Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/a3c85edf-dd91-351b-8eb2-590efdd198be.roa
File:                     a3c85edf-dd91-351b-8eb2-590efdd198be.roa (raw, json)
Hash identifier:          JgwC0sWCJnztjTp7h97Hwydw+UEaUBB0ziKQQHpQhnA=
Subject key identifier:   7D:88:4C:76:50:D1:E6:BA:B0:F7:50:EC:FB:D4:89:90:A4:53:AA:6E
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F432858483F8035A77558B02BC428B640
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/a3c85edf-dd91-351b-8eb2-590efdd198be.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     393319
IP address blocks:        77.233.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:35:a7:75:58:b0:2b:c4:28:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=bc1347dc-a2df-47f4-bb0a-793634dbbd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:79:e0:6a:81:e8:e5:c7:39:93:bd:51:e5:
                    f9:34:fc:88:a7:28:06:6c:85:22:65:18:b4:b6:0f:
                    56:8d:5b:30:75:91:39:53:53:0a:86:fc:dd:b2:4b:
                    d0:d7:eb:a6:77:58:90:47:f2:5f:33:9d:aa:7d:c7:
                    ce:49:38:c7:4a:2e:11:27:56:a6:aa:c7:a8:7a:1c:
                    46:19:83:02:29:97:f4:a2:29:5d:12:5c:a3:c5:9a:
                    50:0a:a9:81:37:3c:dc:6a:e8:c7:ea:46:ad:56:1d:
                    ce:35:0f:16:31:b6:aa:55:38:92:4f:00:a4:14:ce:
                    2e:2f:8b:a5:16:ea:ca:90:35:97:e0:93:47:ce:58:
                    93:7d:60:c0:b4:f0:2b:1a:06:07:e7:3d:f8:a9:87:
                    d4:7c:ab:4b:28:f2:d8:c2:b1:ef:6e:47:36:4e:31:
                    ff:94:04:c8:38:e4:5a:55:9a:fb:0a:53:db:bc:d2:
                    7d:d8:d4:3d:05:61:f1:15:dd:95:9c:f3:8d:2e:69:
                    ce:9b:9b:73:2c:10:7d:d4:3d:a6:e4:77:46:84:94:
                    ff:ec:e4:d0:d0:2a:70:a1:63:8e:71:14:b4:d2:7a:
                    2a:68:dd:11:1e:39:e0:2d:d0:aa:ef:62:70:0e:87:
                    84:60:76:43:75:dc:a6:94:33:da:32:80:d4:f0:f3:
                    a9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:88:4C:76:50:D1:E6:BA:B0:F7:50:EC:FB:D4:89:90:A4:53:AA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/a3c85edf-dd91-351b-8eb2-590efdd198be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:eb:08:fa:2c:61:45:6c:b9:ef:25:40:2d:79:be:04:22:58:
         7b:8c:8d:9e:0b:36:ae:0b:9d:18:ec:88:28:f4:14:a9:96:13:
         e6:12:c3:80:ff:be:75:c7:aa:66:aa:03:34:e9:f2:f7:10:9c:
         d6:4a:f2:94:69:5f:20:62:18:9e:3b:7a:d7:95:31:6b:86:57:
         07:75:ca:ce:9f:19:7e:2a:82:bf:93:ab:9b:13:61:12:67:0e:
         48:2d:a3:28:1e:e8:ef:30:fc:d5:81:48:0f:9c:9a:fd:e0:3c:
         c0:81:9d:83:14:f4:b1:32:06:2a:62:82:18:06:0a:09:f5:ae:
         13:f7:f9:c0:c0:1d:c9:4f:51:be:a7:fe:fd:20:2f:3f:ca:b6:
         ee:12:4e:26:86:c8:50:6a:3f:ec:93:d4:a1:47:69:e2:14:9e:
         66:d1:23:23:a0:41:dd:32:63:6b:df:1a:a1:35:e9:23:19:e9:
         c1:b0:80:a4:f0:62:ad:4d:fa:89:a0:15:e7:9d:df:ce:d9:90:
         6c:48:8d:01:b9:c7:ac:e9:f1:a3:45:95:01:1f:44:e3:6d:4c:
         b3:da:62:86:7a:8f:bf:06:b7:e0:63:9e:0a:2d:a4:f5:1a:8d:
         78:f9:ce:6f:db:47:72:7b:5f:16:44:81:61:07:49:c3:b4:0a:
         ea:1b:2c:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gDWndViwK8QotkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmY0MWY1NWUtN2ZlNi00Yjg4LThkMWItZjNlMGZjNjI1
OWYzMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
YmMxMzQ3ZGMtYTJkZi00N2Y0LWJiMGEtNzkzNjM0ZGJiZDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/x54GqB6OXHOZO9UeX5NPyIpygGbIUiZRi0
tg9WjVswdZE5U1MKhvzdskvQ1+umd1iQR/JfM52qfcfOSTjHSi4RJ1amqseoehxG
GYMCKZf0oildElyjxZpQCqmBNzzcaujH6katVh3ONQ8WMbaqVTiSTwCkFM4uL4ul
FurKkDWX4JNHzliTfWDAtPArGgYH5z34qYfUfKtLKPLYwrHvbkc2TjH/lATIOORa
VZr7ClPbvNJ92NQ9BWHxFd2VnPONLmnOm5tzLBB91D2m5HdGhJT/7OTQ0CpwoWOO
cRS00noqaN0RHjngLdCq72JwDoeEYHZDddymlDPaMoDU8POpNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH2ITHZQ0ea6sPdQ7PvUiZCkU6puMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQx
ZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2UwZmM2MjU5ZjMvYTNjODVlZGYtZGQ5MS0z
NTFiLThlYjItNTkwZWZkZDE5OGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmY0MWY1NWUtN2ZlNi00Yjg4LThk
MWItZjNlMGZjNjI1OWYzLzJmNDFmNTVlLTdmZTYtNGI4OC04ZDFiLWYzZTBmYzYy
NTlmMy5jcmwwHwYDVR0jBBgwFoAUUEBh/iScDEroKQvON2np7BVTLzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQxZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2Uw
ZmM2MjU5ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATek7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPrCPosYUVsue8lQC15vgQiWHuMjZ4LNq4LnRjsiCj0FKmWE+YSw4D/
vnXHqmaqAzTp8vcQnNZK8pRpXyBiGJ47eteVMWuGVwd1ys6fGX4qgr+Tq5sTYRJn
Dkgtoyge6O8w/NWBSA+cmv3gPMCBnYMU9LEyBipighgGCgn1rhP3+cDAHclPUb6n
/v0gLz/Ktu4STiaGyFBqP+yT1KFHaeIUnmbRIyOgQd0yY2vfGqE16SMZ6cGwgKTw
Yq1N+omgFeed387ZkGxIjQG5x6zp8aNFlQEfRONtTLPaYoZ6j78Gt+BjngotpPUa
jXj5zm/bR3J7XxZEgWEHScO0CuobLNA=
-----END CERTIFICATE-----
Generated at Tue May 6 08:46:16 2025 by rpki-client