Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa
File:                     a12882fe-d453-381a-9a7a-cbe2ae96018a.roa (raw, json)
Hash identifier:          KAGfnNgL19Nhx2Glqs9DwZu9A7VDWAA+m7K/AP7sAeQ=
Subject key identifier:   57:A5:13:12:FD:02:E0:0D:94:B7:3F:6A:B8:AF:C3:F0:E8:F2:A6:03
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F432858480BDA6236327A09F3C607FE80
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     3807
IP address blocks:        207.196.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:62:36:32:7a:09:f3:c6:07:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=8a21cbe5-4c5c-4608-8624-64c8db2ebb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:89:07:08:35:01:58:66:94:f6:cc:86:57:
                    6a:ac:fe:16:e5:38:83:67:c5:49:ba:c1:07:e9:03:
                    65:06:7c:4e:48:03:a4:b4:e6:99:fe:5d:1b:7d:bc:
                    1d:13:5e:1f:f9:96:61:2d:11:02:d7:11:47:04:6b:
                    9e:0f:aa:63:b7:32:37:cd:6a:15:2f:5c:eb:01:39:
                    19:a8:8e:20:24:a7:4b:71:5f:ec:80:66:39:17:ba:
                    8d:8b:85:97:58:b9:b5:96:3f:71:3a:90:8f:98:32:
                    0b:71:bf:83:35:0e:7f:42:79:6c:b6:fb:ab:1b:8c:
                    b2:45:0d:9a:ce:12:2b:39:fc:d7:12:dc:db:c4:ef:
                    a2:59:2c:3e:e2:b1:6c:a9:07:a9:c8:b4:1d:33:c6:
                    6a:72:a7:3d:fa:9c:4a:15:df:d6:5d:56:06:bb:1d:
                    93:d2:0b:f6:3f:32:69:15:54:c2:37:da:0f:8e:e8:
                    80:fd:e8:96:80:91:63:06:ac:70:4e:05:cf:c2:ed:
                    e9:9e:0e:67:a5:68:cb:a7:0e:19:35:7b:be:37:8d:
                    df:d0:94:73:74:f9:17:a6:a0:a8:27:8c:44:5e:60:
                    f1:23:cc:07:2b:fd:47:74:f2:d0:e3:7b:3a:a3:0d:
                    93:9f:a4:47:bc:dc:14:e2:d9:3b:8c:85:d9:54:81:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A5:13:12:FD:02:E0:0D:94:B7:3F:6A:B8:AF:C3:F0:E8:F2:A6:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:86:7b:9d:7b:79:f7:99:64:45:fb:0d:0a:f9:e6:b1:15:b3:
         34:94:f0:74:23:36:8e:a9:1c:6e:d5:b9:83:c1:21:06:78:d3:
         73:84:fe:66:0d:b9:c5:8b:66:4f:8e:1c:67:11:a4:a9:51:bb:
         97:9c:12:f0:7a:fa:76:8c:fb:78:4f:40:58:ca:be:b9:f8:ca:
         8c:90:cc:7c:cc:be:d7:25:33:25:28:fd:ff:a1:ba:dc:ab:da:
         64:2c:0a:8e:24:81:4f:ca:ca:61:ed:09:e7:db:5f:1a:97:2b:
         a8:9e:06:2c:6e:1c:d6:56:77:66:f7:79:44:bd:7a:25:70:ee:
         8e:d4:40:db:be:03:d5:33:ae:23:60:1e:10:db:60:da:e5:a3:
         da:aa:fa:0d:de:55:bd:0c:ee:5a:b8:13:9b:36:7d:bf:e7:fc:
         a1:7e:d8:61:db:a7:24:4d:2a:2b:cf:c6:c1:51:4e:fc:a5:d0:
         ae:c6:7d:29:bf:3b:58:c9:1e:1b:e5:87:6c:47:68:90:a1:97:
         8d:fd:9c:8e:18:ef:ca:fd:c5:96:d5:86:37:63:fa:88:42:1a:
         be:5d:43:7e:66:f9:d3:4e:3a:7d:79:f9:b6:15:66:89:10:45:
         0a:15:12:86:d2:33:c8:55:32:49:de:d0:0b:ce:ea:6a:a0:70:
         54:9f:72:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mI2MnoJ88YH/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0
MTA3MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
OGEyMWNiZTUtNGM1Yy00NjA4LTg2MjQtNjRjOGRiMmViYjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7KJBwg1AVhmlPbMhldqrP4W5TiDZ8VJusEH
6QNlBnxOSAOktOaZ/l0bfbwdE14f+ZZhLREC1xFHBGueD6pjtzI3zWoVL1zrATkZ
qI4gJKdLcV/sgGY5F7qNi4WXWLm1lj9xOpCPmDILcb+DNQ5/QnlstvurG4yyRQ2a
zhIrOfzXEtzbxO+iWSw+4rFsqQepyLQdM8Zqcqc9+pxKFd/WXVYGux2T0gv2PzJp
FVTCN9oPjuiA/eiWgJFjBqxwTgXPwu3png5npWjLpw4ZNXu+N43f0JRzdPkXpqCo
J4xEXmDxI8wHK/1HdPLQ43s6ow2Tn6RHvNwU4tk7jIXZVIE6KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFelExL9AuANlLc/arivw/Do8qYDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj
N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvYTEyODgyZmUtZDQ1My0z
ODFhLTlhN2EtY2JlMmFlOTYwMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0
MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz
NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3
ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8TwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOGe517efeZZEX7DQr55rEVszSU8HQjNo6pHG7VuYPBIQZ403OE/mYN
ucWLZk+OHGcRpKlRu5ecEvB6+naM+3hPQFjKvrn4yoyQzHzMvtclMyUo/f+hutyr
2mQsCo4kgU/KymHtCefbXxqXK6ieBixuHNZWd2b3eUS9eiVw7o7UQNu+A9UzriNg
HhDbYNrlo9qq+g3eVb0M7lq4E5s2fb/n/KF+2GHbpyRNKivPxsFRTvyl0K7GfSm/
O1jJHhvlh2xHaJChl439nI4Y78r9xZbVhjdj+ohCGr5dQ35m+dNOOn15+bYVZokQ
RQoVEobSM8hVMkne0AvO6mqgcFSfcgo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:38 2025 by rpki-client