Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/186f3e3d-f567-3334-ac74-13ca2b630fe5.roa
File:                     186f3e3d-f567-3334-ac74-13ca2b630fe5.roa (raw, json)
Hash identifier:          fLDF5T/e9jSjNt9Z60dz8n5+jZG14rUn3/zrTZ3LaaE=
Subject key identifier:   CD:50:25:57:AA:05:5E:86:DD:BD:1C:E5:CD:0A:63:DD:B5:AC:6C:D0
Certificate issuer:       /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55
Certificate serial:       010D0C9F43285848222FE24BA761528E7E4F6EC0
Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/186f3e3d-f567-3334-ac74-13ca2b630fe5.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        198.99.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e2:4b:a7:61:52:8e:7e:4f:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=38f02216-d382-4f9c-a678-d381b425319d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:73:7d:00:d6:4f:6e:12:9e:19:04:d0:a0:
                    83:c1:90:a0:39:ef:65:e2:e2:05:a7:86:7c:b5:f1:
                    d2:28:cb:d8:16:34:68:1c:00:f0:40:26:b1:d4:d0:
                    99:ad:50:22:be:5d:91:b6:89:ee:15:7a:11:bf:59:
                    f9:f4:9f:b3:0f:56:d9:a1:16:b5:3e:96:69:68:64:
                    a1:65:68:1a:a1:37:b3:3c:db:f8:07:41:51:68:f1:
                    7b:da:06:8c:95:54:88:eb:90:4e:1e:7a:28:66:6c:
                    0b:76:63:a1:cd:7e:ba:1c:e4:f0:a9:ef:b1:0e:79:
                    02:59:b1:41:8f:4f:c5:60:41:aa:5e:4e:ac:0c:7d:
                    65:a2:71:e5:ad:c0:93:1f:55:eb:5b:72:c1:5c:d7:
                    5d:b8:ae:2c:28:58:00:6c:97:64:c7:d4:6e:a2:60:
                    a0:4b:3a:44:f4:56:61:d5:e3:4c:7e:d9:62:5d:97:
                    8d:0c:b5:26:2d:aa:38:e5:99:61:72:61:ef:b9:96:
                    6d:c3:72:f0:d5:b9:fa:df:00:a3:43:17:75:af:d5:
                    11:ba:c4:72:8b:59:73:6d:20:a7:c2:70:90:4e:c5:
                    0e:94:23:26:c3:0c:97:17:9e:5c:b3:ad:8a:54:9c:
                    7f:cb:6f:6a:54:75:83:5e:39:6e:56:a0:99:a0:5b:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:25:57:AA:05:5E:86:DD:BD:1C:E5:CD:0A:63:DD:B5:AC:6C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/186f3e3d-f567-3334-ac74-13ca2b630fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl

            X509v3 Authority Key Identifier:
                keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:ed:ad:4c:d7:9b:99:45:60:c5:2c:df:5b:15:a7:22:b3:
         2c:e3:a7:ed:7f:56:fa:f6:a5:a9:4d:3c:18:fe:65:96:ef:aa:
         d7:6e:9c:12:dd:59:50:75:06:c5:49:83:53:bd:48:f1:a3:ed:
         0a:5d:0f:78:11:47:8b:c4:0d:1a:57:d6:76:3f:f5:2a:7a:a3:
         34:bd:6e:e2:f3:c0:ae:42:58:ea:9f:d3:58:b3:06:b9:0b:1f:
         8e:62:26:f0:df:f5:75:d2:81:5a:37:68:2e:9f:38:f5:43:7d:
         ce:fd:7b:35:35:ce:dc:e5:29:68:40:5d:39:53:29:a4:da:5c:
         34:dc:64:c3:13:82:7d:36:41:1e:86:d8:5a:05:ae:2c:eb:dc:
         c4:30:3d:07:f6:64:57:bc:fe:b5:29:27:1b:be:99:0c:28:52:
         d3:df:09:cf:1b:a9:71:66:98:c6:b5:56:4b:fe:19:a5:d2:ff:
         97:a2:7b:fa:14:9b:8f:23:77:68:1f:fa:8e:85:7c:8e:2c:e8:
         ca:60:9a:36:f9:89:27:57:1d:06:3d:d8:0f:6b:e5:78:7c:63:
         2c:62:53:04:c2:91:b9:a2:f9:85:62:c5:1d:ac:b6:a7:dd:45:
         7e:73:68:60:44:0c:e1:20:02:6a:e1:cf:93:d9:ae:22:d1:4a:
         c0:fb:a2:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+JLp2FSjn5PbsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY1ZmUzZTctM2MxNS00NzQyLWE4MjQtOGM5MzM5NzRh
YjU1MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
MzhmMDIyMTYtZDM4Mi00ZjljLWE2NzgtZDM4MWI0MjUzMTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh9zfQDWT24SnhkE0KCDwZCgOe9l4uIFp4Z8
tfHSKMvYFjRoHADwQCax1NCZrVAivl2RtonuFXoRv1n59J+zD1bZoRa1PpZpaGSh
ZWgaoTezPNv4B0FRaPF72gaMlVSI65BOHnooZmwLdmOhzX66HOTwqe+xDnkCWbFB
j0/FYEGqXk6sDH1lonHlrcCTH1XrW3LBXNdduK4sKFgAbJdkx9RuomCgSzpE9FZh
1eNMftliXZeNDLUmLao45ZlhcmHvuZZtw3Lw1bn63wCjQxd1r9URusRyi1lzbSCn
wnCQTsUOlCMmwwyXF55cs62KVJx/y29qVHWDXjluVqCZoFtSRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM1QJVeqBV6G3b0c5c0KY921rGzQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVm
ZTNlNy0zYzE1LTQ3NDItYTgyNC04YzkzMzk3NGFiNTUvMTg2ZjNlM2QtZjU2Ny0z
MzM0LWFjNzQtMTNjYTJiNjMwZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY1ZmUzZTctM2MxNS00NzQyLWE4
MjQtOGM5MzM5NzRhYjU1LzFmNWZlM2U3LTNjMTUtNDc0Mi1hODI0LThjOTMzOTc0
YWI1NS5jcmwwHwYDVR0jBBgwFoAUBBbL5b0MGlkw6w5yXHpOgXwOxfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVmZTNlNy0zYzE1LTQ3NDItYTgyNC04Yzkz
Mzk3NGFiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmN7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOO7a1M15uZRWDFLN9bFacisyzjp+1/Vvr2palNPBj+ZZbvqtdunBLd
WVB1BsVJg1O9SPGj7QpdD3gRR4vEDRpX1nY/9Sp6ozS9buLzwK5CWOqf01izBrkL
H45iJvDf9XXSgVo3aC6fOPVDfc79ezU1ztzlKWhAXTlTKaTaXDTcZMMTgn02QR6G
2FoFrizr3MQwPQf2ZFe8/rUpJxu+mQwoUtPfCc8bqXFmmMa1Vkv+GaXS/5eie/oU
m48jd2gf+o6FfI4s6Mpgmjb5iSdXHQY92A9r5Xh8YyxiUwTCkbmi+YVixR2stqfd
RX5zaGBEDOEgAmrhz5PZriLRSsD7otQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:22 2025 by rpki-client