Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35f352ac-e3e9-3b11-af16-bdf39d819cf5.roa
File:                     35f352ac-e3e9-3b11-af16-bdf39d819cf5.roa (raw, json)
Hash identifier:          lQEdlhV+I5SkDbnuH0wjXGK4aIkbASqSEwhay3XisuA=
Subject key identifier:   C5:25:D2:92:D7:12:D1:81:33:C1:C4:F8:FF:C8:3A:78:7D:E5:A8:13
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832F004AD8ABC139246FF5C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35f352ac-e3e9-3b11-af16-bdf39d819cf5.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397230
IP address blocks:        156.154.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:04:ad:8a:bc:13:92:46:ff:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=075fcc86-e45e-4993-ba63-f0e56543ffb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:c2:1c:f5:ee:a1:20:70:d0:22:d4:14:7a:
                    be:4e:96:bd:8b:98:a6:73:c7:ac:67:b0:96:d4:8f:
                    46:dd:f4:ed:92:4d:60:a3:1a:a6:a0:87:47:07:50:
                    9f:b9:18:3c:ec:ba:4f:c7:cc:40:90:7e:27:58:c5:
                    38:4f:82:5c:f7:68:55:9a:10:a5:ac:36:51:5a:5b:
                    cd:c9:c1:52:d9:11:7d:e3:2d:5a:9a:15:59:a8:6d:
                    84:46:fe:39:fe:48:d7:a2:5f:c8:40:a4:dc:e7:f3:
                    54:64:f6:9b:da:0f:42:b7:ec:25:55:e6:4f:22:62:
                    ed:06:46:4a:73:11:1a:25:92:71:93:5a:4f:dd:27:
                    1c:75:74:a2:12:61:16:e6:42:65:d6:aa:4f:06:9d:
                    6c:6a:b7:bb:61:bc:b5:8f:2e:86:e3:84:0a:cb:a8:
                    dd:ef:5a:21:1e:23:b9:8c:3a:cb:f1:77:e8:4e:5d:
                    59:14:25:81:da:e6:53:0a:b7:9b:01:18:44:d0:38:
                    9b:92:9a:4d:b0:97:57:68:6e:73:71:ce:fd:5d:be:
                    eb:66:46:16:9a:35:8a:53:1d:9e:0d:ae:42:ea:b3:
                    d6:0b:0a:18:9f:02:c4:c3:48:dc:7b:12:9f:d0:83:
                    15:c4:26:67:87:0e:08:60:ee:f3:93:ed:cb:02:de:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:25:D2:92:D7:12:D1:81:33:C1:C4:F8:FF:C8:3A:78:7D:E5:A8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35f352ac-e3e9-3b11-af16-bdf39d819cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ae:a2:ba:a7:6d:29:0e:3d:76:11:c8:d5:90:c6:4f:da:bf:
         53:22:f6:13:2c:b2:16:43:1d:60:50:85:58:b4:a5:bb:a4:99:
         ae:ca:dc:ce:9e:e4:7c:ea:e6:1d:77:7b:6e:a4:6f:7f:94:5b:
         9b:59:20:fd:37:7a:df:23:79:18:e8:db:6e:ca:b9:71:b2:c0:
         7b:40:94:58:1e:56:f2:44:f2:77:e4:15:46:9b:29:0e:4d:ef:
         e0:3a:11:5a:bf:56:90:5e:22:3b:f6:f0:ee:87:65:ba:37:2f:
         ab:1b:b8:62:14:a0:6b:df:91:fb:13:36:97:c0:9c:81:a5:04:
         0c:76:47:b6:4c:26:d2:7c:83:22:9d:e6:7e:73:08:db:30:d1:
         7c:c0:13:95:21:a3:ba:9e:9a:1c:1a:c6:36:a1:ef:9f:34:09:
         ec:c1:83:23:24:e6:de:3f:5a:75:6c:4b:e9:ec:00:a7:fc:86:
         73:22:29:4b:84:7a:db:3e:44:01:fc:49:57:94:0a:ae:ab:f9:
         c6:78:07:81:13:1c:e4:81:de:16:be:c7:f1:bc:a6:e0:95:42:
         29:0f:c4:8e:36:a0:56:34:b7:f3:6e:f1:7b:db:30:6d:00:cd:
         aa:de:03:79:3d:aa:a6:f7:ae:e9:e1:c2:bc:92:b3:00:52:31:
         a7:72:af:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8AStirwTkkb/XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDc1ZmNjODYtZTQ1ZS00OTkzLWJhNjMtZjBlNTY1NDNmZmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz/CHPXuoSBw0CLUFHq+Tpa9i5imc8esZ7CW
1I9G3fTtkk1goxqmoIdHB1CfuRg87LpPx8xAkH4nWMU4T4Jc92hVmhClrDZRWlvN
ycFS2RF94y1amhVZqG2ERv45/kjXol/IQKTc5/NUZPab2g9Ct+wlVeZPImLtBkZK
cxEaJZJxk1pP3SccdXSiEmEW5kJl1qpPBp1sare7Yby1jy6G44QKy6jd71ohHiO5
jDrL8XfoTl1ZFCWB2uZTCrebARhE0DibkppNsJdXaG5zcc79Xb7rZkYWmjWKUx2e
Da5C6rPWCwoYnwLEw0jcexKf0IMVxCZnhw4IYO7zk+3LAt7RGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUl0pLXEtGBM8HE+P/IOnh95agTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzVmMzUyYWMtZTNlOS0z
YjExLWFmMTYtYmRmMzlkODE5Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6uorqnbSkOPXYRyNWQxk/av1Mi9hMsshZDHWBQhVi0pbukma7K3M6e
5Hzq5h13e26kb3+UW5tZIP03et8jeRjo227KuXGywHtAlFgeVvJE8nfkFUabKQ5N
7+A6EVq/VpBeIjv28O6HZbo3L6sbuGIUoGvfkfsTNpfAnIGlBAx2R7ZMJtJ8gyKd
5n5zCNsw0XzAE5Uho7qemhwaxjah7580CezBgyMk5t4/WnVsS+nsAKf8hnMiKUuE
ets+RAH8SVeUCq6r+cZ4B4ETHOSB3ha+x/G8puCVQikPxI42oFY0t/Nu8XvbMG0A
zareA3k9qqb3runhwrySswBSMadyrxg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:26 2025 by rpki-client