Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9968e821-8b75-30bd-bca3-e8ddda81d40d.roa
File:                     9968e821-8b75-30bd-bca3-e8ddda81d40d.roa (raw, json)
Hash identifier:          eLeNTIZfUfFKZseWKzDid45In4eC5UZd1Z8UaYs6OJU=
Subject key identifier:   48:BA:24:2F:37:A0:7D:B3:61:5B:9F:79:89:3A:41:5B:A2:4B:6B:CE
Certificate issuer:       /CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
Certificate serial:       010D0C9F43285848E16BE276BF31B818E3AA10A0
Authority key identifier: AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9968e821-8b75-30bd-bca3-e8ddda81d40d.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     57976
IP address blocks:        24.105.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e2:76:bf:31:b8:18:e3:aa:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=47cd2c4d-15ee-453d-a817-47d0ace4fed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:f3:6e:a5:19:0a:13:68:c5:31:8b:65:91:
                    49:e2:b7:13:6f:8e:9d:1f:ad:a4:90:28:44:c4:da:
                    dc:96:ee:0e:5c:48:51:4b:e2:57:61:14:f6:d0:9a:
                    f6:3d:80:8d:ca:79:71:ad:b8:58:37:a7:a0:5a:e5:
                    c6:b8:3a:f4:40:6b:d9:ca:8b:bc:f9:20:1d:58:b3:
                    a7:af:91:9c:f7:26:3d:be:84:aa:c4:4d:cc:5b:c9:
                    82:bc:4d:ac:e8:9e:83:64:31:3a:71:46:70:5d:81:
                    a1:84:b5:8f:f0:4a:af:17:db:60:d7:5f:96:31:ac:
                    7f:c3:60:49:18:ff:2e:6d:c3:6a:2d:1b:f0:3b:a1:
                    76:4d:34:69:a7:e8:f1:ec:66:b4:c9:83:e8:52:42:
                    bc:7e:64:c8:af:39:5d:55:8f:a1:5f:55:03:07:24:
                    f9:c8:66:fa:a8:b5:d7:88:0b:bd:9f:27:2e:ed:a7:
                    cc:02:b0:2e:84:08:7a:3b:d7:a8:f2:14:69:54:9f:
                    a8:b1:73:8d:42:32:41:83:22:eb:d9:8a:57:c3:52:
                    8b:a7:f6:4d:4a:1a:8c:5a:a0:ef:6c:97:f9:f4:91:
                    c2:fc:40:85:49:83:ee:66:26:fa:53:3d:7b:a2:f7:
                    ce:25:ab:9a:45:a2:be:05:35:26:4d:f5:ea:21:c7:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BA:24:2F:37:A0:7D:B3:61:5B:9F:79:89:3A:41:5B:A2:4B:6B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9968e821-8b75-30bd-bca3-e8ddda81d40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl

            X509v3 Authority Key Identifier:
                keyid:AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.105.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:bd:4e:ba:77:39:54:aa:42:25:4b:ba:3a:c1:28:95:54:
         75:5f:c9:e0:4f:7d:a8:4f:a0:01:6b:83:8c:2a:47:15:c0:18:
         23:26:10:14:32:7c:e1:cc:5c:bd:7f:50:57:ec:88:fb:28:88:
         50:3d:e0:5f:88:b4:68:9c:8e:c6:51:6f:00:a6:6e:15:9a:e0:
         b5:a9:a1:12:79:38:26:bd:97:3b:c0:1d:06:8d:73:3b:0e:37:
         29:f5:c5:55:b0:28:48:77:ac:ba:0c:d2:94:c1:fc:86:f7:e2:
         08:b9:58:3b:50:37:7e:f0:8d:85:0a:9e:4e:80:e5:bb:5e:a3:
         25:b5:12:16:ad:51:ab:5c:75:08:6d:65:ca:2d:7a:15:5d:2a:
         42:01:00:5d:80:d4:6c:56:47:80:90:d1:5f:4e:0d:2f:d3:c8:
         e5:e1:b6:d2:6a:a4:2f:c9:76:8b:57:15:4e:fe:77:11:36:65:
         0e:25:fe:c2:62:08:f8:d5:ac:1e:6a:82:46:c5:38:f3:7b:e9:
         d9:10:86:c5:e7:5d:14:7a:30:24:4c:ef:b8:b5:e5:ec:05:8b:
         60:2a:7b:5b:63:bc:b7:51:da:50:94:3a:b4:36:cd:91:77:db:
         74:50:48:a1:9a:ac:82:dc:09:df:cf:57:d2:7f:ca:79:ed:a0:
         84:80:9d:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+J2vzG4GOOqEKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc5OTQ0MGItMWY5Yy00ZTg4LTkyNmUtOWVlMDczYzdl
ZTQ4MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NDdjZDJjNGQtMTVlZS00NTNkLWE4MTctNDdkMGFjZTRmZWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIzzbqUZChNoxTGLZZFJ4rcTb46dH62kkChE
xNrclu4OXEhRS+JXYRT20Jr2PYCNynlxrbhYN6egWuXGuDr0QGvZyou8+SAdWLOn
r5Gc9yY9voSqxE3MW8mCvE2s6J6DZDE6cUZwXYGhhLWP8EqvF9tg11+WMax/w2BJ
GP8ubcNqLRvwO6F2TTRpp+jx7Ga0yYPoUkK8fmTIrzldVY+hX1UDByT5yGb6qLXX
iAu9nycu7afMArAuhAh6O9eo8hRpVJ+osXONQjJBgyLr2YpXw1KLp/ZNShqMWqDv
bJf59JHC/ECFSYPuZib6Uz17ovfOJauaRaK+BTUmTfXqIcdYPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEi6JC83oH2zYVufeYk6QVuiS2vOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Nzk5
NDQwYi0xZjljLTRlODgtOTI2ZS05ZWUwNzNjN2VlNDgvOTk2OGU4MjEtOGI3NS0z
MGJkLWJjYTMtZThkZGRhODFkNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTc5OTQ0MGItMWY5Yy00ZTg4LTky
NmUtOWVlMDczYzdlZTQ4Lzk3OTk0NDBiLTFmOWMtNGU4OC05MjZlLTllZTA3M2M3
ZWU0OC5jcmwwHwYDVR0jBBgwFoAUrpEVrp2hCS9E7jslgfbBieGCbYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Nzk5NDQwYi0xZjljLTRlODgtOTI2ZS05ZWUw
NzNjN2VlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGGkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFh+vU66dzlUqkIlS7o6wSiVVHVfyeBPfahPoAFrg4wqRxXAGCMmEBQy
fOHMXL1/UFfsiPsoiFA94F+ItGicjsZRbwCmbhWa4LWpoRJ5OCa9lzvAHQaNczsO
Nyn1xVWwKEh3rLoM0pTB/Ib34gi5WDtQN37wjYUKnk6A5bteoyW1EhatUatcdQht
ZcotehVdKkIBAF2A1GxWR4CQ0V9ODS/TyOXhttJqpC/JdotXFU7+dxE2ZQ4l/sJi
CPjVrB5qgkbFOPN76dkQhsXnXRR6MCRM77i15ewFi2Aqe1tjvLdR2lCUOrQ2zZF3
23RQSKGarILcCd/PV9J/ynntoISAnZ4=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:22:09 2025 by rpki-client