Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/41612672-b849-3212-9e09-add5d62adc0e.roa
File:                     41612672-b849-3212-9e09-add5d62adc0e.roa (raw, json)
Hash identifier:          +IKg9hVBRDu6cx6VGL2GKaaMc87tpIUPY3/A1EJS7eQ=
Subject key identifier:   00:6F:AF:8C:3B:E2:5B:55:AC:4F:A7:A1:D9:01:64:C8:D0:C3:6B:C4
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285848222FDB1888582E602939AE00
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/41612672-b849-3212-9e09-add5d62adc0e.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14297
IP address blocks:        139.131.122.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:db:18:88:58:2e:60:29:39:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=e01b4226-5374-4842-9906-467152344d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:d7:ab:20:d6:0c:03:05:1b:e4:0a:80:54:
                    f7:c5:4a:e7:2d:2d:9c:c8:7d:cf:92:31:0e:1e:a5:
                    02:c8:68:a8:97:15:e0:8e:f3:02:e7:85:0d:5e:44:
                    de:30:34:66:b0:7b:23:44:ac:69:ab:a8:b9:c3:1e:
                    ae:5a:13:7c:a9:b2:64:69:af:65:37:47:91:29:ef:
                    ae:6a:6c:25:64:b2:41:23:42:fd:e6:89:16:d8:d0:
                    f1:c3:60:f1:09:52:1a:4a:5f:d1:80:f9:19:4b:7c:
                    61:26:cf:5a:e4:97:29:9f:ad:68:34:3a:96:f8:f8:
                    6a:c4:ae:91:fd:82:04:b0:4c:d7:c5:5e:8c:19:9f:
                    39:26:3c:d6:ea:31:7f:85:d3:fc:da:93:a6:85:0a:
                    d4:ec:6d:16:69:ca:b6:f1:cb:f7:85:78:04:4c:5a:
                    13:86:44:de:09:e4:35:6d:eb:c2:c5:93:db:73:59:
                    03:41:da:9c:b4:3a:85:4c:40:8a:b8:84:bb:f1:e0:
                    35:7e:5d:c7:07:ae:e5:93:4a:c9:8b:87:c7:e6:45:
                    2f:16:f3:9d:c2:bc:8a:e6:8c:ac:fe:d6:02:85:f7:
                    af:0f:3a:e1:12:4e:92:2e:df:dc:39:cc:75:96:da:
                    c7:56:a2:50:ba:11:af:00:5b:57:66:9f:f7:cd:5e:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6F:AF:8C:3B:E2:5B:55:AC:4F:A7:A1:D9:01:64:C8:D0:C3:6B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/41612672-b849-3212-9e09-add5d62adc0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:d4:20:ee:b9:c0:37:4e:95:13:b1:14:c6:e1:0e:3b:6d:
         b6:f9:7f:8a:e0:ad:06:01:79:bd:2a:4b:10:bc:4e:c0:5e:b2:
         a9:92:fd:5c:de:1c:9a:83:6f:ae:8e:70:1d:80:3d:a0:90:84:
         65:dc:84:89:9c:b1:5d:7d:8b:9d:79:f0:ff:b4:b8:b6:db:a2:
         82:18:58:a9:bb:b8:26:95:30:81:d5:cc:23:27:cb:1f:7c:62:
         5c:d3:12:15:83:18:0f:f8:39:3f:ce:57:3f:81:b1:aa:36:7b:
         db:5d:2b:f0:87:a1:d2:81:03:aa:df:92:64:dc:08:b2:1f:21:
         de:64:6e:1d:3e:ea:2b:e8:6b:d4:fd:bb:38:ed:03:da:7d:af:
         f7:92:97:1f:28:c3:3d:19:6e:2c:fd:07:8b:a4:45:4c:87:0d:
         75:03:40:8e:56:55:80:b1:30:88:fe:df:a2:78:1b:c7:89:ca:
         f8:23:fd:f4:b6:94:e4:49:21:20:d8:c6:e2:24:18:dc:9f:7d:
         a0:7b:ac:5e:a2:6c:a5:29:bd:c0:24:f2:00:cf:3c:41:f2:a9:
         98:c5:25:95:59:99:ae:e7:d0:c7:73:33:4e:f3:77:0d:20:0e:
         e6:16:4a:bb:72:3e:b2:8e:ce:8b:3d:29:65:5c:9a:9d:44:b1:
         63:98:2c:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL9sYiFguYCk5rgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
ZTAxYjQyMjYtNTM3NC00ODQyLTk5MDYtNDY3MTUyMzQ0ZDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm7XqyDWDAMFG+QKgFT3xUrnLS2cyH3PkjEO
HqUCyGiolxXgjvMC54UNXkTeMDRmsHsjRKxpq6i5wx6uWhN8qbJkaa9lN0eRKe+u
amwlZLJBI0L95okW2NDxw2DxCVIaSl/RgPkZS3xhJs9a5Jcpn61oNDqW+PhqxK6R
/YIEsEzXxV6MGZ85JjzW6jF/hdP82pOmhQrU7G0Wacq28cv3hXgETFoThkTeCeQ1
bevCxZPbc1kDQdqctDqFTECKuIS78eA1fl3HB67lk0rJi4fH5kUvFvOdwryK5oys
/tYChfevDzrhEk6SLt/cOcx1ltrHVqJQuhGvAFtXZp/3zV4kdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABvr4w74ltVrE+nodkBZMjQw2vEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDE2MTI2NzItYjg0OS0z
MjEyLTllMDktYWRkNWQ2MmFkYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4N6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2z1CDuucA3TpUTsRTG4Q47bbb5f4rgrQYBeb0qSxC8TsBesqmS/Vze
HJqDb66OcB2APaCQhGXchImcsV19i5158P+0uLbbooIYWKm7uCaVMIHVzCMnyx98
YlzTEhWDGA/4OT/OVz+Bsao2e9tdK/CHodKBA6rfkmTcCLIfId5kbh0+6ivoa9T9
uzjtA9p9r/eSlx8owz0Zbiz9B4ukRUyHDXUDQI5WVYCxMIj+36J4G8eJyvgj/fS2
lORJISDYxuIkGNyffaB7rF6ibKUpvcAk8gDPPEHyqZjFJZVZma7n0MdzM07zdw0g
DuYWSrtyPrKOzos9KWVcmp1EsWOYLKQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:44:09 2025 by rpki-client