Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa
File:                     2c8c6ad3-e963-3175-a096-858ac3ef6191.roa (raw, json)
Hash identifier:          nYP3khwFxZ32aJXn/EpiZ39Wp5CG4vn0zNSdZzpWDDE=
Subject key identifier:   8D:AD:17:81:96:F2:41:88:20:FE:C7:6A:8B:A2:E1:68:0F:6F:10:7E
Certificate issuer:       /CN=e35c7007-7a33-480f-a32e-40481f8f1792
Certificate serial:       010D0C9F4328584849456250A05CEEB583903E20
Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     53636
IP address blocks:        199.47.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:62:50:a0:5c:ee:b5:83:90:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=9dfe15d4-509a-49ee-92f6-1d69b874984f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:a8:b1:2d:be:35:f8:ba:a7:ae:a6:1d:fb:
                    32:89:a3:9e:1c:d5:0c:89:75:bf:a8:44:d9:b7:ce:
                    9b:59:ed:c6:d6:54:65:63:c6:99:02:db:39:4f:3c:
                    2b:44:b3:fd:e2:09:a8:c3:de:13:7e:9e:d7:03:47:
                    91:82:1f:c2:0b:18:39:33:11:85:78:0e:8e:46:a2:
                    77:02:c1:50:34:b0:c5:08:e7:ac:75:ff:b2:2a:e1:
                    83:f2:a1:75:24:80:0c:8c:2a:b8:45:45:29:f1:41:
                    15:83:d5:07:a6:6a:ab:26:15:a8:67:a2:7e:46:72:
                    ba:43:1f:43:a2:e1:48:8b:c3:44:dd:01:7a:87:c1:
                    fa:d7:8e:58:d3:fb:89:f3:cc:96:67:36:1b:26:ca:
                    9b:59:6b:d8:01:df:16:96:90:54:21:1e:dd:bf:08:
                    99:d8:f6:d9:f3:f2:c6:d6:e8:e5:e1:8a:60:01:11:
                    dc:b4:5b:4d:98:18:35:cf:a9:a8:3f:0e:65:22:e6:
                    94:91:eb:f0:68:36:e7:9c:79:46:c1:17:e9:72:94:
                    48:df:49:58:06:ff:99:5a:c1:94:14:93:fe:45:df:
                    a0:69:23:33:21:6b:25:3c:c4:91:c8:bf:59:dc:2a:
                    7f:6f:96:59:85:7a:b8:73:bf:f9:bc:d4:cf:91:a5:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AD:17:81:96:F2:41:88:20:FE:C7:6A:8B:A2:E1:68:0F:6F:10:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl

            X509v3 Authority Key Identifier:
                keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0d:a3:02:80:96:40:36:88:90:01:e0:39:d7:2b:db:75:00:
         d3:39:f2:93:48:9e:85:30:7a:7b:a6:4d:92:1d:79:83:ac:3b:
         7c:d3:5b:e0:20:a3:75:3e:59:fc:4b:24:9b:ca:f7:b0:64:75:
         5b:1a:d6:e0:96:75:18:12:1f:74:8c:e7:5e:15:0a:6c:74:1d:
         26:85:b9:d6:e5:3b:dd:a5:3c:2f:9b:04:9d:46:58:4e:04:7c:
         1a:97:71:35:45:78:14:37:c9:71:2d:ee:cb:43:24:5a:11:1e:
         b7:95:ae:e4:2f:0b:90:c5:7e:7b:2a:44:77:11:29:ce:c3:b2:
         dd:eb:c9:5c:f9:45:d7:3d:fc:50:c9:56:e2:56:d5:36:7e:46:
         5d:96:09:a7:41:ac:24:ca:27:6b:28:7c:9d:c6:6e:5d:a3:32:
         7a:0c:44:eb:a7:b5:5c:fe:5f:fa:65:48:1a:06:af:15:e2:2b:
         1b:9d:73:3f:38:41:2d:93:30:74:21:b6:29:ec:9a:e4:b1:cc:
         88:42:3a:16:c5:52:40:8a:13:90:d1:26:74:1c:cc:00:71:f7:
         62:ef:38:7a:7b:36:9b:64:72:b3:3f:06:1f:87:e6:95:ae:0f:
         e7:02:28:f0:4a:c4:87:21:e1:ed:dd:37:36:b2:96:68:39:ce:
         47:b6:52:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRWJQoFzutYOQPiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx
NzkyMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
OWRmZTE1ZDQtNTA5YS00OWVlLTkyZjYtMWQ2OWI4NzQ5ODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzWosS2+Nfi6p66mHfsyiaOeHNUMiXW/qETZ
t86bWe3G1lRlY8aZAts5TzwrRLP94gmow94Tfp7XA0eRgh/CCxg5MxGFeA6ORqJ3
AsFQNLDFCOesdf+yKuGD8qF1JIAMjCq4RUUp8UEVg9UHpmqrJhWoZ6J+RnK6Qx9D
ouFIi8NE3QF6h8H6145Y0/uJ88yWZzYbJsqbWWvYAd8WlpBUIR7dvwiZ2PbZ8/LG
1ujl4YpgARHctFtNmBg1z6moPw5lIuaUkevwaDbnnHlGwRfpcpRI30lYBv+ZWsGU
FJP+Rd+gaSMzIWslPMSRyL9Z3Cp/b5ZZhXq4c7/5vNTPkaXnqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2tF4GW8kGIIP7Haoui4WgPbxB+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj
NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvMmM4YzZhZDMtZTk2My0z
MTc1LWEwOTYtODU4YWMzZWY2MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz
MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm
MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4
MWY4ZjE3OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0NowKAlkA2iJAB4DnXK9t1ANM58pNInoUwenumTZIdeYOsO3zTW+Ag
o3U+WfxLJJvK97BkdVsa1uCWdRgSH3SM514VCmx0HSaFudblO92lPC+bBJ1GWE4E
fBqXcTVFeBQ3yXEt7stDJFoRHreVruQvC5DFfnsqRHcRKc7Dst3ryVz5Rdc9/FDJ
VuJW1TZ+Rl2WCadBrCTKJ2sofJ3Gbl2jMnoMROuntVz+X/plSBoGrxXiKxudcz84
QS2TMHQhtinsmuSxzIhCOhbFUkCKE5DRJnQczABx92LvOHp7NptkcrM/Bh+H5pWu
D+cCKPBKxIch4e3dNzaylmg5zke2Urk=
-----END CERTIFICATE-----