Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa
File:                     d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa (raw, json)
Hash identifier:          4rIK3bQZ4aPQziDHtXxvaI9dU3LxuUg1mzT8ryn1KjA=
Subject key identifier:   C4:91:23:26:1B:29:C9:E7:CE:2B:E8:D8:4E:B1:C9:C9:89:27:A0:3F
Certificate issuer:       /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Certificate serial:       010D0C9F432858485B6AF7E09072CA8E0B041758
Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        192.64.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:f7:e0:90:72:ca:8e:0b:04:17:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=8c097f20-467d-43ea-addd-9eb8461245dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:dd:1d:ae:5b:5b:f5:43:42:07:a5:4b:8a:
                    7a:51:b7:20:b4:cf:a3:11:b6:6a:18:0a:2e:36:c4:
                    0c:82:80:e6:1a:e7:aa:54:40:0b:83:85:bf:88:8f:
                    ae:d9:9a:79:bd:50:cc:1e:62:c9:60:c7:ba:ec:e5:
                    05:58:f6:c8:08:88:60:f5:8b:59:af:4e:87:25:63:
                    8f:5e:10:67:e0:fa:5e:ab:cb:80:be:2e:28:0e:f7:
                    49:d7:10:42:75:28:4a:60:00:5b:a5:75:ce:a1:b2:
                    d8:b1:22:cf:32:9c:cc:d3:18:02:c7:bc:c2:39:ad:
                    b9:b1:89:7a:d8:bb:a0:38:b9:31:18:fa:92:da:12:
                    a4:41:cb:33:4f:bb:5c:03:68:8b:d1:b6:18:e8:c9:
                    01:8b:71:16:69:e3:07:d1:19:1f:4f:85:03:d0:84:
                    a0:64:63:b4:f5:cd:05:c9:d2:99:d7:a2:87:a7:c6:
                    7e:b7:f5:11:e7:f6:b2:64:c5:88:65:2e:3d:8f:4d:
                    f0:9b:29:b4:4d:db:7a:0a:c6:fb:a6:9e:ed:52:31:
                    cc:1c:22:28:38:e0:4e:16:8f:88:de:c7:e7:aa:38:
                    8d:cf:e4:59:ab:ff:fc:3b:eb:05:e2:15:ce:3c:38:
                    75:ed:9d:54:92:22:0e:2b:7a:d5:36:d2:0a:b1:09:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:91:23:26:1B:29:C9:E7:CE:2B:E8:D8:4E:B1:C9:C9:89:27:A0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl

            X509v3 Authority Key Identifier:
                keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:37:ca:ad:cc:1e:78:51:62:88:22:64:37:b3:0e:d4:a2:49:
         6c:08:2e:11:fe:75:fa:1b:d3:77:34:9f:2c:fb:af:53:bf:56:
         1d:67:7a:7d:ef:d4:54:85:bf:9b:43:21:25:f7:10:92:cb:4e:
         26:c6:62:ea:60:b0:1d:6e:d6:9e:73:c0:87:d1:45:76:62:c7:
         1c:d3:e9:7b:2b:dc:d6:34:92:50:3e:de:4a:f7:a8:08:72:8e:
         7a:04:77:7c:49:ed:76:51:b0:96:80:5a:6f:45:82:47:a3:10:
         d6:0f:e4:d9:3d:7b:0a:b4:fa:8f:01:ab:8c:01:47:0e:19:95:
         33:64:ec:67:b0:00:c1:19:3c:7c:1b:89:5c:6e:19:0c:fb:1e:
         cc:9a:1a:1e:58:62:3d:ff:de:8a:49:29:7d:e7:d1:5d:d6:02:
         63:bc:cc:31:4b:55:77:67:be:c0:9e:33:43:0c:ef:ef:b9:a1:
         ac:29:80:b4:51:ea:a7:33:41:c6:fb:56:fe:4d:f9:7e:f0:38:
         e4:6c:48:f6:0e:fb:a0:ad:4e:bc:33:ae:e5:5e:33:cf:df:e3:
         54:23:d3:e5:ce:ca:12:1f:a7:2b:7b:0b:df:6a:d3:25:11:fc:
         fb:69:41:36:44:16:da:95:76:0a:fb:50:ad:87:65:98:09:0d:
         ab:1a:ed:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavfgkHLKjgsEF1gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4
N2EyMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
OGMwOTdmMjAtNDY3ZC00M2VhLWFkZGQtOWViODQ2MTI0NWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW7dHa5bW/VDQgelS4p6UbcgtM+jEbZqGAou
NsQMgoDmGueqVEALg4W/iI+u2Zp5vVDMHmLJYMe67OUFWPbICIhg9YtZr06HJWOP
XhBn4Ppeq8uAvi4oDvdJ1xBCdShKYABbpXXOobLYsSLPMpzM0xgCx7zCOa25sYl6
2LugOLkxGPqS2hKkQcszT7tcA2iL0bYY6MkBi3EWaeMH0RkfT4UD0ISgZGO09c0F
ydKZ16KHp8Z+t/UR5/ayZMWIZS49j03wmym0Tdt6Csb7pp7tUjHMHCIoOOBOFo+I
3sfnqjiNz+RZq//8O+sF4hXOPDh17Z1UkiIOK3rVNtIKsQnfmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSRIyYbKcnnzivo2E6xycmJJ6A/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj
OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvZDU5YjhjMTItYTFlNC0z
OGJiLTg1N2QtZWE3OGVkM2EzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz
YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2
ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk
MWUyNjg3YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEBHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEA3yq3MHnhRYogiZDezDtSiSWwILhH+dfob03c0nyz7r1O/Vh1nen3v
1FSFv5tDISX3EJLLTibGYupgsB1u1p5zwIfRRXZixxzT6Xsr3NY0klA+3kr3qAhy
jnoEd3xJ7XZRsJaAWm9FgkejENYP5Nk9ewq0+o8Bq4wBRw4ZlTNk7GewAMEZPHwb
iVxuGQz7HsyaGh5YYj3/3opJKX3n0V3WAmO8zDFLVXdnvsCeM0MM7++5oawpgLRR
6qczQcb7Vv5N+X7wOORsSPYO+6CtTrwzruVeM8/f41Qj0+XOyhIfpyt7C99q0yUR
/PtpQTZEFtqVdgr7UK2HZZgJDasa7Uc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:33 2025 by rpki-client