Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
File:                     ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (raw, json)
Hash identifier:          +vizyaPSPJtlOqCGRr1Hkg+S/lL0t850Ug6wkgUG7cs=
Subject key identifier:   63:AF:5A:CC:E8:0F:2D:60:50:43:64:3A:C0:F9:37:0F:CC:72:9C:FE
Certificate issuer:       /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
Certificate serial:       010D0C9F4328584858A05D71FBBBFC28D2773380
Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     36786
IP address blocks:        132.203.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:5d:71:fb:bb:fc:28:d2:77:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=f3ded06e-6a13-401d-b05b-e63a44c42823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:be:6e:05:5b:36:db:71:a0:7f:d2:f7:53:
                    10:2c:ca:7c:05:a2:ff:62:6d:64:3b:76:c2:f5:68:
                    2d:84:64:63:d7:86:64:ef:9f:3a:a5:12:d7:f7:fc:
                    cc:cb:9c:f2:0f:f0:eb:86:b1:a1:ea:64:0f:65:64:
                    43:e4:39:f3:fc:f4:eb:9c:87:fa:7b:af:a0:e9:c2:
                    26:f2:41:fb:16:5b:f5:fd:17:0b:14:81:e8:b2:43:
                    02:5d:6f:b1:a7:0a:c9:de:5a:4b:6d:0e:c4:e2:47:
                    d9:b8:1a:23:31:17:d1:ca:2d:c9:ad:6b:a9:bd:1c:
                    b8:dc:12:1b:ad:fe:f9:fa:85:ab:36:67:ea:6a:2b:
                    75:62:0e:32:35:55:65:b3:be:ab:ed:ae:d0:87:21:
                    ff:1d:ad:3a:6d:0f:3a:a0:06:db:ee:65:3f:ef:d1:
                    33:78:19:e5:d4:f0:fe:69:41:15:68:bf:53:7b:7e:
                    b1:19:d4:e5:bd:9b:fa:46:36:4b:44:8a:a0:c3:07:
                    cc:fc:37:8f:df:23:8c:cb:9b:e4:16:d0:5c:a6:0f:
                    f5:4e:12:db:59:b6:57:eb:75:f3:94:5d:de:19:b0:
                    0d:b1:de:64:2b:5d:6e:9a:0d:d0:a1:09:a7:10:5e:
                    af:78:e8:c8:d7:76:56:6d:95:59:38:d7:19:f8:2f:
                    24:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AF:5A:CC:E8:0F:2D:60:50:43:64:3A:C0:F9:37:0F:CC:72:9C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl

            X509v3 Authority Key Identifier:
                keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.203.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:45:75:35:11:dc:f9:1f:0d:4b:2b:5e:25:ca:2c:ea:2e:2b:
         d4:98:b5:cf:88:39:ad:e9:a4:0b:1b:e8:2f:c1:63:4f:9e:32:
         58:60:1c:83:e7:c0:96:cd:df:a5:c6:9f:9a:7e:97:99:91:b2:
         37:9f:0b:5b:f8:9c:6b:f9:48:80:95:b6:19:72:0a:ab:eb:8f:
         71:f4:f0:4a:d3:6d:20:9a:0e:bd:0b:9a:0a:9c:60:d0:c7:89:
         7c:01:2b:7d:14:c2:52:33:dd:06:81:0e:a7:26:99:f9:7f:e0:
         69:aa:59:b0:d7:70:a7:66:67:de:da:77:13:97:76:e4:c3:0a:
         6e:42:43:74:04:db:98:ae:fa:16:91:02:5c:94:66:2f:a4:2b:
         24:06:64:2d:e2:6d:0f:91:77:f2:b5:05:0a:9b:33:af:18:70:
         d8:ed:a1:20:f6:81:40:f6:a4:3d:7f:d9:bf:8e:4c:0c:63:6c:
         4f:8c:3d:53:75:8b:81:2f:1c:9c:47:f2:cc:ef:25:4d:75:fb:
         96:dd:1c:b2:08:69:e8:9b:0b:be:e9:e7:8a:fd:60:e1:fc:69:
         40:9b:2a:0a:91:f1:8f:73:7f:d5:b5:fc:0c:1e:13:93:92:6d:
         56:5d:ac:7b:c6:0e:c8:20:a8:d3:d7:a9:a4:a9:89:10:d4:ee:
         2c:6d:5a:df
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhYoF1x+7v8KNJ3M4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU4YzBiZTgtODIwZi00OWNjLWI3NTktYTFjZDBiNjgw
MjhiMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZjNkZWQwNmUtNmExMy00MDFkLWIwNWItZTYzYTQ0YzQyODIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8u+bgVbNttxoH/S91MQLMp8BaL/Ym1kO3bC
9WgthGRj14Zk7586pRLX9/zMy5zyD/DrhrGh6mQPZWRD5Dnz/PTrnIf6e6+g6cIm
8kH7Flv1/RcLFIHoskMCXW+xpwrJ3lpLbQ7E4kfZuBojMRfRyi3JrWupvRy43BIb
rf75+oWrNmfqait1Yg4yNVVls76r7a7QhyH/Ha06bQ86oAbb7mU/79EzeBnl1PD+
aUEVaL9Te36xGdTlvZv6RjZLRIqgwwfM/DeP3yOMy5vkFtBcpg/1ThLbWbZX63Xz
lF3eGbANsd5kK11umg3QoQmnEF6veOjI13ZWbZVZONcZ+C8kjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGOvWszoDy1gUENkOsD5Nw/Mcpz+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThj
MGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNkMGI2ODAyOGIvY2ExZjE2MTMtZDlmMy0z
ZGM0LTg5NWQtYzFlZTgwMDA3MGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU4YzBiZTgtODIwZi00OWNjLWI3
NTktYTFjZDBiNjgwMjhiL2JlOGMwYmU4LTgyMGYtNDljYy1iNzU5LWExY2QwYjY4
MDI4Yi5jcmwwHwYDVR0jBBgwFoAUIfqVdHsML5CwxNcFkg/RWmP2cQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThjMGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNk
MGI2ODAyOGIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhMswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR0V1NRHc+R8NSyteJcos6i4r1Ji1z4g5remkCxvoL8FjT54yWGAcg+fA
ls3fpcafmn6XmZGyN58LW/ica/lIgJW2GXIKq+uPcfTwStNtIJoOvQuaCpxg0MeJ
fAErfRTCUjPdBoEOpyaZ+X/gaapZsNdwp2Zn3tp3E5d25MMKbkJDdATbmK76FpEC
XJRmL6QrJAZkLeJtD5F38rUFCpszrxhw2O2hIPaBQPakPX/Zv45MDGNsT4w9U3WL
gS8cnEfyzO8lTXX7lt0csghp6JsLvunniv1g4fxpQJsqCpHxj3N/1bX8DB4Tk5Jt
Vl2se8YOyCCo09eppKmJENTuLG1a3w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:00 2025 by rpki-client