Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/575ed7fa-ddfe-3689-8b33-23bcde60b060.roa
File:                     575ed7fa-ddfe-3689-8b33-23bcde60b060.roa (raw, json)
Hash identifier:          IfjdNtOTAAL0fv/36Lf/RwoWLJVr/NzGeikQ8VbVkDY=
Subject key identifier:   E6:02:E3:7E:06:2E:F0:C2:95:05:94:23:51:40:7B:E0:88:3E:FA:BE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832F01CE72CE99D399ACE5480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/575ed7fa-ddfe-3689-8b33-23bcde60b060.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397234
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:1c:e7:2c:e9:9d:39:9a:ce:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=9022e11a-eeb5-430d-82dc-927fe844b8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ca:60:13:fc:a2:ed:37:56:ce:f4:e0:ea:2b:
                    70:04:ef:07:f8:d0:b4:94:bd:c1:1d:50:b3:02:32:
                    cd:18:c5:ae:9a:d0:16:3f:49:81:64:67:06:ce:10:
                    7d:12:9b:28:34:40:47:6d:c9:e1:5c:fe:69:75:cc:
                    22:8f:a2:ef:1d:9a:4b:74:1b:dc:30:33:fe:33:cb:
                    f5:d6:22:25:55:0c:d0:d6:a3:f8:d1:d1:d1:39:41:
                    3d:1f:3a:ac:14:35:cc:79:e2:6e:f5:2b:ce:94:9b:
                    82:29:32:04:d0:8f:d0:d1:44:7b:fe:5d:e8:73:0e:
                    3a:39:bf:03:af:b5:35:7c:a6:ac:5e:50:12:53:f0:
                    50:00:14:a3:24:8e:28:0f:55:5f:fb:f8:39:74:cb:
                    c7:a8:18:64:f8:f7:8c:7f:64:26:55:4e:14:3b:66:
                    a7:41:ca:72:fd:72:66:73:fd:03:03:c3:72:49:40:
                    b3:1d:7c:56:31:12:ad:80:23:31:92:5b:d8:82:b9:
                    7c:8d:d7:01:ea:1a:d9:50:40:2e:02:bb:01:ba:3b:
                    70:3d:53:0c:2a:b0:97:d1:f3:d7:fe:1c:44:6a:96:
                    70:3b:2a:55:52:ae:67:78:7d:73:fa:72:8f:96:54:
                    f9:ac:e8:b2:ff:0c:b4:e2:7d:c6:0d:98:17:a5:bc:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:02:E3:7E:06:2E:F0:C2:95:05:94:23:51:40:7B:E0:88:3E:FA:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/575ed7fa-ddfe-3689-8b33-23bcde60b060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:3f:63:e6:43:e9:99:55:76:c9:40:4b:b8:f4:3f:8f:08:
         62:88:aa:be:96:99:57:80:df:bc:64:93:9c:24:bd:d1:42:35:
         77:63:52:b4:75:f1:e7:5c:e6:39:5e:92:9f:3f:64:50:68:50:
         88:26:47:01:a7:4d:ca:4e:d1:ff:d6:04:60:f7:1f:b9:73:a7:
         d3:57:f9:0b:0c:68:a3:e0:71:b4:31:bd:70:ed:a6:aa:91:6b:
         be:cf:7d:0b:3f:14:80:64:1a:65:75:df:18:6e:ef:51:27:82:
         2e:b8:99:bd:ef:89:21:97:db:db:67:8c:ea:00:a3:41:47:a4:
         12:40:8e:0b:2a:f4:a7:ab:2e:e3:76:c3:48:33:f7:20:85:32:
         be:f0:44:c8:a2:d7:01:6f:ac:5c:29:cf:9d:8e:16:b0:02:5e:
         6f:e0:29:8c:3b:97:5f:02:0b:11:f7:c0:9d:f6:05:fa:11:6f:
         cc:9f:0d:05:8a:8f:3a:d3:be:93:9b:fb:4c:9f:79:41:2b:44:
         df:55:e4:49:7c:cb:88:f8:89:e1:a8:df:7a:38:20:fb:ad:2b:
         28:28:dc:0d:c4:99:de:ba:07:88:c9:e0:52:6b:dc:1b:84:d3:
         b3:b2:83:45:23:67:6d:e1:0f:e8:80:13:2c:43:1f:55:46:d3:
         72:31:25:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8BznLOmdOZrOVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTAyMmUxMWEtZWViNS00MzBkLTgyZGMtOTI3ZmU4NDRiOGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48pgE/yi7TdWzvTg6itwBO8H+NC0lL3BHVCz
AjLNGMWumtAWP0mBZGcGzhB9EpsoNEBHbcnhXP5pdcwij6LvHZpLdBvcMDP+M8v1
1iIlVQzQ1qP40dHROUE9HzqsFDXMeeJu9SvOlJuCKTIE0I/Q0UR7/l3ocw46Ob8D
r7U1fKasXlASU/BQABSjJI4oD1Vf+/g5dMvHqBhk+PeMf2QmVU4UO2anQcpy/XJm
c/0DA8NySUCzHXxWMRKtgCMxklvYgrl8jdcB6hrZUEAuArsBujtwPVMMKrCX0fPX
/hxEapZwOypVUq5neH1z+nKPllT5rOiy/wy04n3GDZgXpbwjTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOYC434GLvDClQWUI1FAe+CIPvq+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTc1ZWQ3ZmEtZGRmZS0z
Njg5LThiMzMtMjNiY2RlNjBiMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWoP2PmQ+mZVXbJQEu49D+PCGKIqr6WmVeA37xkk5wkvdFCNXdjUrR1
8edc5jlekp8/ZFBoUIgmRwGnTcpO0f/WBGD3H7lzp9NX+QsMaKPgcbQxvXDtpqqR
a77PfQs/FIBkGmV13xhu71Engi64mb3viSGX29tnjOoAo0FHpBJAjgsq9KerLuN2
w0gz9yCFMr7wRMii1wFvrFwpz52OFrACXm/gKYw7l18CCxH3wJ32BfoRb8yfDQWK
jzrTvpOb+0yfeUErRN9V5El8y4j4ieGo33o4IPutKygo3A3Emd66B4jJ4FJr3BuE
07Oyg0UjZ23hD+iAEyxDH1VG03IxJVc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:12:17 2025 by rpki-client