Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa
File:                     1123680b-9df2-3e1d-af74-0486a85ed8bf.roa (raw, json)
Hash identifier:          aLeJXUXogEjXunIHoVEbJlMQNHfc12Nyiz3z0LMbqmk=
Subject key identifier:   CF:64:EE:1E:DF:3E:ED:A3:C3:49:82:C5:86:24:0A:FF:BA:E9:88:FE
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482EC003C3CE529CC1474AB780
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     20454
IP address blocks:        131.153.8.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:03:c3:ce:52:9c:c1:47:4a:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=b66013d6-bd31-4c7a-a771-91dbee1aaee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:28:2f:08:c4:c0:1a:07:37:03:74:1a:22:9b:
                    c1:13:36:fb:b0:46:e9:10:5c:8b:66:b3:4d:83:33:
                    93:e0:a0:5a:12:58:12:a4:ab:2c:ab:81:93:9c:d7:
                    3a:de:06:cb:fe:1e:c3:62:c8:f4:f5:08:d7:fa:f2:
                    da:92:05:82:d5:d4:b7:11:c2:46:f5:a4:ea:89:f8:
                    e9:65:e7:e5:8e:43:0e:22:e0:33:26:bc:4f:44:ff:
                    ae:36:30:16:14:14:36:7d:90:37:c7:16:17:7f:6e:
                    6b:23:a0:ca:ef:5b:bc:7c:bd:77:47:c7:0a:eb:b4:
                    54:44:68:49:08:bc:06:a5:61:cf:3f:1d:70:4e:2e:
                    72:e6:a0:ed:0b:83:8c:89:37:d5:47:10:9d:29:4c:
                    8b:70:02:8d:99:50:7a:71:4f:82:87:26:aa:01:59:
                    c5:a2:55:56:fd:22:28:9d:0f:37:63:63:62:c8:b6:
                    93:dd:c5:86:b2:f0:e0:49:6c:22:46:9b:cc:d0:30:
                    b3:0a:c7:98:37:ba:2c:de:88:78:66:84:cc:20:de:
                    c0:0f:3e:0c:fc:0b:85:49:8f:47:5b:8c:b0:f8:bf:
                    3f:9e:f3:0e:94:00:84:d4:3b:8a:97:ca:0e:7d:4b:
                    7c:98:4a:49:99:5b:20:8a:bf:a5:e2:35:d8:3c:b6:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:EE:1E:DF:3E:ED:A3:C3:49:82:C5:86:24:0A:FF:BA:E9:88:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:37:a2:08:b9:b5:4e:1b:6e:ba:bc:a2:ec:ae:8d:a5:03:4e:
         a0:28:2a:7b:d0:cf:50:25:2a:ed:89:9f:52:ee:d5:9b:d0:0a:
         93:ed:71:6f:c3:9b:40:ea:20:08:22:f7:b2:e7:5a:c6:84:bd:
         7f:b6:31:52:6d:ec:d8:a4:35:cc:e2:c7:a0:4a:04:ee:78:aa:
         87:15:17:c9:e2:21:ac:47:f2:d9:24:ba:71:aa:d3:17:66:d5:
         13:5f:3b:8c:d3:05:f2:b5:cf:57:75:04:5b:b5:a5:85:09:9d:
         a0:c1:76:63:a9:88:96:60:04:43:f6:5b:6d:a1:97:d5:ff:38:
         27:19:4f:0e:bb:e1:8b:b9:af:f1:39:d1:55:b8:2a:20:d7:42:
         40:93:5b:4e:0b:32:3c:ff:d0:f7:1a:d4:b0:ee:37:d2:73:dd:
         37:e9:49:65:6c:d6:f8:2b:71:fd:d2:f0:32:6b:38:f8:51:0d:
         1a:ac:b7:4a:7d:77:c8:74:af:74:0a:a1:d0:48:46:a4:c5:14:
         1f:1c:22:15:5c:f5:4c:24:5c:d0:39:e8:91:58:5c:19:78:17:
         a8:27:59:db:39:64:d5:45:11:db:f6:c5:6f:5e:c3:92:dd:27:
         af:dc:58:d2:2f:8a:78:3d:a6:2d:36:3d:8f:62:fc:e3:e3:e1:
         fb:ab:cb:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwAPDzlKcwUdKt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
YjY2MDEzZDYtYmQzMS00YzdhLWE3NzEtOTFkYmVlMWFhZWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkigvCMTAGgc3A3QaIpvBEzb7sEbpEFyLZrNN
gzOT4KBaElgSpKssq4GTnNc63gbL/h7DYsj09QjX+vLakgWC1dS3EcJG9aTqifjp
ZefljkMOIuAzJrxPRP+uNjAWFBQ2fZA3xxYXf25rI6DK71u8fL13R8cK67RURGhJ
CLwGpWHPPx1wTi5y5qDtC4OMiTfVRxCdKUyLcAKNmVB6cU+ChyaqAVnFolVW/SIo
nQ83Y2NiyLaT3cWGsvDgSWwiRpvM0DCzCseYN7os3oh4ZoTMIN7ADz4M/AuFSY9H
W4yw+L8/nvMOlACE1DuKl8oOfUt8mEpJmVsgir+l4jXYPLb7pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM9k7h7fPu2jw0mCxYYkCv+66Yj+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTEyMzY4MGItOWRmMi0z
ZTFkLWFmNzQtMDQ4NmE4NWVkOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJA3ogi5tU4bbrq8ouyujaUDTqAoKnvQz1AlKu2Jn1Lu1ZvQCpPtcW/D
m0DqIAgi97LnWsaEvX+2MVJt7NikNczix6BKBO54qocVF8niIaxH8tkkunGq0xdm
1RNfO4zTBfK1z1d1BFu1pYUJnaDBdmOpiJZgBEP2W22hl9X/OCcZTw674Yu5r/E5
0VW4KiDXQkCTW04LMjz/0Pca1LDuN9Jz3TfpSWVs1vgrcf3S8DJrOPhRDRqst0p9
d8h0r3QKodBIRqTFFB8cIhVc9UwkXNA56JFYXBl4F6gnWds5ZNVFEdv2xW9ew5Ld
J6/cWNIving9pi02PY9i/OPj4fury70=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:00:12 2025 by rpki-client