Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/e1ae2cd3-9c16-37b8-823c-99383c09356c.roa
File:                     e1ae2cd3-9c16-37b8-823c-99383c09356c.roa (raw, json)
Hash identifier:          5q9bYjUS6a+Q1BwX5exPfeb30vysLxn9hUVSzV+LG6k=
Subject key identifier:   F3:80:CD:21:78:31:4D:06:F3:11:62:DE:AF:92:F1:C6:6D:11:DE:76
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285848828098146641855069539C60
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/e1ae2cd3-9c16-37b8-823c-99383c09356c.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     6498
IP address blocks:        75.78.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:98:14:66:41:85:50:69:53:9c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=0c8b9f18-5c72-408e-a3f1-fb631373ab88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d3:b0:56:27:6e:02:61:cf:d2:bc:71:73:40:
                    b4:07:f6:8a:b1:e3:68:1f:87:db:4c:0b:62:96:f6:
                    64:22:8e:a1:b3:ec:bc:e0:3d:16:30:07:b7:da:eb:
                    76:ff:e3:21:57:44:5b:49:c6:95:5e:80:3f:ac:48:
                    cc:34:aa:0b:49:9d:a9:32:b5:6c:b9:77:d6:d0:c7:
                    71:10:35:ee:09:37:24:e8:ea:02:7b:36:44:c8:81:
                    8b:d3:68:c4:94:4a:4c:23:4c:9d:28:70:c6:d6:97:
                    ce:e5:be:0f:60:41:06:6b:b9:a9:28:7b:e5:dc:89:
                    f5:54:4d:dd:fd:5d:45:39:90:bb:5b:85:2f:71:24:
                    5e:6f:2a:e2:4b:a4:cb:54:91:2e:4d:07:1a:e3:92:
                    19:c4:b6:b1:d1:8f:3f:1a:20:0a:83:4c:fc:73:b5:
                    ef:c8:3a:57:6d:71:c5:b7:fd:61:de:f1:ab:eb:0b:
                    2b:5d:3b:19:ef:9f:28:26:2f:b7:e9:60:99:05:b0:
                    e1:9c:f8:0d:b5:03:f3:4c:1e:61:de:c7:13:92:0d:
                    3d:2b:36:cb:2e:9f:f6:4e:3d:50:6b:e8:e7:17:93:
                    06:74:26:2a:75:e0:b7:02:04:09:3b:51:b6:8f:f1:
                    d1:81:09:f3:bd:82:85:30:e6:5a:a6:d9:a7:e3:d7:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:80:CD:21:78:31:4D:06:F3:11:62:DE:AF:92:F1:C6:6D:11:DE:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/e1ae2cd3-9c16-37b8-823c-99383c09356c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c5:3e:53:c3:42:a6:a6:94:73:0b:51:09:61:39:1a:75:80:
         37:b5:13:11:a7:e4:76:70:f3:a5:56:f7:2c:c2:ce:32:19:35:
         d4:b7:a4:7d:c3:4c:04:d5:21:10:5c:28:d2:7b:45:15:8d:f5:
         79:98:48:3e:ed:e5:4c:82:82:3e:ec:16:de:69:fd:d8:77:bf:
         89:25:2e:db:9f:dc:29:d2:40:bb:30:20:70:92:70:e1:df:15:
         e1:66:12:e8:0c:28:9a:81:ea:4f:13:5d:bc:2f:e0:7e:df:ef:
         dc:b7:db:f4:ba:4d:ba:3b:c7:12:15:81:7e:a6:29:34:14:59:
         a5:f6:52:62:97:c4:c5:29:30:28:9f:a6:84:5f:76:92:c9:1e:
         26:67:73:18:2b:99:bd:45:73:54:63:5e:16:c7:ce:cc:33:42:
         fe:5f:67:5c:06:a9:51:89:05:d3:34:c9:37:c6:f7:79:d8:4a:
         1d:e3:76:79:39:a5:d7:ff:73:fc:a7:85:0b:23:7b:c7:f2:66:
         b6:6e:e1:a3:f0:02:ba:1d:5e:00:31:6b:2d:56:62:72:c1:36:
         70:0c:fa:6e:e3:00:54:cb:b6:a3:7f:29:d7:38:85:ff:3d:ff:
         41:3f:9f:78:b0:9e:fa:0c:7d:be:65:eb:1a:2a:21:db:eb:61:
         34:a1:54:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJgUZkGFUGlTnGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MGM4YjlmMTgtNWM3Mi00MDhlLWEzZjEtZmI2MzEzNzNhYjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NOwViduAmHP0rxxc0C0B/aKseNoH4fbTAti
lvZkIo6hs+y84D0WMAe32ut2/+MhV0RbScaVXoA/rEjMNKoLSZ2pMrVsuXfW0Mdx
EDXuCTck6OoCezZEyIGL02jElEpMI0ydKHDG1pfO5b4PYEEGa7mpKHvl3In1VE3d
/V1FOZC7W4UvcSRebyriS6TLVJEuTQca45IZxLax0Y8/GiAKg0z8c7XvyDpXbXHF
t/1h3vGr6wsrXTsZ758oJi+36WCZBbDhnPgNtQPzTB5h3scTkg09KzbLLp/2Tj1Q
a+jnF5MGdCYqdeC3AgQJO1G2j/HRgQnzvYKFMOZaptmn49csgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOAzSF4MU0G8xFi3q+S8cZtEd52MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvZTFhZTJjZDMtOWMxNi0z
N2I4LTgyM2MtOTkzODNjMDkzNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS06oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzFPlPDQqamlHMLUQlhORp1gDe1ExGn5HZw86VW9yzCzjIZNdS3pH3D
TATVIRBcKNJ7RRWN9XmYSD7t5UyCgj7sFt5p/dh3v4klLtuf3CnSQLswIHCScOHf
FeFmEugMKJqB6k8TXbwv4H7f79y32/S6Tbo7xxIVgX6mKTQUWaX2UmKXxMUpMCif
poRfdpLJHiZncxgrmb1Fc1RjXhbHzswzQv5fZ1wGqVGJBdM0yTfG93nYSh3jdnk5
pdf/c/ynhQsje8fyZrZu4aPwArodXgAxay1WYnLBNnAM+m7jAFTLtqN/Kdc4hf89
/0E/n3iwnvoMfb5l6xoqIdvrYTShVN0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:20 2025 by rpki-client