Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa
File:                     980a16b1-7521-3b19-9838-27c21280ee09.roa (raw, json)
Hash identifier:          WM8wwlR7M7ViwxCvoy/ke24s8ySzhbbkEnbPFsArRhI=
Subject key identifier:   40:35:C5:13:76:E9:8C:8B:7E:68:27:B3:F1:5E:04:F9:49:D0:E7:B8
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848159FFBC5750775574ABB4940
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     136988
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:fb:c5:75:07:75:57:4a:bb:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=582797cb-a433-4b89-9ea5-a76a0b4692d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:e9:86:0d:42:8a:e0:cc:e3:4f:79:48:dc:
                    a7:ed:35:45:14:3d:4b:e1:d0:8d:3c:fa:6c:6a:3c:
                    d8:af:92:3f:98:7f:52:c1:9a:5a:5f:85:9b:f6:6a:
                    5e:26:d9:1b:ca:ff:78:65:53:30:cb:18:a7:f9:70:
                    fd:63:59:38:15:fa:3e:c4:46:dd:b3:e7:4b:3e:56:
                    17:20:4c:d7:fb:a4:b2:78:9a:10:76:7c:c9:98:cb:
                    f0:9c:b8:2d:e4:7e:25:8b:a5:13:c0:f9:3d:cf:a3:
                    33:41:98:63:76:40:df:48:f6:69:03:e8:58:6f:e1:
                    2d:3f:aa:8b:8d:9c:c0:03:8b:1b:f6:78:3b:ab:2b:
                    70:5b:39:88:97:ab:4b:b5:5f:51:8a:01:da:c4:f2:
                    61:a2:80:ef:42:85:d7:a0:26:ac:2a:59:a1:af:4a:
                    b4:a4:ba:44:d9:8f:52:76:e3:07:1b:08:fc:49:17:
                    95:10:19:e1:1b:10:6d:e4:2f:62:7c:01:83:c8:1e:
                    23:d3:2b:d3:3e:c8:83:2d:1a:1b:99:e7:e5:1d:9f:
                    2a:ce:c9:be:4f:72:b1:1e:09:43:92:56:5f:73:9b:
                    57:7d:87:5b:1e:12:95:58:ca:1b:c8:a7:b9:ca:08:
                    cc:2f:9e:86:05:3f:e6:05:8c:39:6b:86:ea:ba:e0:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:35:C5:13:76:E9:8C:8B:7E:68:27:B3:F1:5E:04:F9:49:D0:E7:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:9f:57:51:ae:7f:a4:79:ae:fa:7a:05:43:37:dc:41:c3:
         0a:d4:df:d9:a6:e4:de:5b:30:5b:c4:c7:a4:ac:a8:fd:58:e2:
         df:44:60:e5:c6:07:f4:ec:68:0b:84:e2:a3:7b:06:91:47:ce:
         ae:68:92:a8:08:eb:93:c9:46:e5:9b:3c:f6:53:cc:4e:ad:67:
         14:48:da:97:64:30:33:4f:47:25:d3:1e:81:d7:a5:0b:e0:78:
         71:41:f8:a5:24:52:8a:c2:a4:9a:11:43:02:79:93:ad:07:16:
         f8:c7:84:ce:c6:db:fa:2b:46:af:5f:d5:99:eb:60:b1:78:3f:
         08:b6:de:3e:47:ee:f7:92:1d:6a:f4:1b:80:ac:8d:84:2a:ac:
         56:40:31:7c:c5:a3:a9:47:eb:3e:d8:ed:71:68:70:ca:51:1c:
         24:38:2f:1d:e0:50:53:85:52:65:4a:7d:ce:ec:1b:80:fa:1c:
         a2:6f:be:dc:7e:01:0e:51:df:bd:85:63:1f:e0:54:97:f7:3c:
         b6:12:83:e6:35:8f:f1:ab:80:1a:da:44:c5:72:83:3d:94:96:
         d3:b2:cc:a9:76:51:b0:8a:84:e6:21:49:5e:31:ca:8c:01:1c:
         35:05:1f:bb:9b:e4:de:ba:0a:93:6d:1b:1c:17:06:08:cb:05:
         18:7a:5c:76
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgVn/vFdQd1V0q7SUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
NTgyNzk3Y2ItYTQzMy00Yjg5LTllYTUtYTc2YTBiNDY5MmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWTphg1CiuDM4095SNyn7TVFFD1L4dCNPPps
ajzYr5I/mH9SwZpaX4Wb9mpeJtkbyv94ZVMwyxin+XD9Y1k4Ffo+xEbds+dLPlYX
IEzX+6SyeJoQdnzJmMvwnLgt5H4li6UTwPk9z6MzQZhjdkDfSPZpA+hYb+EtP6qL
jZzAA4sb9ng7qytwWzmIl6tLtV9RigHaxPJhooDvQoXXoCasKlmhr0q0pLpE2Y9S
duMHGwj8SReVEBnhGxBt5C9ifAGDyB4j0yvTPsiDLRobmeflHZ8qzsm+T3KxHglD
klZfc5tXfYdbHhKVWMobyKe5ygjML56GBT/mBYw5a4bquuD5YwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFEA1xRN26YyLfmgns/FeBPlJ0Oe4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTgwYTE2YjEtNzUyMS0z
YjE5LTk4MzgtMjdjMjEyODBlZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E
AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf3OfV1Guf6R5rvp6BUM33EHDCtTf2abk
3lswW8THpKyo/Vji30Rg5cYH9OxoC4Tio3sGkUfOrmiSqAjrk8lG5Zs89lPMTq1n
FEjal2QwM09HJdMegdelC+B4cUH4pSRSisKkmhFDAnmTrQcW+MeEzsbb+itGr1/V
metgsXg/CLbePkfu95IdavQbgKyNhCqsVkAxfMWjqUfrPtjtcWhwylEcJDgvHeBQ
U4VSZUp9zuwbgPocom++3H4BDlHfvYVjH+BUl/c8thKD5jWP8auAGtpExXKDPZSW
07LMqXZRsIqE5iFJXjHKjAEcNQUfu5vk3roKk20bHBcGCMsFGHpcdg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:58:15 2025 by rpki-client