Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa
File:                     8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa (raw, json)
Hash identifier:          Yvvc1ca4LteMI3weP3Peb8D5DxieRsa2dgtNnmUAXpw=
Subject key identifier:   76:AE:42:2D:42:76:CC:DA:86:86:94:5D:E8:7A:72:FA:D7:4B:B2:F9
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F43285847F84F8875580CAD0B40681F10
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     16509
IP address blocks:        207.202.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:88:75:58:0c:ad:0b:40:68:1f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=fdf4276f-d790-4ca7-9db3-6340957a11b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:f1:00:4c:27:b4:d3:12:c2:aa:9e:41:ac:
                    9a:6e:61:cf:a8:2f:a9:47:fc:69:50:ed:ca:c0:35:
                    74:9c:ee:b9:8d:48:cf:f0:1b:f2:2a:fc:78:a6:ae:
                    02:d8:3e:db:5a:bd:0e:97:25:3f:6e:70:6a:14:81:
                    ed:7d:fa:e3:db:9d:28:c7:32:ff:21:a1:72:9f:4c:
                    6a:09:d5:98:d4:b5:69:48:a7:fa:81:33:c7:67:fc:
                    61:bc:0d:55:62:20:6b:ed:37:ae:89:16:4c:ed:43:
                    1d:89:6d:09:cc:7d:57:5c:a3:64:b2:21:fe:7e:9a:
                    69:65:ad:95:26:c8:30:9b:45:94:0f:60:b8:85:24:
                    f3:4c:4e:44:ba:03:43:c8:2d:da:53:c8:9b:fb:04:
                    f7:0f:51:b5:2c:53:fd:95:64:9d:c4:bd:13:16:54:
                    5c:48:dc:53:33:4f:d9:12:03:85:c2:b3:bf:40:6b:
                    5c:9f:a6:0d:c4:b3:f8:c8:75:31:bb:42:0c:0a:89:
                    ca:62:0a:bb:8a:38:01:76:da:c8:22:63:17:bb:cd:
                    ca:fd:43:b0:dd:4d:67:29:e1:98:64:89:30:bb:08:
                    60:16:35:76:d1:1f:42:b8:2d:e1:36:1f:fe:e8:f3:
                    ce:48:31:66:e7:19:a1:a3:1f:f8:f7:57:99:bb:ab:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AE:42:2D:42:76:CC:DA:86:86:94:5D:E8:7A:72:FA:D7:4B:B2:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:64:f9:d9:5a:13:bd:9f:5e:cf:6a:93:b4:fa:7a:b1:4f:24:
         ab:94:b0:e8:ad:41:c5:46:ee:0b:06:1e:30:7d:02:e3:4f:ab:
         a3:ba:f6:6e:32:a2:1d:7c:12:a0:7b:b9:ba:14:0d:c5:71:5d:
         83:c9:d0:66:0d:c0:68:ff:fa:25:bf:48:50:9a:df:e7:d2:05:
         ce:0d:a0:eb:2d:9b:0c:23:a7:46:ff:1f:9b:ee:83:b4:36:55:
         07:38:aa:c3:e9:d4:2d:a8:dd:3b:3f:92:45:47:42:bb:75:0a:
         1f:49:b8:1d:bb:bf:5e:df:8d:4a:4e:6d:4c:91:e5:b2:78:15:
         a2:8d:11:e7:13:d0:0b:24:bd:a0:7c:47:c4:c1:4e:f6:6a:66:
         f2:1e:3a:32:45:c0:36:19:bc:f0:28:40:1a:e8:5c:d1:d0:b1:
         a9:e2:cb:8a:06:59:40:19:aa:80:f2:83:cb:54:01:d8:c9:eb:
         ce:8e:03:77:65:5f:7a:79:7e:2f:d2:6a:fc:d8:43:11:88:d8:
         61:7a:e8:5c:cf:b2:f8:5b:e6:de:25:ca:53:37:97:09:ad:91:
         a0:47:ed:ab:9d:4d:99:50:97:02:33:6d:6a:94:d9:a6:68:c6:
         21:18:d5:91:7d:3c:aa:35:e0:a5:17:80:46:43:d8:2e:7c:c2:
         2c:82:b9:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T4h1WAytC0BoHxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk
ZmRmNDI3NmYtZDc5MC00Y2E3LTlkYjMtNjM0MDk1N2ExMWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop7xAEwntNMSwqqeQayabmHPqC+pR/xpUO3K
wDV0nO65jUjP8BvyKvx4pq4C2D7bWr0OlyU/bnBqFIHtffrj250oxzL/IaFyn0xq
CdWY1LVpSKf6gTPHZ/xhvA1VYiBr7TeuiRZM7UMdiW0JzH1XXKNksiH+fpppZa2V
Jsgwm0WUD2C4hSTzTE5EugNDyC3aU8ib+wT3D1G1LFP9lWSdxL0TFlRcSNxTM0/Z
EgOFwrO/QGtcn6YNxLP4yHUxu0IMConKYgq7ijgBdtrIImMXu83K/UOw3U1nKeGY
ZIkwuwhgFjV20R9CuC3hNh/+6PPOSDFm5xmhox/491eZu6tSRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHauQi1CdszahoaUXeh6cvrXS7L5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvODUxMjc5MWMtYzNiNy0z
ZDQ0LWI5ZjEtNDljMjQ4MTBlZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRk+dlaE72fXs9qk7T6erFPJKuUsOitQcVG7gsGHjB9AuNPq6O69m4y
oh18EqB7uboUDcVxXYPJ0GYNwGj/+iW/SFCa3+fSBc4NoOstmwwjp0b/H5vug7Q2
VQc4qsPp1C2o3Ts/kkVHQrt1Ch9JuB27v17fjUpObUyR5bJ4FaKNEecT0AskvaB8
R8TBTvZqZvIeOjJFwDYZvPAoQBroXNHQsaniy4oGWUAZqoDyg8tUAdjJ686OA3dl
X3p5fi/SavzYQxGI2GF66FzPsvhb5t4lylM3lwmtkaBH7audTZlQlwIzbWqU2aZo
xiEY1ZF9PKo14KUXgEZD2C58wiyCuRQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:47 2025 by rpki-client