Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/105d3f93-b63c-3448-8739-084a3062d31d.roa
File:                     105d3f93-b63c-3448-8739-084a3062d31d.roa (raw, json)
Hash identifier:          ATXiaLixVtMlTNSg6/WLKundpX5jZu121BVy2ksGKAk=
Subject key identifier:   A5:98:85:38:2E:6B:12:68:E9:31:26:93:4E:CD:FC:06:CD:FE:D3:EB
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F432858480EA517438E13BC5D24FB2A00
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/105d3f93-b63c-3448-8739-084a3062d31d.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     19471
IP address blocks:        208.99.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:17:43:8e:13:bc:5d:24:fb:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=a647e359-54ae-4878-a6fe-ddf90e0c2c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:99:c2:75:c9:d1:41:e6:9b:db:0d:f2:6e:
                    ea:47:c8:7b:3d:05:42:5b:7f:95:46:c6:de:07:42:
                    45:20:0a:97:b5:14:24:13:dd:29:5b:84:20:e9:da:
                    21:af:f2:3b:c4:fc:88:35:4e:89:c6:ca:73:09:19:
                    dc:c9:05:62:4c:f0:59:b2:6e:d1:e2:ae:d4:10:db:
                    77:ee:c2:42:f8:dd:a5:90:e3:fd:0e:3d:bf:64:16:
                    d3:ea:d6:8f:bc:72:cb:1c:ed:4d:94:8e:94:ce:06:
                    fa:44:97:44:eb:44:3b:71:7e:b8:c3:7d:b0:96:b8:
                    a2:f2:04:1f:78:fa:63:3c:68:59:12:52:0c:21:f0:
                    26:d7:62:ae:50:86:a4:24:5e:81:aa:c2:98:3a:6e:
                    b0:c3:d7:1d:63:c2:81:b2:8a:97:b2:c1:f1:e4:17:
                    e7:1d:21:58:87:63:ed:84:26:bf:3f:cb:30:e0:a9:
                    17:1d:58:65:1d:d4:0d:f5:a1:fc:41:27:e9:8a:86:
                    a6:ae:c0:0d:5a:ed:fb:ab:fe:07:7b:e1:e8:0f:6c:
                    70:34:1a:df:fb:cd:96:d9:96:e5:4d:a7:b2:fe:fa:
                    0e:0f:34:05:a3:04:68:1f:fb:67:ed:b9:9c:43:9c:
                    d4:ba:7d:c0:05:53:bc:a2:cd:cc:ca:ab:83:79:84:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:85:38:2E:6B:12:68:E9:31:26:93:4E:CD:FC:06:CD:FE:D3:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/105d3f93-b63c-3448-8739-084a3062d31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:02:97:5c:fe:c3:95:5d:44:79:b1:01:1e:64:9f:b4:6d:
         e7:39:92:a5:65:b0:db:1a:9b:34:cf:ab:d3:a8:65:68:d8:a4:
         2c:0d:83:66:fc:b5:0c:63:2a:9c:63:82:71:e6:07:79:6c:a3:
         a6:3d:8a:9b:e2:60:71:6a:af:8f:74:ad:0e:da:f3:e5:19:02:
         4e:0f:f7:45:9f:0b:a3:9c:41:01:96:62:e2:96:02:bf:39:27:
         56:b3:9c:f8:23:d2:28:81:e9:5d:e9:ec:2c:48:3a:cf:75:06:
         52:55:b1:b8:98:2e:a1:5b:7b:a8:09:c1:92:c3:ef:0a:87:fa:
         85:cb:c6:86:c2:32:84:e9:ed:73:66:67:d5:ad:92:93:a1:79:
         57:05:4b:89:50:6d:36:59:52:ba:ed:00:80:e0:1d:e0:12:d8:
         d5:1a:6f:5f:72:56:6c:19:f5:5d:c9:28:28:88:20:db:bf:44:
         eb:8b:c5:fa:e3:3a:8f:66:81:ca:3f:32:c4:c7:37:48:a4:0a:
         e8:37:70:b0:39:c0:d1:5f:11:a8:b1:f1:4f:e0:8c:be:91:3e:
         ef:4d:33:db:51:8c:b2:a2:41:e4:16:3f:01:4f:a3:73:42:b2:
         67:60:81:6a:25:2a:ed:db:59:fa:1c:5a:70:0c:99:b5:03:19:
         f3:81:fa:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpRdDjhO8XST7KgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj
NWIwMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
YTY0N2UzNTktNTRhZS00ODc4LWE2ZmUtZGRmOTBlMGMyYzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaGZwnXJ0UHmm9sN8m7qR8h7PQVCW3+VRsbe
B0JFIAqXtRQkE90pW4Qg6dohr/I7xPyINU6JxspzCRncyQViTPBZsm7R4q7UENt3
7sJC+N2lkOP9Dj2/ZBbT6taPvHLLHO1NlI6Uzgb6RJdE60Q7cX64w32wlrii8gQf
ePpjPGhZElIMIfAm12KuUIakJF6BqsKYOm6ww9cdY8KBsoqXssHx5BfnHSFYh2Pt
hCa/P8sw4KkXHVhlHdQN9aH8QSfpioamrsANWu37q/4He+HoD2xwNBrf+82W2Zbl
Taey/voODzQFowRoH/tn7bmcQ5zUun3ABVO8os3MyquDeYTFEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWYhTguaxJo6TEmk07N/AbN/tPrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll
YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvMTA1ZDNmOTMtYjYzYy0z
NDQ4LTg3MzktMDg0YTMwNjJkMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5
YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2
YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk
NDEwNmM1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8EApdc/sOVXUR5sQEeZJ+0bec5kqVlsNsamzTPq9OoZWjYpCwNg2b8
tQxjKpxjgnHmB3lso6Y9ipviYHFqr490rQ7a8+UZAk4P90WfC6OcQQGWYuKWAr85
J1aznPgj0iiB6V3p7CxIOs91BlJVsbiYLqFbe6gJwZLD7wqH+oXLxobCMoTp7XNm
Z9WtkpOheVcFS4lQbTZZUrrtAIDgHeAS2NUab19yVmwZ9V3JKCiIINu/ROuLxfrj
Oo9mgco/MsTHN0ikCug3cLA5wNFfEaix8U/gjL6RPu9NM9tRjLKiQeQWPwFPo3NC
smdggWolKu3bWfocWnAMmbUDGfOB+j4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:44 2025 by rpki-client