Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3d176fe3-5cc0-31db-ac0a-835672685d6c.roa
File:                     3d176fe3-5cc0-31db-ac0a-835672685d6c.roa (raw, json)
Hash identifier:          2NQMJ7b5RdUYm/IB9IA62B9JIJTVMfdxjK3vRTASht0=
Subject key identifier:   68:CD:AD:39:AA:47:EB:E6:73:BC:00:D5:BE:1C:1A:A5:1A:EB:F7:ED
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584878BB056D7DB1B5C88FC58E80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3d176fe3-5cc0-31db-ac0a-835672685d6c.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        136.245.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:05:6d:7d:b1:b5:c8:8f:c5:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=0d9c7e76-3b3a-43a4-aa8a-1ef25d2e9797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:b5:b8:f3:7f:61:25:1a:6f:6b:16:d1:3a:
                    7d:f6:bc:76:11:1e:c1:36:21:ab:8c:45:6d:95:c4:
                    25:77:03:92:b8:44:e2:ca:d7:f4:6b:75:2f:46:58:
                    5c:c3:03:1a:86:e8:b7:77:9f:20:9c:34:bd:63:33:
                    bb:4f:14:ee:5e:33:41:bb:c3:e6:f2:26:c8:71:9d:
                    46:5f:e3:1a:f2:f6:4b:12:e3:e0:9e:2f:4a:d9:30:
                    1e:96:be:64:f7:23:47:70:e3:b5:6e:db:1f:97:cb:
                    7a:9f:4d:c0:79:c2:1c:43:3e:db:e3:40:29:c2:62:
                    44:cb:c3:09:d8:73:65:79:b2:1a:66:f4:e2:60:a3:
                    d1:6f:43:ef:1b:f7:87:00:68:58:8b:3f:9b:a8:3b:
                    f8:b5:a4:ac:12:96:87:3d:a7:49:3c:35:9e:00:9b:
                    ca:b0:ec:bd:53:af:6b:df:97:b3:5d:60:16:98:40:
                    ef:8a:c2:12:74:7b:10:cf:68:24:d1:ce:4c:ea:e0:
                    35:ef:c0:ba:70:f3:f8:83:df:a1:46:31:ac:4b:45:
                    10:db:43:9d:b5:98:c3:3c:8b:91:2b:7e:ac:9a:6f:
                    03:90:f7:2b:61:85:38:69:5f:58:29:ad:60:2b:2b:
                    76:9f:91:65:5f:78:2b:6e:7a:23:82:7d:42:5c:47:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CD:AD:39:AA:47:EB:E6:73:BC:00:D5:BE:1C:1A:A5:1A:EB:F7:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3d176fe3-5cc0-31db-ac0a-835672685d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:34:9a:30:75:58:2a:4a:80:5a:1b:84:a7:15:fc:f8:e1:70:
         5c:e7:b9:e9:5d:7c:ac:53:7f:b6:36:b8:8f:c7:07:0f:b1:73:
         40:70:d8:c4:4c:ef:a7:49:9b:c5:2f:bd:3a:73:ad:64:54:18:
         f0:90:23:51:b2:40:d4:cd:02:ca:7a:32:90:58:d8:07:47:b9:
         16:53:d5:f1:9c:54:4d:27:89:18:86:92:f5:ca:b2:e7:e1:9b:
         fd:e3:fa:22:b5:9b:02:1b:f0:11:60:27:da:30:65:5c:3c:72:
         47:15:3f:1c:ac:2b:11:24:d5:46:d5:43:dc:12:73:85:99:7d:
         86:ce:e2:0c:c6:d4:64:47:12:04:ab:64:1a:f6:52:b0:64:c3:
         48:82:8a:52:98:cf:71:4f:44:74:98:aa:b4:65:eb:74:82:75:
         e7:c4:d3:f9:f0:ff:9e:16:1b:c5:59:3f:f7:aa:bc:1f:b4:65:
         6a:cb:3b:6e:10:bb:63:f4:f3:c5:86:21:bb:bd:90:dd:25:ef:
         61:20:a9:8c:5b:ee:78:6b:a8:33:86:9f:e3:cf:bd:ae:58:0c:
         36:5a:d1:16:00:e1:91:3e:fc:02:44:bf:b4:4d:dc:98:e6:67:
         a3:f8:3e:56:bf:35:5a:93:4e:96:c3:88:76:e0:57:23:64:26:
         71:aa:8a:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh4uwVtfbG1yI/FjoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI1MDEwODAyMDAzOVoXDTI1MDQwODAxMDAzOVowLzEtMCsGA1UEAxMk
MGQ5YzdlNzYtM2IzYS00M2E0LWFhOGEtMWVmMjVkMmU5Nzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhO1uPN/YSUab2sW0Tp99rx2ER7BNiGrjEVt
lcQldwOSuETiytf0a3UvRlhcwwMahui3d58gnDS9YzO7TxTuXjNBu8Pm8ibIcZ1G
X+Ma8vZLEuPgni9K2TAelr5k9yNHcOO1btsfl8t6n03AecIcQz7b40ApwmJEy8MJ
2HNlebIaZvTiYKPRb0PvG/eHAGhYiz+bqDv4taSsEpaHPadJPDWeAJvKsOy9U69r
35ezXWAWmEDvisISdHsQz2gk0c5M6uA178C6cPP4g9+hRjGsS0UQ20OdtZjDPIuR
K36smm8DkPcrYYU4aV9YKa1gKyt2n5FlX3grbnojgn1CXEeEwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjNrTmqR+vmc7wA1b4cGqUa6/ftMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvM2QxNzZmZTMtNWNjMC0z
MWRiLWFjMGEtODM1NjcyNjg1ZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPV/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGc0mjB1WCpKgFobhKcV/PjhcFznueldfKxTf7Y2uI/HBw+xc0Bw2MRM
76dJm8UvvTpzrWRUGPCQI1GyQNTNAsp6MpBY2AdHuRZT1fGcVE0niRiGkvXKsufh
m/3j+iK1mwIb8BFgJ9owZVw8ckcVPxysKxEk1UbVQ9wSc4WZfYbO4gzG1GRHEgSr
ZBr2UrBkw0iCilKYz3FPRHSYqrRl63SCdefE0/nw/54WG8VZP/eqvB+0ZWrLO24Q
u2P088WGIbu9kN0l72EgqYxb7nhrqDOGn+PPva5YDDZa0RYA4ZE+/AJEv7RN3Jjm
Z6P4Pla/NVqTTpbDiHbgVyNkJnGqiuk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:59 2025 by rpki-client