Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6281f029-07c6-3a1f-87d3-e87c6b1ceb7a.roa
File:                     6281f029-07c6-3a1f-87d3-e87c6b1ceb7a.roa (raw, json)
Hash identifier:          5rNQ5DPyD2zutkJjonlWV9NKQXKpsImPcfq1gu5ScaE=
Subject key identifier:   B6:79:9E:BA:D5:84:20:E8:7A:45:43:8A:6C:AA:B8:AA:F9:C7:89:0A
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F432858483E1AAC64DEEC77CA9FDAEB40
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6281f029-07c6-3a1f-87d3-e87c6b1ceb7a.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     30133
IP address blocks:        199.6.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:ac:64:de:ec:77:ca:9f:da:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=ba1bea53-6680-4801-b5dc-c9820ec89060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:db:e8:92:55:fa:59:64:c1:52:f4:c6:45:e6:
                    7a:24:aa:81:ac:e4:56:7c:41:e6:92:d1:9b:18:22:
                    6a:2b:45:ef:e1:94:a0:b7:6e:4b:3f:73:65:bf:f2:
                    fa:b5:11:8f:92:51:b6:30:13:62:8f:4f:df:33:16:
                    2f:1d:2f:4a:c0:8c:f5:b4:fd:02:5f:58:8c:4b:c9:
                    db:c5:89:b2:ae:76:42:ef:a1:af:9c:f8:52:dc:f8:
                    16:33:ca:47:ae:e5:fe:de:1a:72:ba:f2:ba:81:96:
                    82:e4:02:ab:0c:49:a2:18:63:c7:81:8a:06:c4:93:
                    40:02:ce:98:65:5c:3d:9b:a6:16:f3:63:10:fd:da:
                    49:df:a7:fa:b5:63:6a:c6:f6:16:1a:41:df:7a:6b:
                    8f:6b:4e:cf:6a:d4:6f:d9:87:3a:e1:0d:58:8e:dd:
                    41:8c:42:02:f5:c3:13:ac:74:9c:20:e3:11:7e:b0:
                    b1:e9:f6:24:fe:e1:60:57:bc:0b:5b:dc:43:84:7d:
                    38:e7:16:26:14:3b:be:0a:ae:cf:ff:e2:b9:03:96:
                    ed:02:3b:68:34:c5:09:87:64:18:2a:3c:10:55:d8:
                    ed:ed:f4:4b:c7:3c:6b:ac:83:dc:12:83:a6:56:2c:
                    5b:be:f2:56:8f:43:b4:98:f3:43:73:a0:22:d8:99:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:79:9E:BA:D5:84:20:E8:7A:45:43:8A:6C:AA:B8:AA:F9:C7:89:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6281f029-07c6-3a1f-87d3-e87c6b1ceb7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:4f:ee:15:7a:68:36:d9:f1:31:8c:3c:70:58:ed:96:eb:
         3d:c8:39:0f:7c:fb:ae:43:42:de:69:c7:ef:64:89:1b:0a:51:
         f7:68:19:49:77:b2:29:36:93:f5:dd:b3:d3:fd:47:74:88:03:
         8a:b9:d4:f6:df:22:3c:d8:7f:12:a0:4b:ab:63:e9:c1:76:b1:
         71:e2:c4:fd:0e:54:5f:b3:aa:dd:de:e4:93:33:0c:bf:25:d5:
         4a:12:b6:82:86:d9:6d:78:78:ee:24:31:f1:bb:73:d3:cd:17:
         a6:74:e4:26:71:67:77:95:dd:37:e1:a0:f0:56:c0:f5:18:c1:
         d5:99:c2:66:3c:42:ca:3b:4b:d0:97:2e:e6:63:24:7f:61:18:
         14:70:02:1a:46:c9:0e:52:44:aa:0a:42:63:94:88:b4:c3:49:
         67:c3:54:df:f8:b5:e2:dd:29:62:77:29:0d:9f:eb:4d:28:d7:
         79:82:07:b7:ff:80:eb:52:b1:81:cf:e6:69:80:af:99:db:a1:
         92:b3:e4:82:07:2f:5e:cb:81:19:97:2f:50:a1:37:c0:4c:4e:
         88:c6:cd:11:09:63:4b:f7:58:b3:56:c6:8c:d5:75:e0:60:00:
         ac:83:6f:53:92:36:15:78:43:31:5e:5b:f2:81:ed:5f:ec:e9:
         a0:53:f3:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gqxk3ux3yp/a60AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
YmExYmVhNTMtNjY4MC00ODAxLWI1ZGMtYzk4MjBlYzg5MDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9voklX6WWTBUvTGReZ6JKqBrORWfEHmktGb
GCJqK0Xv4ZSgt25LP3Nlv/L6tRGPklG2MBNij0/fMxYvHS9KwIz1tP0CX1iMS8nb
xYmyrnZC76GvnPhS3PgWM8pHruX+3hpyuvK6gZaC5AKrDEmiGGPHgYoGxJNAAs6Y
ZVw9m6YW82MQ/dpJ36f6tWNqxvYWGkHfemuPa07PatRv2Yc64Q1Yjt1BjEIC9cMT
rHScIOMRfrCx6fYk/uFgV7wLW9xDhH045xYmFDu+Cq7P/+K5A5btAjtoNMUJh2QY
KjwQVdjt7fRLxzxrrIPcEoOmVixbvvJWj0O0mPNDc6Ai2Jl/eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZ5nrrVhCDoekVDimyquKr5x4kKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvNjI4MWYwMjktMDdjNi0z
YTFmLTg3ZDMtZTg3YzZiMWNlYjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwYOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhOT+4Vemg22fExjDxwWO2W6z3IOQ98+65DQt5px+9kiRsKUfdoGUl3
sik2k/Xds9P9R3SIA4q51PbfIjzYfxKgS6tj6cF2sXHixP0OVF+zqt3e5JMzDL8l
1UoStoKG2W14eO4kMfG7c9PNF6Z05CZxZ3eV3TfhoPBWwPUYwdWZwmY8Qso7S9CX
LuZjJH9hGBRwAhpGyQ5SRKoKQmOUiLTDSWfDVN/4teLdKWJ3KQ2f600o13mCB7f/
gOtSsYHP5mmAr5nboZKz5IIHL17LgRmXL1ChN8BMTojGzREJY0v3WLNWxozVdeBg
AKyDb1OSNhV4QzFeW/KB7V/s6aBT83Y=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:37 2025 by rpki-client