Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2dd6cf0f-ac70-369b-b45f-3ecaed0ff8b7.roa
File:                     2dd6cf0f-ac70-369b-b45f-3ecaed0ff8b7.roa (raw, json)
Hash identifier:          gZnalkWzLJvTxO8cJ7F0pjbyDEVBYWsMUff+FQJ68X8=
Subject key identifier:   AB:ED:D1:9A:30:FA:17:09:97:35:6D:35:D2:5A:0F:16:73:1D:0C:2A
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F43285848F65BDBB4305DEEE5614D0E40
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2dd6cf0f-ac70-369b-b45f-3ecaed0ff8b7.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        216.238.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:db:b4:30:5d:ee:e5:61:4d:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=f50fdf82-be3e-4489-8a81-1b62b709229c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:92:98:37:70:f2:9a:ec:f2:35:4a:e1:ce:
                    9c:e3:e5:42:a0:cc:7e:46:5a:45:3d:ab:4e:7b:23:
                    ce:5a:3c:6e:ca:f1:3c:7c:ca:75:19:40:6f:6a:15:
                    62:cc:58:17:4d:c0:07:95:7d:95:ce:23:f3:5e:7a:
                    c6:eb:90:19:24:22:55:28:dc:6c:f9:5a:15:db:26:
                    86:3f:79:fd:4f:b1:bf:5d:28:83:ea:54:30:45:59:
                    23:fe:2e:f2:06:82:8c:5f:1c:92:10:58:16:96:8b:
                    80:fd:38:1d:2e:9e:80:59:69:08:18:5a:72:8d:b9:
                    9b:a5:e2:59:06:67:a5:9d:00:ed:56:2b:00:6e:ce:
                    bb:e2:f3:0e:84:af:d2:20:1d:38:1c:a5:15:09:41:
                    c9:cc:ae:52:58:19:5f:58:54:6d:3d:38:3b:cc:4b:
                    91:82:4b:79:1b:7f:b3:27:1e:90:4f:3f:e0:28:f4:
                    e0:70:c2:ea:6b:2f:b6:7d:93:77:58:64:ef:d2:f8:
                    99:ea:54:7f:f2:f5:8b:93:e6:d9:eb:2f:7e:01:25:
                    71:31:19:8c:8a:d7:82:0c:b5:ba:32:a6:ab:47:8d:
                    1f:c7:a3:67:f8:ad:12:71:7f:46:7b:bb:1d:81:4f:
                    b9:15:e0:6b:5c:fd:5a:bf:b3:7a:b4:1c:4f:7c:8f:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:ED:D1:9A:30:FA:17:09:97:35:6D:35:D2:5A:0F:16:73:1D:0C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2dd6cf0f-ac70-369b-b45f-3ecaed0ff8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:7a:71:87:0d:64:c3:2a:79:ab:fc:68:e7:fd:36:47:0c:9a:
         84:af:76:1c:8f:e2:98:f5:1d:c2:56:c9:96:27:ad:66:45:6b:
         87:7f:78:28:e4:7a:91:fa:3f:fb:e9:a0:1e:e5:a3:67:89:bc:
         bf:71:fd:47:80:6e:6d:59:3c:30:c5:30:b7:62:46:8c:57:87:
         24:0a:4a:5f:de:94:98:3f:37:e7:fc:20:f6:e2:e3:ac:a2:69:
         1a:88:16:e6:12:84:18:27:32:d5:85:9a:75:db:3e:70:83:29:
         5a:f7:f6:6d:d4:d4:74:2d:25:b2:f2:eb:9d:2c:db:7e:dd:99:
         a2:03:e6:49:b3:91:b4:07:45:8f:6e:53:07:fa:e0:e6:ba:aa:
         50:77:11:fe:f7:7d:77:6a:28:9c:6b:b2:40:e6:4c:45:b3:a5:
         00:52:43:86:20:86:29:49:5b:f2:3f:8f:a4:f3:1c:c5:ff:43:
         db:f5:de:fd:68:e4:bf:cf:c5:49:a9:94:fa:ce:aa:04:c7:9a:
         26:ef:7f:3b:a1:a7:13:15:64:41:be:f5:e4:4c:db:80:cb:72:
         b8:88:62:3c:7b:8b:86:b2:bc:ef:f2:ef:f4:62:b9:e8:aa:df:
         f0:0d:b7:56:89:3f:8c:3f:3f:a8:a0:01:da:d1:bd:83:b1:d3:
         36:72:20:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9u0MF3u5WFNDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZlYWQzY2ItMWQzOC00MDdmLWJhMDYtOGUyNzZiMDY3
MjM4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
ZjUwZmRmODItYmUzZS00NDg5LThhODEtMWI2MmI3MDkyMjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNGSmDdw8prs8jVK4c6c4+VCoMx+RlpFPatO
eyPOWjxuyvE8fMp1GUBvahVizFgXTcAHlX2VziPzXnrG65AZJCJVKNxs+VoV2yaG
P3n9T7G/XSiD6lQwRVkj/i7yBoKMXxySEFgWlouA/TgdLp6AWWkIGFpyjbmbpeJZ
BmelnQDtVisAbs674vMOhK/SIB04HKUVCUHJzK5SWBlfWFRtPTg7zEuRgkt5G3+z
Jx6QTz/gKPTgcMLqay+2fZN3WGTv0viZ6lR/8vWLk+bZ6y9+ASVxMRmMiteCDLW6
MqarR40fx6Nn+K0ScX9Ge7sdgU+5FeBrXP1av7N6tBxPfI+/nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvt0Zow+hcJlzVtNdJaDxZzHQwqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVh
ZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIwNjcyMzgvMmRkNmNmMGYtYWM3MC0z
NjliLWI0NWYtM2VjYWVkMGZmOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWZlYWQzY2ItMWQzOC00MDdmLWJh
MDYtOGUyNzZiMDY3MjM4L2VmZWFkM2NiLTFkMzgtNDA3Zi1iYTA2LThlMjc2YjA2
NzIzOC5jcmwwHwYDVR0jBBgwFoAUNPnajc3fX4CiVfX2aItPRyDBA9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3
NmIwNjcyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAN6cYcNZMMqeav8aOf9NkcMmoSvdhyP4pj1HcJWyZYnrWZFa4d/eCjk
epH6P/vpoB7lo2eJvL9x/UeAbm1ZPDDFMLdiRoxXhyQKSl/elJg/N+f8IPbi46yi
aRqIFuYShBgnMtWFmnXbPnCDKVr39m3U1HQtJbLy650s237dmaID5kmzkbQHRY9u
Uwf64Oa6qlB3Ef73fXdqKJxrskDmTEWzpQBSQ4YghilJW/I/j6TzHMX/Q9v13v1o
5L/PxUmplPrOqgTHmibvfzuhpxMVZEG+9eRM24DLcriIYjx7i4ayvO/y7/Riueiq
3/ANt1aJP4w/P6igAdrRvYOx0zZyIEw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:31 2025 by rpki-client