Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa
File:                     89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa (raw, json)
Hash identifier:          u8YS/LKDH4VHP1WU5mvYcStlWf/PCE6lKMJD2+twStk=
Subject key identifier:   9D:C3:78:27:8A:21:13:73:F7:B2:98:08:2E:FB:B5:96:95:79:2F:E3
Certificate issuer:       /CN=ce029dcb-bb98-4569-a98c-6f77af488b38
Certificate serial:       010D0C9F432858480644FEE343E1128089B837C0
Authority key identifier: C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     14618
IP address blocks:        192.149.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:fe:e3:43:e1:12:80:89:b8:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce029dcb-bb98-4569-a98c-6f77af488b38
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=4db95de7-223a-40ab-9256-518b5e213b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:7a:b2:b9:22:f6:f9:46:c6:15:5d:71:70:
                    1a:61:0d:4d:ee:70:4e:b8:79:7f:f9:69:96:29:c2:
                    86:5a:d0:25:0c:6f:ba:49:4f:56:42:6a:1e:07:9e:
                    76:75:14:84:5c:1e:f2:9f:f7:3d:f5:0d:c1:3c:2b:
                    3c:ee:a5:fe:ae:de:30:94:66:7a:78:ce:62:50:1c:
                    8a:46:7c:7b:70:19:96:57:80:aa:2a:1c:34:b7:d3:
                    88:1b:0b:57:7a:56:54:b3:e9:1d:68:df:ff:30:7f:
                    3a:0d:42:a5:a2:a8:ea:4c:da:03:4c:51:dc:58:5b:
                    50:50:b5:a6:77:e1:0c:8d:a8:85:d1:fc:f5:eb:6f:
                    38:65:15:a5:5d:64:b7:8a:70:68:30:04:cb:8c:33:
                    95:75:26:94:96:9b:0a:4a:f6:87:af:4f:36:4f:fc:
                    db:92:f2:36:32:bd:99:23:c4:22:71:19:ef:41:86:
                    7c:56:47:89:be:9e:fe:78:97:59:60:13:fd:90:db:
                    b2:9e:55:8d:55:09:e2:79:9d:8f:53:5e:9b:fe:b6:
                    94:a8:ab:54:ed:55:d9:e8:41:f8:90:ee:59:0c:79:
                    57:31:46:1c:51:9b:88:83:1b:26:26:94:f6:52:5a:
                    20:fe:cc:ac:b9:7f:4d:f2:37:c3:0a:9e:3d:8f:63:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C3:78:27:8A:21:13:73:F7:B2:98:08:2E:FB:B5:96:95:79:2F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.crl

            X509v3 Authority Key Identifier:
                keyid:C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:78:0c:c0:3e:f0:38:5d:8b:9a:bf:4c:6f:59:6a:c0:c6:86:
         05:d3:d3:87:cc:62:3d:f9:78:11:6d:21:3b:67:31:27:75:b6:
         59:f3:2b:74:e1:bc:5a:11:5a:6f:46:a5:48:d4:f4:36:a9:db:
         10:70:c9:11:a3:78:37:54:a4:cf:c7:2e:1d:8d:e8:3a:e6:8d:
         54:dc:b4:bf:75:99:b2:24:52:b5:99:77:d7:1e:fc:80:50:24:
         da:49:e7:3f:34:e3:f9:6e:7e:f0:dc:fd:4b:a9:cb:e4:c2:b2:
         34:5e:1d:f7:fd:51:2d:26:4f:fa:de:0f:43:79:8d:a6:d6:89:
         f2:cd:ae:15:c5:6f:93:32:31:90:21:83:5b:f6:c6:89:91:80:
         a9:d8:8e:38:d1:a7:30:39:15:d9:a5:30:d1:c3:6a:c2:c8:46:
         a0:78:33:ca:69:6a:79:8b:d8:d0:24:30:42:31:48:86:a8:a2:
         cb:47:5a:4d:ee:af:6f:65:97:09:4b:64:b2:84:1c:f8:32:f8:
         89:a0:2d:d3:4c:5a:73:50:45:61:a0:39:ca:2f:37:e4:34:48:
         2c:28:28:6b:a4:9a:0d:51:52:da:a3:1d:93:cc:64:3f:99:55:
         9d:1b:18:a8:81:3a:92:73:24:2d:ba:bc:c3:62:84:99:35:38:
         22:20:0d:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRP7jQ+ESgIm4N8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2UwMjlkY2ItYmI5OC00NTY5LWE5OGMtNmY3N2FmNDg4
YjM4MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
NGRiOTVkZTctMjIzYS00MGFiLTkyNTYtNTE4YjVlMjEzYjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLp6srki9vlGxhVdcXAaYQ1N7nBOuHl/+WmW
KcKGWtAlDG+6SU9WQmoeB552dRSEXB7yn/c99Q3BPCs87qX+rt4wlGZ6eM5iUByK
Rnx7cBmWV4CqKhw0t9OIGwtXelZUs+kdaN//MH86DUKloqjqTNoDTFHcWFtQULWm
d+EMjaiF0fz16284ZRWlXWS3inBoMATLjDOVdSaUlpsKSvaHr082T/zbkvI2Mr2Z
I8QicRnvQYZ8VkeJvp7+eJdZYBP9kNuynlWNVQnieZ2PU16b/raUqKtU7VXZ6EH4
kO5ZDHlXMUYcUZuIgxsmJpT2Ulog/sysuX9N8jfDCp49j2NRywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3DeCeKIRNz97KYCC77tZaVeS/jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZTAy
OWRjYi1iYjk4LTQ1NjktYTk4Yy02Zjc3YWY0ODhiMzgvODllZTJkMTMtNmM0OS0z
MTc1LThlYmEtNjFiYzJhMDEwYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2UwMjlkY2ItYmI5OC00NTY5LWE5
OGMtNmY3N2FmNDg4YjM4L2NlMDI5ZGNiLWJiOTgtNDU2OS1hOThjLTZmNzdhZjQ4
OGIzOC5jcmwwHwYDVR0jBBgwFoAUw1kTAhO8a5Q9CXF24duOpzeW3yAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZTAyOWRjYi1iYjk4LTQ1NjktYTk4Yy02Zjc3
YWY0ODhiMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJXSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJ4DMA+8Dhdi5q/TG9ZasDGhgXT04fMYj35eBFtITtnMSd1tlnzK3Th
vFoRWm9GpUjU9Dap2xBwyRGjeDdUpM/HLh2N6DrmjVTctL91mbIkUrWZd9ce/IBQ
JNpJ5z804/lufvDc/Uupy+TCsjReHff9US0mT/reD0N5jabWifLNrhXFb5MyMZAh
g1v2xomRgKnYjjjRpzA5FdmlMNHDasLIRqB4M8ppanmL2NAkMEIxSIaoostHWk3u
r29llwlLZLKEHPgy+ImgLdNMWnNQRWGgOcovN+Q0SCwoKGukmg1RUtqjHZPMZD+Z
VZ0bGKiBOpJzJC26vMNihJk1OCIgDfU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:01 2025 by rpki-client