109.roa (raw, json)
Hash identifier:          7dh68oZR9tgk1NCb4UGUS4Us42yzQPEP2utiYS6/x20=
Subject key identifier:   0F:03:3A:CA:02:60:0B:D5:39:71:EE:69:14:DA:43:6A:77:7F:D0:F5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584837200B41E81E15B7A7E30180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c2f01357-03d4-3e48-a94c-be6b3c386109.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     7018
IP address blocks:        147.53.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:0b:41:e8:1e:15:b7:a7:e3:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=3e08afce-56b3-453c-a1fc-1e9ee4b11db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:d8:d7:ce:34:d7:d9:74:17:d8:57:64:98:
                    c9:52:4d:94:77:dd:2b:48:f4:3c:d8:39:73:43:8b:
                    62:18:d4:95:f3:76:c5:41:7a:31:1a:7d:a7:07:0e:
                    b8:79:6a:6a:84:20:57:ae:c9:e6:9d:96:d0:fb:23:
                    45:7c:3e:00:31:7d:cf:d0:3a:48:99:a4:9f:d4:99:
                    76:72:f7:dd:a5:c2:19:c8:a9:fe:57:d4:b7:8f:6f:
                    ca:0e:31:89:66:16:fe:52:60:d5:66:eb:d2:5b:e8:
                    55:6a:3f:bb:08:5f:d4:0c:37:ae:8a:5a:3f:7a:67:
                    b0:81:ee:23:84:7f:06:9c:e0:4d:79:cf:6b:6e:38:
                    3c:28:16:95:a4:9a:31:48:eb:05:93:61:48:51:85:
                    cc:55:37:66:92:f9:00:0e:ae:3c:95:18:71:1d:e2:
                    da:73:56:5a:88:54:de:de:52:61:6c:a3:6b:a0:90:
                    08:d4:fb:e3:3c:e2:f9:cd:d9:55:08:5b:80:cf:9d:
                    b1:e3:34:d3:a9:be:ea:2f:54:49:3a:60:d5:90:62:
                    07:54:d9:06:7b:38:a8:dd:57:13:9b:ab:fd:e1:52:
                    48:57:a5:87:1d:b3:ed:de:22:5f:af:e3:fe:fd:41:
                    c0:c7:67:a9:cd:21:2b:54:eb:82:2a:9b:c5:23:0f:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:03:3A:CA:02:60:0B:D5:39:71:EE:69:14:DA:43:6A:77:7F:D0:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c2f01357-03d4-3e48-a94c-be6b3c386109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:71:73:d1:32:33:d6:65:fc:95:4c:f7:6b:d0:c0:e7:24:3a:
         45:2b:12:62:3c:3f:37:45:61:41:ec:21:2f:92:6b:f5:97:1a:
         55:8d:f0:d4:e7:05:bd:78:29:e4:be:7b:9f:e2:4f:0a:c3:07:
         89:d2:62:a3:87:58:c2:27:37:5b:1e:9b:a9:0b:09:bd:75:a5:
         e4:7b:5a:18:4e:37:8e:b7:b5:2c:90:ce:ac:92:f8:96:56:15:
         8d:0c:8f:2a:23:fb:e7:b8:f6:8f:a2:6e:56:3b:67:3e:54:f2:
         34:cf:06:e5:09:4f:d5:30:93:3b:0c:1f:47:56:8b:6a:30:9f:
         59:d1:5f:3c:99:a8:0b:ba:28:ea:e2:86:f0:0e:82:1e:5f:a7:
         8e:28:e9:55:df:59:da:21:2d:85:a3:73:34:db:2e:a7:a0:db:
         ad:9b:0b:b4:0e:65:c3:e0:7b:96:50:0b:a0:32:be:2f:4a:ba:
         6e:01:3e:24:d4:d2:c7:70:94:cf:5c:af:cf:9f:97:f3:66:f6:
         ca:8b:21:ab:03:a5:b0:ad:ab:8e:27:55:69:b5:52:ab:1b:5a:
         b8:0f:96:4c:ef:55:36:74:9a:62:fb:76:51:79:87:ce:69:30:
         82:1c:6e:40:89:8f:e2:18:c8:c3:b9:b7:60:e9:30:7a:dd:d4:
         a2:57:41:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg3IAtB6B4Vt6fjAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MTIxNTE0MDA1M1oXDTI1MDMxNTEzMDA1M1owLzEtMCsGA1UEAxMk
M2UwOGFmY2UtNTZiMy00NTNjLWExZmMtMWU5ZWU0YjExZGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVXY184019l0F9hXZJjJUk2Ud90rSPQ82Dlz
Q4tiGNSV83bFQXoxGn2nBw64eWpqhCBXrsnmnZbQ+yNFfD4AMX3P0DpImaSf1Jl2
cvfdpcIZyKn+V9S3j2/KDjGJZhb+UmDVZuvSW+hVaj+7CF/UDDeuilo/emewge4j
hH8GnOBNec9rbjg8KBaVpJoxSOsFk2FIUYXMVTdmkvkADq48lRhxHeLac1ZaiFTe
3lJhbKNroJAI1PvjPOL5zdlVCFuAz52x4zTTqb7qL1RJOmDVkGIHVNkGezio3VcT
m6v94VJIV6WHHbPt3iJfr+P+/UHAx2epzSErVOuCKpvFIw/AMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8DOsoCYAvVOXHuaRTaQ2p3f9D1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzJmMDEzNTctMDNkNC0z
ZTQ4LWE5NGMtYmU2YjNjMzg2MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM1xc9EyM9Zl/JVM92vQwOckOkUrEmI8PzdFYUHsIS+Sa/WXGlWN8NTn
Bb14KeS+e5/iTwrDB4nSYqOHWMInN1sem6kLCb11peR7WhhON463tSyQzqyS+JZW
FY0Mjyoj++e49o+iblY7Zz5U8jTPBuUJT9UwkzsMH0dWi2own1nRXzyZqAu6KOri
hvAOgh5fp44o6VXfWdohLYWjczTbLqeg262bC7QOZcPge5ZQC6Ayvi9Kum4BPiTU
0sdwlM9cr8+fl/Nm9sqLIasDpbCtq44nVWm1UqsbWrgPlkzvVTZ0mmL7dlF5h85p
MIIcbkCJj+IYyMO5t2DpMHrd1KJXQS0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:18 2025 by rpki-client