Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1a073d8f-cc79-3842-bea9-364ab9298473.roa
File:                     1a073d8f-cc79-3842-bea9-364ab9298473.roa (raw, json)
Hash identifier:          GMCVN+fBM/pJ3lDPj9tE+frk+tObpE6tX8Fum12OeoI=
Subject key identifier:   61:83:4E:9D:66:C9:61:A1:13:A6:2A:66:3C:3C:69:EF:17:58:D0:D7
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F432858489BA0B5DFAABBC908271142A0
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1a073d8f-cc79-3842-bea9-364ab9298473.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     26658
IP address blocks:        107.178.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b5:df:aa:bb:c9:08:27:11:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=c34807e8-78bb-41ef-bae4-fa6eb0c905eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:69:37:c6:cb:dd:f7:2f:f4:21:1c:2c:db:
                    49:eb:22:6e:a0:ad:b8:b6:a2:be:ed:5f:fd:42:f4:
                    c8:bc:a3:2d:d2:38:cd:68:df:0b:62:97:2e:7d:24:
                    3a:4b:ab:aa:5a:72:a0:5c:8a:5a:6e:ff:6b:7b:62:
                    4e:6d:b7:0c:6f:eb:1a:5e:82:77:73:12:ea:80:9d:
                    3b:d5:13:e3:24:9e:a7:c1:34:b0:2f:24:88:99:37:
                    6d:dd:ec:a0:87:61:2e:1d:86:ba:8b:5a:48:6c:34:
                    a0:ce:64:a0:ac:35:9c:6f:2f:6e:54:36:d7:46:46:
                    4a:72:b1:94:c8:2c:f5:7c:dd:d9:4d:18:f8:5d:96:
                    49:a7:fa:63:ed:28:bd:7c:79:c0:15:a1:8c:04:f4:
                    46:43:97:bd:1c:39:eb:a4:b5:1e:fc:1e:15:7c:ad:
                    c3:10:97:50:48:36:95:ca:bc:d3:98:08:01:61:b0:
                    ed:07:ac:81:7b:20:92:41:ab:db:95:37:2b:92:2a:
                    a3:91:e1:2b:fb:ba:1e:b2:67:5a:66:77:3a:5f:f8:
                    5f:7c:0e:9e:37:7a:de:25:17:9f:07:6b:50:4f:09:
                    ac:33:67:14:db:bc:d0:88:b0:50:20:f2:1c:72:86:
                    74:04:27:69:e1:96:dc:31:fe:f8:8b:d7:15:e9:21:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:83:4E:9D:66:C9:61:A1:13:A6:2A:66:3C:3C:69:EF:17:58:D0:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1a073d8f-cc79-3842-bea9-364ab9298473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.178.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:67:ef:9b:b3:38:5a:28:01:72:e4:79:67:dc:e3:ae:1b:ce:
         ff:05:f8:3a:0d:00:0b:5f:76:e0:87:d8:3c:9b:84:03:e3:ee:
         26:35:a8:2a:3b:9c:e6:7f:25:e9:d6:96:40:be:f3:88:51:10:
         57:dc:a3:a2:a6:66:6e:d0:f4:b2:fc:2d:c6:28:68:a2:0a:91:
         db:b3:11:ab:68:ec:a6:7d:3e:06:d5:14:bf:1e:cb:1c:7b:f6:
         57:03:d9:ee:ab:b2:a1:60:53:32:bd:06:32:9d:c8:05:a0:9a:
         98:fd:b5:c2:4e:2f:7b:7d:56:54:55:29:d9:79:44:d4:25:6d:
         d4:0c:a9:11:c4:0a:96:71:2c:bf:40:44:70:34:cf:d7:28:79:
         9e:5c:d0:de:c6:10:9e:d8:38:ac:3b:9e:50:ec:c3:43:65:86:
         5c:9c:b6:c1:09:bf:c3:45:8f:1f:0c:d0:4b:b0:fe:8e:e1:10:
         97:c6:17:b2:36:4d:34:46:f9:c2:60:be:7f:37:25:90:93:73:
         cf:99:86:69:de:08:41:31:96:65:73:d5:bc:88:11:c7:59:b8:
         94:c7:36:44:14:06:44:c3:59:87:4b:54:29:71:ce:28:07:32:
         81:93:6d:41:b0:f1:1d:15:7f:4b:61:1b:d6:fd:f4:73:e0:bb:
         15:c9:ef:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboLXfqrvJCCcRQqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA0ZDgxOTAtZWMzMy00NTUxLTkxOTctZDA2NzQ2ZDM5
OWQwMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
YzM0ODA3ZTgtNzhiYi00MWVmLWJhZTQtZmE2ZWIwYzkwNWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYxpN8bL3fcv9CEcLNtJ6yJuoK24tqK+7V/9
QvTIvKMt0jjNaN8LYpcufSQ6S6uqWnKgXIpabv9re2JObbcMb+saXoJ3cxLqgJ07
1RPjJJ6nwTSwLySImTdt3eygh2EuHYa6i1pIbDSgzmSgrDWcby9uVDbXRkZKcrGU
yCz1fN3ZTRj4XZZJp/pj7Si9fHnAFaGMBPRGQ5e9HDnrpLUe/B4VfK3DEJdQSDaV
yrzTmAgBYbDtB6yBeyCSQavblTcrkiqjkeEr+7oesmdaZnc6X/hffA6eN3reJRef
B2tQTwmsM2cU27zQiLBQIPIccoZ0BCdp4ZbcMf74i9cV6SE2QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGGDTp1myWGhE6YqZjw8ae8XWNDXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRk
ODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3NDZkMzk5ZDAvMWEwNzNkOGYtY2M3OS0z
ODQyLWJlYTktMzY0YWI5Mjk4NDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTA0ZDgxOTAtZWMzMy00NTUxLTkx
OTctZDA2NzQ2ZDM5OWQwL2UwNGQ4MTkwLWVjMzMtNDU1MS05MTk3LWQwNjc0NmQz
OTlkMC5jcmwwHwYDVR0jBBgwFoAUAqiuDisRyRiLX4iDa2scgwg7eOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRkODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3
NDZkMzk5ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa7KQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRn75uzOFooAXLkeWfc464bzv8F+DoNAAtfduCH2DybhAPj7iY1qCo7
nOZ/JenWlkC+84hREFfco6KmZm7Q9LL8LcYoaKIKkduzEato7KZ9PgbVFL8eyxx7
9lcD2e6rsqFgUzK9BjKdyAWgmpj9tcJOL3t9VlRVKdl5RNQlbdQMqRHECpZxLL9A
RHA0z9coeZ5c0N7GEJ7YOKw7nlDsw0NlhlyctsEJv8NFjx8M0Euw/o7hEJfGF7I2
TTRG+cJgvn83JZCTc8+ZhmneCEExlmVz1byIEcdZuJTHNkQUBkTDWYdLVClxzigH
MoGTbUGw8R0Vf0thG9b99HPguxXJ74k=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:12:03 2025 by rpki-client