Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b329ccb4-4c8d-3081-80c6-39113fd63696.roa
File:                     b329ccb4-4c8d-3081-80c6-39113fd63696.roa (raw, json)
Hash identifier:          CHDiabvUQYzysr/jBlSN3J19pKjY31I1DUk4W8o+Xz4=
Subject key identifier:   A0:FE:B2:52:FA:DB:45:31:0F:29:34:46:8E:0B:A3:94:03:0F:34:E3
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E62AB277B320076D68D54700
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b329ccb4-4c8d-3081-80c6-39113fd63696.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36040
IP address blocks:        208.117.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b2:77:b3:20:07:6d:68:d5:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=82f5804c-4ec7-4d65-ae37-83c80645bc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0d:97:6e:69:70:80:ac:be:62:e4:1d:98:92:
                    e8:b2:ee:21:3e:ba:26:5f:12:02:79:da:5b:0d:89:
                    d2:fb:4a:6e:86:88:a5:8f:51:5d:10:60:27:21:0f:
                    4b:26:fe:20:a9:a8:23:83:f1:ba:a4:a1:bf:92:54:
                    e5:84:19:44:97:a2:a7:17:58:72:de:fc:70:ac:1c:
                    5d:c2:c9:39:8a:8c:ee:01:7e:9b:6b:2a:28:22:3e:
                    b1:cb:b6:82:42:b1:64:a2:52:74:90:45:41:3a:17:
                    d5:3b:8b:b7:ff:f2:88:61:ee:4c:95:0c:50:3a:19:
                    de:7d:ba:0f:3b:34:c3:8e:ca:97:2f:f8:11:0c:e3:
                    e8:4d:74:85:12:a3:1e:dd:5e:60:02:6c:53:fc:f8:
                    f2:b8:26:0f:60:f3:e5:5f:1b:32:4c:22:b1:6c:c0:
                    1d:8d:86:3f:47:d2:18:f7:4e:7d:ac:1f:d1:b5:12:
                    2a:b5:f3:fa:9b:58:e7:86:2f:a9:0c:c8:7c:be:81:
                    af:d9:cb:78:d3:56:f8:51:00:0d:79:28:0d:60:db:
                    6a:75:80:16:4e:c9:f8:89:a9:74:a8:75:34:25:72:
                    00:82:18:f5:fc:58:8a:82:8a:7b:e7:60:55:fa:a1:
                    68:46:b8:73:d6:2a:42:5d:cd:cc:eb:12:dc:02:8f:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FE:B2:52:FA:DB:45:31:0F:29:34:46:8E:0B:A3:94:03:0F:34:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b329ccb4-4c8d-3081-80c6-39113fd63696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:28:ee:27:39:f6:5c:68:7f:16:ab:ad:5f:7a:89:a2:66:e1:
         e5:48:ee:b8:19:30:a7:b8:dc:03:dd:42:0c:dc:23:fd:44:56:
         4f:4c:35:2d:b6:e9:9a:c4:04:9b:66:16:fc:8b:46:ce:92:60:
         66:d6:55:6d:4f:01:a3:ce:cd:d4:68:cf:9c:9b:45:d4:ad:0e:
         7f:57:5f:fb:dc:e0:3e:15:a9:15:d1:cd:0d:a5:ae:4c:e0:d6:
         27:be:83:e2:e3:0f:4c:f0:12:7f:6c:93:90:eb:2e:de:6a:7c:
         fd:f9:db:d4:cd:ab:27:fc:1d:f2:6b:21:32:82:d2:1e:e7:d3:
         53:16:1b:60:5f:bc:00:58:1a:7d:94:bf:5c:6f:86:7e:2d:5b:
         96:4a:ea:f2:fb:dc:d2:76:b5:f1:f3:9b:e6:84:c3:fe:1f:6a:
         6f:61:11:3a:b7:d5:e0:09:ed:c7:0f:05:0c:b1:b9:54:e9:55:
         3d:2b:69:41:0a:54:c2:cb:c2:53:90:8c:4d:76:fd:da:ad:c7:
         49:84:48:b5:16:59:96:cc:10:4f:df:f6:3b:e8:70:9e:2e:8c:
         f9:67:6f:fe:14:a3:72:90:ba:f4:b2:97:0c:bd:51:2e:83:fa:
         14:4f:40:ee:fe:70:5a:61:aa:58:f0:64:20:79:c8:58:88:6e:
         30:92:92:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKrJ3syAHbWjVRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ODJmNTgwNGMtNGVjNy00ZDY1LWFlMzctODNjODA2NDViYzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg2XbmlwgKy+YuQdmJLosu4hPromXxICedpb
DYnS+0puhoilj1FdEGAnIQ9LJv4gqagjg/G6pKG/klTlhBlEl6KnF1hy3vxwrBxd
wsk5iozuAX6bayooIj6xy7aCQrFkolJ0kEVBOhfVO4u3//KIYe5MlQxQOhnefboP
OzTDjsqXL/gRDOPoTXSFEqMe3V5gAmxT/PjyuCYPYPPlXxsyTCKxbMAdjYY/R9IY
9059rB/RtRIqtfP6m1jnhi+pDMh8voGv2ct401b4UQANeSgNYNtqdYAWTsn4ial0
qHU0JXIAghj1/FiKgop752BV+qFoRrhz1ipCXc3M6xLcAo959wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKD+slL620UxDyk0Ro4Lo5QDDzTjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYjMyOWNjYjQtNGM4ZC0z
MDgxLTgwYzYtMzkxMTNmZDYzNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HX+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4o7ic59lxofxarrV96iaJm4eVI7rgZMKe43APdQgzcI/1EVk9MNS22
6ZrEBJtmFvyLRs6SYGbWVW1PAaPOzdRoz5ybRdStDn9XX/vc4D4VqRXRzQ2lrkzg
1ie+g+LjD0zwEn9sk5DrLt5qfP3529TNqyf8HfJrITKC0h7n01MWG2BfvABYGn2U
v1xvhn4tW5ZK6vL73NJ2tfHzm+aEw/4fam9hETq31eAJ7ccPBQyxuVTpVT0raUEK
VMLLwlOQjE12/dqtx0mESLUWWZbMEE/f9jvocJ4ujPlnb/4Uo3KQuvSylwy9US6D
+hRPQO7+cFphqljwZCB5yFiIbjCSksE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:58:14 2025 by rpki-client