Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/10d1bb84-e6e2-362b-9505-6cd59ced77da.roa
File:                     10d1bb84-e6e2-362b-9505-6cd59ced77da.roa (raw, json)
Hash identifier:          V6E0n+H97OFK3rif68+UZJDzk0TUkS5kkSbCBIuqrHQ=
Subject key identifier:   99:4A:27:4F:E4:CC:FF:31:1E:C8:1A:F9:39:EA:D9:69:2E:4A:85:EE
Certificate issuer:       /CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Certificate serial:       010D0C9F432858482BF54CDA74B513E3C4CD3700
Authority key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/10d1bb84-e6e2-362b-9505-6cd59ced77da.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     19224
IP address blocks:        152.160.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:4c:da:74:b5:13:e3:c4:cd:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=4060c020-7a96-443f-8515-79719194ff1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:75:71:e4:3f:6f:8e:00:87:b7:70:d9:10:e6:
                    3a:ed:87:ab:f4:b8:1f:eb:7c:a8:bb:19:86:79:34:
                    2a:74:be:bd:d8:5a:68:6f:57:c2:81:14:a9:e1:b3:
                    7c:0c:b2:5e:45:b7:38:75:66:dd:b6:60:c3:a8:92:
                    8b:fb:b2:79:49:ee:1d:60:04:73:09:a7:4b:0a:df:
                    80:ab:1b:45:14:22:86:b5:d1:76:1d:78:fc:3c:ab:
                    e1:74:52:e8:9d:30:83:ea:45:0a:22:08:8b:6b:71:
                    c3:7a:87:ce:73:bc:e7:ee:62:07:f2:04:cc:23:4d:
                    09:3a:10:11:05:bc:48:66:aa:b7:44:10:be:43:82:
                    0e:23:69:2e:7d:c6:9e:30:a3:1d:3a:41:64:10:54:
                    20:df:e7:87:bd:7a:8a:09:be:2d:80:c7:e5:92:1e:
                    53:8c:cb:0b:48:9d:eb:33:3f:e2:47:cb:c0:7a:92:
                    c1:97:1e:9d:a1:a4:32:f7:14:c9:02:49:bd:1d:4a:
                    ed:17:66:a1:d6:ba:09:bb:e0:f6:78:2e:75:f6:c6:
                    63:e3:0d:5d:12:00:55:44:52:eb:43:63:64:81:46:
                    f0:8a:8a:a5:6c:97:8a:85:3e:2b:33:39:86:db:3b:
                    da:5b:45:12:33:33:f2:2c:5f:14:23:a7:fd:67:ec:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4A:27:4F:E4:CC:FF:31:1E:C8:1A:F9:39:EA:D9:69:2E:4A:85:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/10d1bb84-e6e2-362b-9505-6cd59ced77da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl

            X509v3 Authority Key Identifier:
                keyid:A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.160.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e7:42:75:c8:95:ef:0d:55:f9:fb:95:d0:1d:6e:07:fe:3a:
         7e:fd:2a:32:31:aa:7f:a1:7d:0b:84:88:51:06:6c:14:42:3a:
         35:0c:e6:72:97:82:d9:6b:c1:34:37:01:ad:a7:fe:a9:7f:90:
         25:ca:94:b7:83:95:97:44:06:5d:91:0f:69:c3:ea:47:cc:6c:
         15:f7:6f:fd:7b:ea:4f:ad:65:d8:aa:c7:09:66:66:e9:3f:ed:
         d6:ba:2d:e0:e7:c2:04:e5:40:67:fd:eb:d2:89:c1:d0:73:be:
         24:0d:83:63:78:10:6f:0c:f9:10:7d:b9:24:aa:8d:a7:9a:6d:
         14:8b:67:97:07:d0:1a:d9:cf:73:01:44:e1:32:9c:6e:c2:bd:
         42:47:dd:15:50:3e:15:1a:39:26:9e:da:a4:0f:85:8c:07:2a:
         5a:f0:61:12:5b:1e:24:58:cc:c3:77:dc:6e:3a:06:ca:c0:10:
         54:7c:ef:2f:0b:2c:bb:26:71:61:53:94:a9:81:19:b6:11:c6:
         0a:a4:c5:25:6d:d2:9e:0f:c3:72:e0:f5:b6:69:4e:7c:d6:09:
         aa:4c:47:79:34:f8:65:ab:9c:ef:94:6f:b9:62:6f:b7:bd:f7:
         74:25:e0:74:65:5e:55:15:6c:bf:ac:34:9c:8f:7d:c8:80:4e:
         88:c3:90:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9UzadLUT48TNNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiY2E1NDYtY2E4MS00OGY1LWJkZDQtOGMxMTFiYTUy
M2VhMB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDA2MGMwMjAtN2E5Ni00NDNmLTg1MTUtNzk3MTkxOTRmZjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHVx5D9vjgCHt3DZEOY67Yer9Lgf63youxmG
eTQqdL692Fpob1fCgRSp4bN8DLJeRbc4dWbdtmDDqJKL+7J5Se4dYARzCadLCt+A
qxtFFCKGtdF2HXj8PKvhdFLonTCD6kUKIgiLa3HDeofOc7zn7mIH8gTMI00JOhAR
BbxIZqq3RBC+Q4IOI2kufcaeMKMdOkFkEFQg3+eHvXqKCb4tgMflkh5TjMsLSJ3r
Mz/iR8vAepLBlx6doaQy9xTJAkm9HUrtF2ah1roJu+D2eC519sZj4w1dEgBVRFLr
Q2NkgUbwioqlbJeKhT4rMzmG2zvaW0USMzPyLF8UI6f9Z+y9vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJlKJ0/kzP8xHsga+Tnq2WkuSoXuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYWJj
YTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzExMWJhNTIzZWEvMTBkMWJiODQtZTZlMi0z
NjJiLTk1MDUtNmNkNTljZWQ3N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2FiY2E1NDYtY2E4MS00OGY1LWJk
ZDQtOGMxMTFiYTUyM2VhLzNhYmNhNTQ2LWNhODEtNDhmNS1iZGQ0LThjMTExYmE1
MjNlYS5jcmwwHwYDVR0jBBgwFoAUoYEZY9Vg9XWnqQ30oiBjUGbpybAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYWJjYTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzEx
MWJhNTIzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmKBUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjnQnXIle8NVfn7ldAdbgf+On79KjIxqn+hfQuEiFEGbBRCOjUM5nKX
gtlrwTQ3Aa2n/ql/kCXKlLeDlZdEBl2RD2nD6kfMbBX3b/176k+tZdiqxwlmZuk/
7da6LeDnwgTlQGf969KJwdBzviQNg2N4EG8M+RB9uSSqjaeabRSLZ5cH0BrZz3MB
ROEynG7CvUJH3RVQPhUaOSae2qQPhYwHKlrwYRJbHiRYzMN33G46BsrAEFR87y8L
LLsmcWFTlKmBGbYRxgqkxSVt0p4Pw3Lg9bZpTnzWCapMR3k0+GWrnO+Ub7lib7e9
93Ql4HRlXlUVbL+sNJyPfciATojDkNc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:21:28 2025 by rpki-client