Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16a2bae4-fe65-3ab2-bba7-fce63b432c73.roa
File:                     16a2bae4-fe65-3ab2-bba7-fce63b432c73.roa (raw, json)
Hash identifier:          zIoK0A8+iaZc3vnGhVnouCik0fri97Celpa6XAqzHIs=
Subject key identifier:   33:6E:58:CF:AC:BC:FC:AB:C9:4E:64:A0:70:D7:E6:F1:74:C4:22:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848100AA0D204137DC3D82CACC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16a2bae4-fe65-3ab2-bba7-fce63b432c73.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     22394
IP address blocks:        174.41.198.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:a0:d2:04:13:7d:c3:d8:2c:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=090b8236-9427-4f4a-a907-9906cc4c1402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:0d:ef:d2:f8:85:39:b0:8d:d8:e4:db:2f:
                    c5:2b:e1:0b:96:76:ce:ac:fe:84:d1:e2:ee:e7:93:
                    2e:c7:ef:96:2a:50:81:08:76:c5:01:56:29:1e:9a:
                    55:72:ba:94:5b:44:78:90:a5:f1:37:e7:a6:6e:95:
                    00:d1:b8:61:54:19:b6:f1:3a:a3:a1:17:1f:aa:67:
                    4d:9d:71:7e:2c:8b:42:ac:f3:d4:a3:6d:e1:80:0e:
                    48:5f:59:b3:bb:c4:15:22:c2:24:78:c1:3d:ca:12:
                    20:d6:94:c6:da:86:61:a4:6f:fe:6c:40:09:3a:7d:
                    2c:1f:7f:c2:99:af:4a:db:14:a6:6e:d2:c3:a6:03:
                    82:36:a9:17:10:ed:2f:86:7b:b1:5a:92:11:6c:77:
                    30:17:c7:3b:9c:f8:95:d3:7a:c9:68:c6:0d:e8:ea:
                    bc:51:47:70:27:f9:bd:ea:54:c7:01:9e:ec:1f:b9:
                    bc:52:f8:3f:ac:25:39:fc:1e:75:bb:cc:49:ca:90:
                    b2:f4:12:de:70:df:19:48:af:bd:84:1b:ac:5e:f4:
                    c3:8f:9a:a0:10:67:04:d7:41:51:bc:63:83:3b:47:
                    02:ae:6e:33:ef:b2:05:29:c2:eb:77:5c:21:62:84:
                    91:80:99:82:fa:51:4e:5a:54:15:6a:5b:fd:6d:dd:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:58:CF:AC:BC:FC:AB:C9:4E:64:A0:70:D7:E6:F1:74:C4:22:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16a2bae4-fe65-3ab2-bba7-fce63b432c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:46:9c:13:2b:77:7d:d3:3c:7d:95:f8:55:51:21:f9:89:2d:
         99:f4:5d:48:cd:cf:00:e2:85:ce:00:b3:28:fd:1b:62:ff:17:
         1f:d6:48:5f:1a:57:58:aa:42:bb:e0:f0:d5:bc:04:23:07:27:
         17:94:4c:05:2c:9c:f9:23:4d:56:ab:2c:b6:13:cf:50:59:59:
         25:b5:6f:52:89:c3:bd:12:47:a4:88:61:2f:0e:3c:f0:cf:19:
         fd:32:6f:f3:92:e5:36:f6:19:33:7a:8f:22:7e:ba:07:24:3e:
         4b:7a:2a:2c:91:45:de:ba:d9:ca:e2:71:51:75:f4:56:16:33:
         0a:8b:4e:8d:47:46:0c:80:f7:be:82:46:34:72:4e:1c:28:2b:
         f9:e2:ea:9b:e7:aa:32:65:56:dd:99:2f:28:f1:40:7e:8b:2a:
         34:33:17:26:ef:44:96:a9:a6:7a:6a:ec:66:7a:65:c0:a9:34:
         5e:2f:24:4a:75:3e:10:9d:c0:84:e4:17:45:2c:7b:dd:8e:7e:
         85:7b:b9:a2:e6:ce:a2:77:61:ab:00:95:29:54:76:2e:a9:7f:
         cc:17:01:c0:43:5d:07:64:a8:e1:37:64:97:57:7a:90:16:a7:
         b9:22:22:83:0b:14:91:cb:3f:16:b9:e7:8d:76:f4:5a:f9:27:
         8f:74:32:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCqDSBBN9w9gsrMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
MDkwYjgyMzYtOTQyNy00ZjRhLWE5MDctOTkwNmNjNGMxNDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6MN79L4hTmwjdjk2y/FK+ELlnbOrP6E0eLu
55Mux++WKlCBCHbFAVYpHppVcrqUW0R4kKXxN+embpUA0bhhVBm28TqjoRcfqmdN
nXF+LItCrPPUo23hgA5IX1mzu8QVIsIkeME9yhIg1pTG2oZhpG/+bEAJOn0sH3/C
ma9K2xSmbtLDpgOCNqkXEO0vhnuxWpIRbHcwF8c7nPiV03rJaMYN6Oq8UUdwJ/m9
6lTHAZ7sH7m8Uvg/rCU5/B51u8xJypCy9BLecN8ZSK+9hBusXvTDj5qgEGcE10FR
vGODO0cCrm4z77IFKcLrd1whYoSRgJmC+lFOWlQValv9bd2K5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNuWM+svPyryU5koHDX5vF0xCI3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTZhMmJhZTQtZmU2NS0z
YWIyLWJiYTctZmNlNjNiNDMyYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFGnBMrd33TPH2V+FVRIfmJLZn0XUjNzwDihc4Asyj9G2L/Fx/WSF8a
V1iqQrvg8NW8BCMHJxeUTAUsnPkjTVarLLYTz1BZWSW1b1KJw70SR6SIYS8OPPDP
Gf0yb/OS5Tb2GTN6jyJ+ugckPkt6KiyRRd662cricVF19FYWMwqLTo1HRgyA976C
RjRyThwoK/ni6pvnqjJlVt2ZLyjxQH6LKjQzFybvRJappnpq7GZ6ZcCpNF4vJEp1
PhCdwITkF0Use92OfoV7uaLmzqJ3YasAlSlUdi6pf8wXAcBDXQdkqOE3ZJdXepAW
p7kiIoMLFJHLPxa554129Fr5J490MlI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:18:10 2025 by rpki-client