Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa
File:                     8d254be0-4973-3adb-9609-4a7ab5dad347.roa (raw, json)
Hash identifier:          zIMHjug5gitCQm3h5jsrD5o6bR12/L95XW0QFF4aBmw=
Subject key identifier:   82:A9:D6:EF:8F:93:19:B5:E7:87:30:EE:EB:20:05:60:6E:EB:60:A8
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482D5A8BEB72858076055E8900
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     12189
IP address blocks:        131.153.116.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8b:eb:72:85:80:76:05:5e:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=3fe0245a-6f2a-4b4a-aa8f-2673e5b44716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:df:ed:e8:38:04:d7:4f:9a:12:9d:94:e7:
                    43:0f:10:4e:42:59:d7:53:43:bd:7b:05:ae:6f:d5:
                    dc:e8:be:69:55:c8:2e:97:d6:82:19:37:5b:7a:ed:
                    80:0b:6b:93:71:e2:9f:4a:63:99:66:98:8d:1a:2e:
                    f2:12:d1:1d:95:a4:06:53:10:45:e2:1d:9f:be:ac:
                    68:f3:8a:79:f8:1a:28:4b:f2:95:5f:48:96:1b:30:
                    60:2b:ad:41:2b:08:0e:80:de:e1:93:16:45:e2:6d:
                    02:b9:21:4d:38:12:e4:c5:36:25:26:8c:3f:4a:7c:
                    82:b4:cf:8e:d7:0b:c7:63:50:08:30:a0:0c:b1:57:
                    0e:c6:de:c2:1b:96:44:ec:d4:f9:c3:cc:ef:6a:b2:
                    a2:1e:e4:b4:07:c6:93:08:da:be:82:10:23:32:18:
                    ff:b1:3b:7a:0d:a8:d7:dc:c6:01:d6:a9:fb:28:6d:
                    db:f8:2f:a6:75:b9:a6:7b:13:64:d6:19:d7:a0:ba:
                    d7:81:a1:c7:b6:13:e7:78:1f:f6:5f:56:6d:90:69:
                    5c:dd:63:64:f1:e6:f9:d8:8d:40:24:09:ab:a1:cb:
                    38:05:c6:58:1d:5b:f5:ce:08:04:36:41:d4:f3:39:
                    b1:f9:12:74:16:2d:98:29:db:d4:2c:36:f9:f1:4a:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:D6:EF:8F:93:19:B5:E7:87:30:EE:EB:20:05:60:6E:EB:60:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:f8:e2:23:8d:a9:80:5f:40:5b:09:46:a9:60:f7:b3:7d:
         69:0f:54:22:01:3c:8a:da:63:c0:47:d6:61:2b:98:0d:02:ff:
         da:dd:63:a6:9f:b0:56:3b:cf:bc:a7:08:d8:18:49:cf:eb:a7:
         b6:a2:79:07:6f:df:7e:3b:cc:58:ab:b7:79:e9:c6:03:4e:3f:
         40:79:89:ae:86:46:1e:40:33:23:dc:21:7f:f5:65:20:b1:4b:
         16:9b:b5:e9:21:af:f7:4e:71:a0:7d:6d:35:6f:72:89:56:7c:
         54:41:04:cc:e1:2a:e3:81:a2:1f:52:e9:dd:57:51:f7:bd:b5:
         eb:e7:72:f2:4a:9e:37:1d:8b:14:a3:e2:04:98:e5:08:a8:b8:
         5b:0a:02:1f:86:4b:fc:c8:2e:c3:49:62:b3:97:fc:b4:60:0f:
         df:d2:0a:0b:f9:e1:67:97:56:3e:45:20:6b:5b:dd:70:1a:34:
         ce:ce:be:13:51:26:c5:2c:35:67:ba:c9:97:41:f8:49:42:ca:
         74:0a:c0:9d:03:0a:a0:cf:99:c0:8d:2b:b9:0f:b9:06:1d:ec:
         2a:b4:91:a2:ad:27:4c:12:62:31:ac:d3:66:e7:6b:2f:9a:b0:
         10:12:20:b6:4c:8b:71:32:07:21:13:4f:38:d5:0c:0e:cd:da:
         22:08:27:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWovrcoWAdgVeiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
M2ZlMDI0NWEtNmYyYS00YjRhLWFhOGYtMjY3M2U1YjQ0NzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjTf7eg4BNdPmhKdlOdDDxBOQlnXU0O9ewWu
b9Xc6L5pVcgul9aCGTdbeu2AC2uTceKfSmOZZpiNGi7yEtEdlaQGUxBF4h2fvqxo
84p5+BooS/KVX0iWGzBgK61BKwgOgN7hkxZF4m0CuSFNOBLkxTYlJow/SnyCtM+O
1wvHY1AIMKAMsVcOxt7CG5ZE7NT5w8zvarKiHuS0B8aTCNq+ghAjMhj/sTt6DajX
3MYB1qn7KG3b+C+mdbmmexNk1hnXoLrXgaHHthPneB/2X1ZtkGlc3WNk8eb52I1A
JAmrocs4BcZYHVv1zggENkHU8zmx+RJ0Fi2YKdvULDb58Up+CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKp1u+Pkxm154cw7usgBWBu62CoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOGQyNTRiZTAtNDk3My0z
YWRiLTk2MDktNGE3YWI1ZGFkMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABU++OIjjamAX0BbCUapYPezfWkPVCIBPIraY8BH1mErmA0C/9rdY6af
sFY7z7ynCNgYSc/rp7aieQdv3347zFirt3npxgNOP0B5ia6GRh5AMyPcIX/1ZSCx
Sxabtekhr/dOcaB9bTVvcolWfFRBBMzhKuOBoh9S6d1XUfe9tevncvJKnjcdixSj
4gSY5QiouFsKAh+GS/zILsNJYrOX/LRgD9/SCgv54WeXVj5FIGtb3XAaNM7OvhNR
JsUsNWe6yZdB+ElCynQKwJ0DCqDPmcCNK7kPuQYd7Cq0kaKtJ0wSYjGs02bnay+a
sBASILZMi3EyByETTzjVDA7N2iIIJ9E=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:33:08 2025 by rpki-client