Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa
File:                     15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa (raw, json)
Hash identifier:          zqsnhCo/9Y6/zggyxwUVoDTFbQ8JkDBe9ZNz/WskhhI=
Subject key identifier:   33:25:9A:C8:01:D9:A2:DD:FD:4D:4E:76:FB:0F:FE:30:34:0A:2E:AD
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B279672EC34C4A0266E00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     54858
IP address blocks:        198.244.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:27:96:72:ec:34:c4:a0:26:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=8127c895-698a-4afa-85f4-6fbd933cb32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c3:cd:ea:66:28:de:33:18:85:6f:5c:ed:46:
                    6c:94:0e:32:20:27:ff:37:67:c8:ab:f4:54:55:82:
                    bc:5e:12:88:c6:14:d0:16:8e:00:d8:29:43:3e:14:
                    15:cb:ef:f4:0e:eb:12:25:e0:5c:4b:7a:5d:eb:d8:
                    49:3f:d1:22:78:47:52:d9:c3:68:d0:a0:60:89:6f:
                    53:6d:b0:45:32:4b:6a:b3:2d:d1:bd:5b:42:bf:bc:
                    bf:df:16:94:54:5a:1a:c3:07:ee:c8:42:cc:b7:da:
                    84:01:ef:57:75:aa:b8:73:c6:d4:3f:ba:96:4d:65:
                    0a:f9:c4:2b:f8:cd:12:c9:22:dc:d0:9c:4d:88:ec:
                    aa:7e:aa:f9:9b:3f:56:c7:a4:44:0e:40:41:53:ce:
                    d0:f5:97:74:1f:13:aa:54:b8:f5:5f:98:23:9a:d8:
                    77:70:78:07:bd:3b:f7:60:b4:e7:f0:f6:e8:86:bd:
                    76:a7:34:e7:6d:c0:04:e4:d2:0b:12:59:35:b0:40:
                    76:9a:9c:4b:96:b1:b4:40:cd:ac:49:0e:44:2c:c1:
                    cf:14:9c:c2:61:f4:5a:a4:ed:45:72:03:d2:45:44:
                    20:2e:40:2e:9a:18:1d:d1:ca:74:0f:f0:3e:10:11:
                    f1:93:93:f2:64:86:31:68:39:01:a7:f3:c3:e7:0e:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:25:9A:C8:01:D9:A2:DD:FD:4D:4E:76:FB:0F:FE:30:34:0A:2E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.244.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:14:c0:1a:cb:83:51:03:c3:91:ba:1e:ea:ce:2e:e4:e6:81:
         29:bf:42:18:ed:ec:2f:d6:88:58:02:eb:ad:ee:6e:27:15:1e:
         bb:9f:0f:52:4c:84:91:29:8b:50:e6:f3:db:ed:ea:19:ca:80:
         4c:31:c6:03:d1:cf:34:04:13:d3:43:b3:4c:f9:ef:45:da:fe:
         93:de:75:d0:60:29:e9:85:20:a2:bd:a6:f3:a4:8f:ff:06:ed:
         81:35:1a:8b:d7:78:19:51:e9:ce:64:c5:b2:2e:97:ce:e9:c6:
         ca:5c:b6:6e:c8:31:13:18:71:3e:ae:48:ba:e5:8c:d5:67:ee:
         85:0c:0d:49:ad:3c:02:4c:24:ab:0f:48:1d:41:38:13:ed:3c:
         9d:91:6b:e5:84:41:8c:15:c4:2f:8d:96:58:ba:c9:d6:38:21:
         65:15:e5:e2:bb:bc:ae:9a:93:4f:92:92:4c:d2:2f:4a:51:1f:
         5e:f3:52:b1:bf:c9:74:03:61:94:bb:a7:f9:d3:10:30:ed:c1:
         03:09:61:1e:79:03:f8:2d:e3:0f:0e:a1:66:60:4f:33:b2:cc:
         74:75:5c:10:07:8d:c3:ef:3d:ca:9a:1b:9a:88:a2:7f:93:21:
         ca:c7:58:2a:a8:4d:d0:aa:2e:9e:c7:45:f4:3c:dd:97:00:9d:
         5a:5a:df:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKyeWcuw0xKAmbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
ODEyN2M4OTUtNjk4YS00YWZhLTg1ZjQtNmZiZDkzM2NiMzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cPN6mYo3jMYhW9c7UZslA4yICf/N2fIq/RU
VYK8XhKIxhTQFo4A2ClDPhQVy+/0DusSJeBcS3pd69hJP9EieEdS2cNo0KBgiW9T
bbBFMktqsy3RvVtCv7y/3xaUVFoawwfuyELMt9qEAe9Xdaq4c8bUP7qWTWUK+cQr
+M0SySLc0JxNiOyqfqr5mz9Wx6REDkBBU87Q9Zd0HxOqVLj1X5gjmth3cHgHvTv3
YLTn8Pbohr12pzTnbcAE5NILElk1sEB2mpxLlrG0QM2sSQ5ELMHPFJzCYfRapO1F
cgPSRUQgLkAumhgd0cp0D/A+EBHxk5PyZIYxaDkBp/PD5w7IjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMlmsgB2aLd/U1OdvsP/jA0Ci6tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTVmNzMzYzUtODM0Ny0z
ZTNhLWE0MDgtYTg5Y2M2YjFjM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4UwBrLg1EDw5G6HurOLuTmgSm/Qhjt7C/WiFgC663ubicVHrufD1JM
hJEpi1Dm89vt6hnKgEwxxgPRzzQEE9NDs0z570Xa/pPeddBgKemFIKK9pvOkj/8G
7YE1GovXeBlR6c5kxbIul87pxspctm7IMRMYcT6uSLrljNVn7oUMDUmtPAJMJKsP
SB1BOBPtPJ2Ra+WEQYwVxC+Nlli6ydY4IWUV5eK7vK6ak0+SkkzSL0pRH17zUrG/
yXQDYZS7p/nTEDDtwQMJYR55A/gt4w8OoWZgTzOyzHR1XBAHjcPvPcqaG5qIon+T
IcrHWCqoTdCqLp7HRfQ83ZcAnVpa34E=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:12 2025 by rpki-client