Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/71601b8f-c699-3d39-9db5-89efd79e5db2.roa
File:                     71601b8f-c699-3d39-9db5-89efd79e5db2.roa (raw, json)
Hash identifier:          r2x6D3H31l1uEeT/U6HeyaivxWHnlVTv5cZJC5+MsPY=
Subject key identifier:   DC:C0:0E:5A:C2:A5:CE:DE:71:6E:48:EF:09:D6:53:AE:80:4C:16:D3
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F4328584839EABF2D35C8F34CD0E7F942
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/71601b8f-c699-3d39-9db5-89efd79e5db2.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        152.130.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bf:2d:35:c8:f3:4c:d0:e7:f9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=2122ba97-37a8-43a5-acec-1d6306d64dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:eb:5e:9b:d7:4d:b1:67:70:e3:af:cd:fd:
                    e9:93:e4:e2:b8:16:cc:d7:f0:84:e5:3c:3d:e9:0c:
                    30:16:69:ba:e3:12:03:24:06:e6:ee:91:af:16:e2:
                    15:c9:38:b6:a7:c9:a5:26:65:16:95:55:e2:09:2b:
                    30:a2:2e:7f:e4:aa:fc:b9:ef:0e:86:89:64:d8:bf:
                    25:8d:d7:cc:ef:ca:30:35:b9:6d:b6:53:a3:ac:27:
                    78:07:a5:32:54:cb:b7:f0:ad:3b:5b:5b:62:f6:38:
                    b8:ba:87:ab:6f:81:92:6a:23:5b:69:b8:3a:dd:1c:
                    cd:18:fc:c4:56:8b:71:55:2d:9c:29:a0:93:9f:4c:
                    f4:bb:b7:be:f3:6a:72:24:1e:e2:41:65:8b:4c:84:
                    77:b2:51:2a:cc:d3:55:e8:62:28:8b:cd:66:b1:2c:
                    a6:66:76:91:18:60:8a:a9:a3:cd:61:cd:ee:19:ab:
                    b6:3d:15:cb:98:5e:e5:0f:c9:ae:6c:64:5b:e4:e6:
                    50:46:56:97:35:61:7d:54:67:6a:e9:8b:07:3d:24:
                    2a:26:08:b5:b6:9c:89:bf:7c:be:b4:b4:ec:80:b2:
                    a4:e7:ca:19:70:af:46:8d:ff:2a:1e:33:d1:58:d5:
                    92:6d:9c:1a:ef:13:2f:d3:d0:8b:2f:17:a3:dc:ec:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C0:0E:5A:C2:A5:CE:DE:71:6E:48:EF:09:D6:53:AE:80:4C:16:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/71601b8f-c699-3d39-9db5-89efd79e5db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.130.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:b3:8d:2c:61:67:f4:62:88:d7:81:ae:9d:30:40:98:73:
         b4:d6:7f:cc:c2:10:f5:3e:d0:a7:77:67:a9:f8:e9:18:58:55:
         e3:ec:84:a5:66:97:68:c3:cf:f3:22:6e:ec:b8:7e:d5:4c:45:
         32:7b:75:85:fa:c3:3d:2e:c3:84:a4:16:24:11:53:09:8e:7d:
         f1:14:2a:b8:dc:7d:e7:fa:18:bd:03:de:0a:63:12:0a:d1:bf:
         5f:6f:62:2d:62:ce:9d:d6:50:9f:0c:cf:19:23:7d:69:67:5d:
         ce:c3:b2:f8:3c:e3:7a:28:22:f2:17:11:60:95:25:84:f4:ef:
         89:0b:26:0e:dc:82:0c:4f:48:de:28:cb:71:d1:30:21:a3:94:
         94:7c:0d:1b:df:f3:cf:e8:d7:fe:22:e1:0e:5d:f3:31:40:c3:
         71:c4:31:c3:85:27:aa:d2:d2:a7:11:ec:a1:89:d4:82:70:63:
         ce:48:e4:48:de:fb:b9:92:13:27:32:85:91:ca:19:2b:61:2b:
         ec:23:92:3e:e2:8d:40:c0:0f:11:91:e6:54:54:37:1d:77:d2:
         2d:d8:a5:9d:cf:0a:bc:4f:a7:55:bb:f2:b8:d9:b7:42:fc:47:
         e1:90:1c:2a:90:00:82:54:1f:a9:8e:dc:31:4f:49:0f:b7:85:
         82:47:91:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg56r8tNcjzTNDn+UIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY0ZmFmMmEtMTdmZi00ODI3LTliZWMtYzZmZmNiMmFk
MDkyMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
MjEyMmJhOTctMzdhOC00M2E1LWFjZWMtMWQ2MzA2ZDY0ZGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfjrXpvXTbFncOOvzf3pk+TiuBbM1/CE5Tw9
6QwwFmm64xIDJAbm7pGvFuIVyTi2p8mlJmUWlVXiCSswoi5/5Kr8ue8Oholk2L8l
jdfM78owNblttlOjrCd4B6UyVMu38K07W1ti9ji4uoerb4GSaiNbabg63RzNGPzE
VotxVS2cKaCTn0z0u7e+82pyJB7iQWWLTIR3slEqzNNV6GIoi81msSymZnaRGGCK
qaPNYc3uGau2PRXLmF7lD8mubGRb5OZQRlaXNWF9VGdq6YsHPSQqJgi1tpyJv3y+
tLTsgLKk58oZcK9Gjf8qHjPRWNWSbZwa7xMv09CLLxej3Oz97wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzADlrCpc7ecW5I7wnWU66ATBbTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRm
YWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZmY2IyYWQwOTIvNzE2MDFiOGYtYzY5OS0z
ZDM5LTlkYjUtODllZmQ3OWU1ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGY0ZmFmMmEtMTdmZi00ODI3LTli
ZWMtYzZmZmNiMmFkMDkyLzRmNGZhZjJhLTE3ZmYtNDgyNy05YmVjLWM2ZmZjYjJh
ZDA5Mi5jcmwwHwYDVR0jBBgwFoAU4BNewN3Gcqc4VJWHF5QWjm2ZcC8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRmYWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZm
Y2IyYWQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmIL4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACG6s40sYWf0YojXga6dMECYc7TWf8zCEPU+0Kd3Z6n46RhYVePshKVm
l2jDz/Mibuy4ftVMRTJ7dYX6wz0uw4SkFiQRUwmOffEUKrjcfef6GL0D3gpjEgrR
v19vYi1izp3WUJ8MzxkjfWlnXc7Dsvg843ooIvIXEWCVJYT074kLJg7cggxPSN4o
y3HRMCGjlJR8DRvf88/o1/4i4Q5d8zFAw3HEMcOFJ6rS0qcR7KGJ1IJwY85I5Eje
+7mSEycyhZHKGSthK+wjkj7ijUDADxGR5lRUNx130i3YpZ3PCrxPp1W78rjZt0L8
R+GQHCqQAIJUH6mO3DFPSQ+3hYJHkRw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:19 2025 by rpki-client