Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/61ae1195-4b8c-307c-a787-334864a9e04b.roa
File:                     61ae1195-4b8c-307c-a787-334864a9e04b.roa (raw, json)
Hash identifier:          aWHIIm1+k4JsZwjwmyxL5qbZgQwPGwyoMga60tSdjA8=
Subject key identifier:   D2:88:40:09:BF:1B:64:AF:99:63:D5:C3:21:70:6D:D6:87:C1:73:D3
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584858A0580BA144845BEB36F980
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/61ae1195-4b8c-307c-a787-334864a9e04b.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     6079
IP address blocks:        163.123.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:58:0b:a1:44:84:5b:eb:36:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=7693e5cc-02ee-4081-8557-ef6b0af3eb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:af:4c:42:e6:c8:a3:75:89:90:c7:ce:ee:
                    e8:40:34:49:d6:42:0a:ce:80:78:c8:55:d6:57:da:
                    cb:a5:a5:a4:e8:78:72:2f:b0:c4:d6:7c:e5:f1:06:
                    6d:0f:d9:e5:8d:92:9f:a9:b1:73:ce:da:06:ae:b1:
                    b7:0c:4b:6b:8b:05:35:c4:80:db:85:41:90:66:26:
                    44:b8:3a:17:16:65:34:dc:1d:04:ae:58:6c:5a:1f:
                    ec:26:c8:97:be:0e:7f:42:fa:dc:47:ff:29:a7:15:
                    09:6e:85:0b:99:01:9d:27:fa:cd:16:5b:81:1b:7f:
                    61:29:99:5e:9d:2a:5e:27:28:79:33:0e:cd:a9:0e:
                    35:a6:14:cf:a2:9a:08:13:a3:c5:6a:8c:bd:7c:c2:
                    04:65:4e:e3:ca:75:23:bc:de:c0:20:80:32:8f:9c:
                    37:6f:a1:a0:08:17:41:07:40:ee:15:12:b4:51:37:
                    2a:b5:8e:f6:9f:ad:18:d1:3b:cb:87:b0:fc:09:fa:
                    63:b2:11:fe:18:53:7e:69:17:3d:24:ed:ab:32:3f:
                    12:7e:23:02:c1:69:63:79:c4:2f:fb:ec:75:0a:d8:
                    0c:9d:b2:a7:38:2c:05:3d:83:46:f0:dc:27:b2:f2:
                    8e:48:60:90:bd:66:fa:cf:39:5b:43:ef:50:51:aa:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:88:40:09:BF:1B:64:AF:99:63:D5:C3:21:70:6D:D6:87:C1:73:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/61ae1195-4b8c-307c-a787-334864a9e04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:24:0b:8e:3c:bc:ae:d1:8c:cc:4e:e7:84:28:6b:76:fe:88:
         46:1d:6c:32:5d:f0:76:ae:a4:f2:49:90:1b:d8:2e:9b:52:fa:
         13:8e:88:fc:80:d2:19:be:79:b0:d3:f1:83:02:fc:4b:dd:e2:
         b4:17:8e:8b:5b:0c:a0:5a:9c:19:b1:27:91:69:86:fb:a9:d3:
         66:5c:1b:7e:d5:0c:e1:aa:9d:8f:fd:90:08:95:00:65:b2:50:
         37:92:0c:74:21:5a:ba:b8:b1:d1:a4:1d:f3:d2:13:b0:be:33:
         d9:f6:29:e4:f7:81:c7:4c:98:42:25:19:0c:65:d3:e3:45:bd:
         d5:1c:50:3d:de:a2:eb:11:c3:53:d8:8c:af:62:a2:1e:2c:f8:
         05:11:74:01:53:67:ea:32:a7:bc:99:45:e1:b3:78:31:86:9d:
         f9:2d:49:ea:ce:39:32:89:42:f0:e5:99:df:37:ec:8d:c2:d7:
         3a:05:25:86:d2:ee:f7:1d:8b:0e:9b:72:51:eb:70:12:14:15:
         1f:13:43:c3:2f:b4:79:d5:ef:71:b7:9f:88:7f:36:af:48:49:
         c1:a6:f2:d0:d6:bc:46:fb:63:c6:8e:13:09:25:93:b9:77:c7:
         e2:be:90:13:88:7d:e7:23:e1:1f:c7:4a:7b:d9:2a:8e:8b:91:
         82:0d:7c:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFgLoUSEW+s2+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw
YzhiMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
NzY5M2U1Y2MtMDJlZS00MDgxLTg1NTctZWY2YjBhZjNlYjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SSvTELmyKN1iZDHzu7oQDRJ1kIKzoB4yFXW
V9rLpaWk6HhyL7DE1nzl8QZtD9nljZKfqbFzztoGrrG3DEtriwU1xIDbhUGQZiZE
uDoXFmU03B0ErlhsWh/sJsiXvg5/QvrcR/8ppxUJboULmQGdJ/rNFluBG39hKZle
nSpeJyh5Mw7NqQ41phTPopoIE6PFaoy9fMIEZU7jynUjvN7AIIAyj5w3b6GgCBdB
B0DuFRK0UTcqtY72n60Y0TvLh7D8CfpjshH+GFN+aRc9JO2rMj8SfiMCwWljecQv
++x1CtgMnbKnOCwFPYNG8NwnsvKOSGCQvWb6zzlbQ+9QUap9QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKIQAm/G2SvmWPVwyFwbdaHwXPTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz
ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvNjFhZTExOTUtNGI4Yy0z
MDdjLWE3ODctMzM0ODY0YTllMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk
NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi
MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0
NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo3vIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkkC448vK7RjMxO54Qoa3b+iEYdbDJd8HaupPJJkBvYLptS+hOOiPyA
0hm+ebDT8YMC/Evd4rQXjotbDKBanBmxJ5Fphvup02ZcG37VDOGqnY/9kAiVAGWy
UDeSDHQhWrq4sdGkHfPSE7C+M9n2KeT3gcdMmEIlGQxl0+NFvdUcUD3eousRw1PY
jK9ioh4s+AURdAFTZ+oyp7yZReGzeDGGnfktSerOOTKJQvDlmd837I3C1zoFJYbS
7vcdiw6bclHrcBIUFR8TQ8MvtHnV73G3n4h/Nq9IScGm8tDWvEb7Y8aOEwklk7l3
x+K+kBOIfecj4R/HSnvZKo6LkYINfBQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:01:10 2025 by rpki-client