Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/6d3e78c8-22c8-318e-ab09-39c32daed70d.roa
File:                     6d3e78c8-22c8-318e-ab09-39c32daed70d.roa (raw, json)
Hash identifier:          EAnOC907Mg0H2wD92WuJe1gWdkzPm6CBfhq6ihP5Gas=
Subject key identifier:   3D:EE:1E:A7:65:32:46:4C:36:78:DF:B1:78:12:E7:F7:16:D5:10:48
Certificate issuer:       /CN=45c66754-6161-4548-b519-3f3f38d6030b
Certificate serial:       010D0C9F432858481C9A7C0E4388A83A43D6AE40
Authority key identifier: 73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/6d3e78c8-22c8-318e-ab09-39c32daed70d.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        136.175.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:7c:0e:43:88:a8:3a:43:d6:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c66754-6161-4548-b519-3f3f38d6030b
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=41e68245-771b-4644-83c2-4ba31cd77f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:03:8b:dd:cf:9b:2f:0c:0f:86:b1:ad:6a:7d:
                    5c:ad:5f:b4:4c:ff:62:7a:6f:68:71:42:b4:c9:47:
                    53:ce:89:34:1d:84:de:d2:20:9f:3d:ec:cd:e4:38:
                    31:44:84:8f:25:bd:e5:05:a6:79:af:d9:49:77:6b:
                    98:7d:da:d8:51:a5:30:4e:3f:31:d0:62:1c:5f:4b:
                    f5:36:1a:99:dc:f2:c2:d0:7b:aa:41:a3:1d:5e:1a:
                    54:24:d7:83:70:a9:36:c9:77:0b:41:25:97:26:a0:
                    c6:2f:52:a7:0e:3a:b2:73:b8:f6:5b:52:1c:35:fe:
                    9b:53:b1:e7:9c:a1:74:13:96:1d:fe:36:19:c3:8c:
                    4d:3d:00:26:ac:61:1e:d2:ea:b3:87:d9:cb:c7:84:
                    64:7a:f5:9b:75:bf:23:dd:8c:e3:a2:4d:06:35:90:
                    2f:8a:9d:f0:4b:61:a6:7c:db:a0:66:fd:1a:c0:90:
                    df:ad:a7:f9:ce:55:74:32:9e:82:3c:fb:a7:10:b8:
                    b9:30:b9:25:e6:70:4b:bc:fc:cf:fb:7d:ba:23:7b:
                    64:d4:db:2f:cb:9a:49:f9:2a:12:e2:3d:65:23:ef:
                    66:ff:31:66:2a:48:0a:13:f6:0a:75:98:0f:a1:14:
                    7e:1b:ec:3e:ce:63:68:79:43:24:ab:45:a4:24:9b:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EE:1E:A7:65:32:46:4C:36:78:DF:B1:78:12:E7:F7:16:D5:10:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/6d3e78c8-22c8-318e-ab09-39c32daed70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.crl

            X509v3 Authority Key Identifier:
                keyid:73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5d:9e:da:df:d2:72:dd:dd:52:fa:56:70:64:58:6f:b2:43:
         5d:5b:69:13:63:98:5a:22:05:54:a6:50:bf:07:28:4d:05:c4:
         35:0f:01:e7:30:1a:28:01:98:d3:6c:d4:fb:e8:e2:57:a8:2d:
         c5:84:3c:6c:a8:6d:c0:97:f1:39:06:29:f3:d3:c6:5b:6d:87:
         08:c2:40:b0:7d:37:a4:32:4e:d5:e6:8c:28:f4:4e:bd:69:af:
         6d:08:57:91:2a:a5:85:fa:6d:e5:58:7d:a7:9d:2f:87:e9:50:
         55:07:04:97:cd:e1:8c:3e:bc:a5:8d:a2:5e:0c:d7:65:0b:1b:
         cf:2f:fb:26:82:68:e7:49:62:cf:b0:a8:82:a2:1a:79:f5:84:
         b6:10:e4:9f:b2:6a:ed:59:85:3e:f2:15:9c:aa:de:f0:31:02:
         18:7c:d1:12:a2:07:4e:23:1a:3c:2e:28:70:0c:f3:10:86:14:
         52:ee:b5:89:7d:47:78:8a:d3:b0:8d:4e:51:4a:1b:0f:8c:53:
         6e:3f:e1:97:84:1b:24:c9:9c:5d:24:04:66:79:51:57:bf:5a:
         19:b3:7f:d5:9e:64:1e:80:17:86:3b:e1:a0:24:1c:74:e0:da:
         ed:ff:37:95:1f:6d:d6:97:18:1b:79:bc:e1:01:44:b2:62:ce:
         38:61:71:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmnwOQ4ioOkPWrkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVjNjY3NTQtNjE2MS00NTQ4LWI1MTktM2YzZjM4ZDYw
MzBiMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
NDFlNjgyNDUtNzcxYi00NjQ0LTgzYzItNGJhMzFjZDc3ZjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAOL3c+bLwwPhrGtan1crV+0TP9iem9ocUK0
yUdTzok0HYTe0iCfPezN5DgxRISPJb3lBaZ5r9lJd2uYfdrYUaUwTj8x0GIcX0v1
NhqZ3PLC0HuqQaMdXhpUJNeDcKk2yXcLQSWXJqDGL1KnDjqyc7j2W1IcNf6bU7Hn
nKF0E5Yd/jYZw4xNPQAmrGEe0uqzh9nLx4RkevWbdb8j3Yzjok0GNZAvip3wS2Gm
fNugZv0awJDfraf5zlV0Mp6CPPunELi5MLkl5nBLvPzP+326I3tk1Nsvy5pJ+SoS
4j1lI+9m/zFmKkgKE/YKdZgPoRR+G+w+zmNoeUMkq0WkJJs+UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3uHqdlMkZMNnjfsXgS5/cW1RBIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NWM2
Njc1NC02MTYxLTQ1NDgtYjUxOS0zZjNmMzhkNjAzMGIvNmQzZTc4YzgtMjJjOC0z
MThlLWFiMDktMzljMzJkYWVkNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDVjNjY3NTQtNjE2MS00NTQ4LWI1
MTktM2YzZjM4ZDYwMzBiLzQ1YzY2NzU0LTYxNjEtNDU0OC1iNTE5LTNmM2YzOGQ2
MDMwYi5jcmwwHwYDVR0jBBgwFoAUc0riH1wor46Rmg05fvQhlDU8OBYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NWM2Njc1NC02MTYxLTQ1NDgtYjUxOS0zZjNm
MzhkNjAzMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK8ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpdntrf0nLd3VL6VnBkWG+yQ11baRNjmFoiBVSmUL8HKE0FxDUPAecw
GigBmNNs1Pvo4leoLcWEPGyobcCX8TkGKfPTxltthwjCQLB9N6QyTtXmjCj0Tr1p
r20IV5EqpYX6beVYfaedL4fpUFUHBJfN4Yw+vKWNol4M12ULG88v+yaCaOdJYs+w
qIKiGnn1hLYQ5J+yau1ZhT7yFZyq3vAxAhh80RKiB04jGjwuKHAM8xCGFFLutYl9
R3iK07CNTlFKGw+MU24/4ZeEGyTJnF0kBGZ5UVe/Whmzf9WeZB6AF4Y74aAkHHTg
2u3/N5UfbdaXGBt5vOEBRLJizjhhcVs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:24 2025 by rpki-client