Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa
File:                     7489abd9-d972-3502-9bfe-8f60dd4caa20.roa (raw, json)
Hash identifier:          fyiyvo4FaEZBnSIJO0a0TKPMocT5oVXmjMn4QaR4e5Q=
Subject key identifier:   73:A4:81:AC:52:AF:90:55:1B:34:E5:3A:F0:43:B3:62:C2:B9:63:10
Certificate issuer:       /CN=aac421ae-305b-4a29-aacc-176ba3fca213
Certificate serial:       010D0C9F43285848222FDEBB4CD94BD10E8F9300
Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        168.100.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:de:bb:4c:d9:4b:d1:0e:8f:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=3b59ce48-3de6-436f-83eb-0bbb3c0be43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:47:10:3a:9e:b3:d9:a4:d8:6f:d9:dc:40:
                    18:d7:ea:6c:89:c6:16:91:ed:fb:d2:75:5e:cb:fe:
                    59:f2:f9:b4:9a:80:66:10:ee:f5:65:66:ba:df:f6:
                    94:66:2d:bb:6f:c5:47:8b:a4:c3:e9:47:15:ef:86:
                    36:f8:79:16:f3:fd:42:6e:62:cf:c1:a1:bb:52:1f:
                    93:4f:a1:40:bb:52:73:df:25:e7:84:9e:01:1e:5a:
                    29:d9:bd:b4:02:ae:98:3d:ff:23:8b:84:e6:71:ba:
                    71:07:f9:c3:f5:7c:5d:f8:c9:4f:a7:bf:43:32:11:
                    df:25:d8:80:b2:80:19:58:df:d1:b5:90:8f:6c:70:
                    27:84:bb:d5:7e:8d:b5:29:0f:ef:1f:03:28:ac:b8:
                    ea:87:4f:c4:ab:99:e4:5d:3b:0f:28:c3:03:b0:c2:
                    aa:9d:9b:27:5b:61:b0:09:1e:8c:62:78:97:97:83:
                    79:32:64:7d:4c:ab:4f:64:e6:2e:06:bf:a1:de:34:
                    eb:3c:e1:82:50:e9:03:5e:85:84:73:d7:34:72:e4:
                    cf:b2:ba:a8:1e:59:89:6c:de:d4:86:f1:8e:24:ff:
                    05:00:dd:30:58:e9:33:b7:30:9f:85:ca:1e:7b:f9:
                    5c:9a:54:23:eb:29:32:58:ca:76:74:a4:f4:9d:5a:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A4:81:AC:52:AF:90:55:1B:34:E5:3A:F0:43:B3:62:C2:B9:63:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl

            X509v3 Authority Key Identifier:
                keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d8:ab:8a:e1:f2:95:2a:d7:1f:d1:1c:bd:67:d3:fb:f8:74:
         53:c3:29:a6:3f:72:cd:37:10:3d:c4:74:ee:f9:83:5a:13:65:
         97:1b:a2:6e:71:29:1b:99:99:33:05:5b:a6:e8:c8:b6:80:a3:
         e1:5f:82:23:ad:b2:55:c6:dc:28:1f:b5:4e:13:fa:f4:bd:b9:
         0c:6c:57:22:07:a8:88:00:79:36:fc:4d:29:9b:71:f5:fa:03:
         2c:f1:8d:24:cf:9a:d9:c6:c8:d3:f0:5d:82:43:3c:3c:18:eb:
         f7:89:03:03:87:b4:40:ed:2a:3e:41:c2:b1:fd:e5:c4:0c:a6:
         1f:16:c6:74:6d:b9:44:4a:2e:20:7c:ec:e3:0f:80:92:7d:7d:
         ad:7e:88:e6:f5:d9:f8:b1:37:fb:68:8a:69:18:e0:8d:a8:b7:
         b7:60:9f:14:5a:f3:6e:cf:19:ea:f5:d6:17:54:5f:25:e0:61:
         0a:1c:3d:48:e3:dc:b5:dd:06:d3:50:33:a7:55:c5:f5:9c:b1:
         6b:73:5c:dd:72:af:09:4d:74:1c:b6:e6:d9:ca:e7:53:00:30:
         ad:f1:19:c8:c0:04:af:88:f0:e0:96:e5:30:de:50:37:28:cc:
         82:8f:e7:4f:40:af:8f:bb:50:24:7c:2c:4d:00:49:b4:7a:58:
         fc:3e:16:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL967TNlL0Q6PkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh
MjEzMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
M2I1OWNlNDgtM2RlNi00MzZmLTgzZWItMGJiYjNjMGJlNDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4dHEDqes9mk2G/Z3EAY1+psicYWke370nVe
y/5Z8vm0moBmEO71ZWa63/aUZi27b8VHi6TD6UcV74Y2+HkW8/1CbmLPwaG7Uh+T
T6FAu1Jz3yXnhJ4BHlop2b20Aq6YPf8ji4TmcbpxB/nD9Xxd+MlPp79DMhHfJdiA
soAZWN/RtZCPbHAnhLvVfo21KQ/vHwMorLjqh0/Eq5nkXTsPKMMDsMKqnZsnW2Gw
CR6MYniXl4N5MmR9TKtPZOYuBr+h3jTrPOGCUOkDXoWEc9c0cuTPsrqoHlmJbN7U
hvGOJP8FAN0wWOkztzCfhcoee/lcmlQj6ykyWMp2dKT0nVo3xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOkgaxSr5BVGzTlOvBDs2LCuWMQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0
MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvNzQ4OWFiZDktZDk3Mi0z
NTAyLTliZmUtOGY2MGRkNGNhYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh
Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj
YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi
YTNmY2EyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXYq4rh8pUq1x/RHL1n0/v4dFPDKaY/cs03ED3EdO75g1oTZZcbom5x
KRuZmTMFW6boyLaAo+FfgiOtslXG3CgftU4T+vS9uQxsVyIHqIgAeTb8TSmbcfX6
AyzxjSTPmtnGyNPwXYJDPDwY6/eJAwOHtEDtKj5BwrH95cQMph8WxnRtuURKLiB8
7OMPgJJ9fa1+iOb12fixN/toimkY4I2ot7dgnxRa827PGer11hdUXyXgYQocPUjj
3LXdBtNQM6dVxfWcsWtzXN1yrwlNdBy25tnK51MAMK3xGcjABK+I8OCW5TDeUDco
zIKP509Ar4+7UCR8LE0ASbR6WPw+Fh8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:07 2025 by rpki-client