Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa
File:                     3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa (raw, json)
Hash identifier:          4tHznejgX38LlpJOcFVsD0LA49oheNFPUHHRNFzjtPc=
Subject key identifier:   63:05:75:55:32:BE:C4:FA:7D:F1:ED:3A:55:CC:48:7E:58:29:55:74
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFF552DCA03595186D4800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     11910
IP address blocks:        184.104.238.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:f5:52:dc:a0:35:95:18:6d:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=ba05c02d-bddc-43ab-bdfb-2c85b2381cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6d:81:a8:7f:15:53:72:ea:92:2a:15:ae:d4:
                    7e:13:73:17:4d:7a:cb:42:cf:11:c8:99:a6:96:b3:
                    00:a8:a2:1d:f0:b7:a8:28:5e:f7:fd:47:57:d9:ac:
                    85:c2:ff:a7:e2:8e:6e:68:1e:a7:f3:e4:bf:88:91:
                    7a:90:db:1d:4e:89:a5:ae:e2:e9:d8:e9:fc:a3:6a:
                    70:ca:b1:d0:35:2e:94:79:06:5d:45:41:8d:8a:fa:
                    5b:86:c5:9a:28:df:d8:28:22:66:04:8d:04:8e:34:
                    36:d2:6d:9c:c1:89:58:a6:d3:28:ab:71:02:c6:95:
                    96:19:3d:3b:0b:f3:2d:72:71:2c:b8:55:ad:93:50:
                    aa:64:e7:ae:e8:d8:cb:e6:63:12:ce:0c:f4:3e:4f:
                    db:d8:c6:3e:7c:a8:f1:90:45:e5:71:24:b8:e6:41:
                    82:48:cb:48:b5:e1:ec:f5:7f:88:0f:ac:4e:05:52:
                    50:d6:db:fa:de:31:9e:af:88:2b:ac:e4:42:b1:24:
                    2d:00:77:35:ce:b5:a4:ab:f2:25:b8:4a:6f:9e:a8:
                    e6:43:98:3c:a3:49:89:25:d5:2f:96:e6:e9:79:15:
                    17:29:eb:b0:ee:f4:af:e6:c4:ec:ec:06:b2:a1:85:
                    91:88:cd:64:da:03:06:97:80:1e:bc:15:22:0f:36:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:05:75:55:32:BE:C4:FA:7D:F1:ED:3A:55:CC:48:7E:58:29:55:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:02:06:9e:5a:bd:ab:92:5d:60:55:2b:7e:ef:3f:9d:da:55:
         9d:cd:16:95:87:b2:65:b3:d7:d3:3f:ad:37:cd:d6:45:ea:a4:
         ed:b5:57:76:67:33:7f:84:0b:0d:65:76:48:32:42:9b:6f:4c:
         36:05:3e:83:51:dc:a0:b8:cc:9b:99:72:02:3f:62:8f:ee:3a:
         76:64:51:c2:92:8b:bc:50:f0:3c:f7:0e:4a:9c:85:ac:2e:95:
         ad:b8:7e:ca:cd:6c:32:8d:64:9a:6f:a5:ee:dd:37:22:24:a0:
         f2:30:0d:13:70:2a:40:68:29:59:a1:c9:68:8e:bb:7e:17:b4:
         9b:3a:0a:1d:6e:08:72:66:86:0b:50:e2:aa:6f:50:0d:11:c5:
         20:ba:be:7d:e4:29:79:96:14:23:0e:ff:75:b8:18:e4:42:cf:
         8f:5e:f8:0b:4a:3f:d1:80:9f:de:49:1b:fa:bc:98:80:f4:ba:
         11:14:f3:ca:9a:44:4c:c6:5c:ff:87:c8:25:d2:f5:dc:64:3b:
         9e:37:ff:37:58:b2:4e:1f:5c:29:2c:87:87:dd:16:2f:ce:d3:
         e8:2c:b6:0d:52:d4:f3:45:28:ac:bd:66:a3:7b:79:72:c2:9e:
         f7:bc:3f:5b:73:c7:80:77:78:98:4c:4d:12:7d:09:75:da:d1:
         4a:57:73:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz/VS3KA1lRhtSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YmEwNWMwMmQtYmRkYy00M2FiLWJkZmItMmM4NWIyMzgxY2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA222BqH8VU3LqkioVrtR+E3MXTXrLQs8RyJmm
lrMAqKId8LeoKF73/UdX2ayFwv+n4o5uaB6n8+S/iJF6kNsdTomlruLp2On8o2pw
yrHQNS6UeQZdRUGNivpbhsWaKN/YKCJmBI0EjjQ20m2cwYlYptMoq3ECxpWWGT07
C/MtcnEsuFWtk1CqZOeu6NjL5mMSzgz0Pk/b2MY+fKjxkEXlcSS45kGCSMtIteHs
9X+ID6xOBVJQ1tv63jGer4grrORCsSQtAHc1zrWkq/IluEpvnqjmQ5g8o0mJJdUv
lubpeRUXKeuw7vSv5sTs7AayoYWRiM1k2gMGl4AevBUiDzasAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMFdVUyvsT6ffHtOlXMSH5YKVV0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2UwMDdjYmEtMjE1My0z
N2ExLTg3YTYtMGM0ZWQ5NGFlODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGjuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEECBp5avauSXWBVK37vP53aVZ3NFpWHsmWz19M/rTfN1kXqpO21V3Zn
M3+ECw1ldkgyQptvTDYFPoNR3KC4zJuZcgI/Yo/uOnZkUcKSi7xQ8Dz3Dkqchawu
la24fsrNbDKNZJpvpe7dNyIkoPIwDRNwKkBoKVmhyWiOu34XtJs6Ch1uCHJmhgtQ
4qpvUA0RxSC6vn3kKXmWFCMO/3W4GORCz49e+AtKP9GAn95JG/q8mID0uhEU88qa
REzGXP+HyCXS9dxkO543/zdYsk4fXCksh4fdFi/O0+gstg1S1PNFKKy9ZqN7eXLC
nve8P1tzx4B3eJhMTRJ9CXXa0UpXc0U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:12 2025 by rpki-client