Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa
File:                     6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa (raw, json)
Hash identifier:          9dcEjIX9zgYp7qA5eb6sF0SRbhYU+Ir5kqdOM/r18ME=
Subject key identifier:   04:27:73:47:07:E2:0D:5F:A4:F9:9C:31:C1:0C:B5:B3:40:8A:45:CA
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490CB16A2527EC994443414C80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     208136
IP address blocks:        131.153.137.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6a:25:27:ec:99:44:43:41:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=09e8bb94-7fbf-4fd6-855e-52885b6dc1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:16:d0:b0:c3:90:43:70:ee:e5:bc:9e:95:
                    7d:f7:27:38:53:e1:48:fd:51:73:68:07:80:7b:be:
                    f9:57:1c:c1:ec:22:8d:3b:ad:a0:ae:22:51:5a:38:
                    21:2a:13:d1:35:9c:19:5f:a5:a8:13:38:14:48:f1:
                    c4:77:64:9f:66:4c:7c:bf:8e:48:5a:80:ba:8e:b4:
                    8b:fc:52:0e:d6:29:8c:e8:5b:46:04:37:7b:d5:c0:
                    11:0a:55:7e:60:da:e8:79:2a:6e:12:a4:73:ee:37:
                    e2:07:66:8b:f8:0e:1d:42:6d:a6:13:19:06:90:ca:
                    9f:9c:61:32:4b:25:f6:66:8a:34:6f:70:19:49:57:
                    1b:73:31:40:55:8b:2b:98:e3:a0:2d:52:a2:8a:d9:
                    27:14:76:d8:0c:af:b0:2a:cc:de:d2:e5:0d:e2:d5:
                    f5:6c:e9:81:64:4b:0d:39:bf:96:8b:7e:59:ea:c3:
                    e8:cd:b4:59:d3:f0:fb:0e:57:e8:df:de:49:d7:f1:
                    73:dc:40:75:3d:6d:e9:8b:c7:ef:be:86:c9:49:51:
                    5f:5e:41:e9:ad:ff:69:13:45:2e:b6:72:32:b4:0e:
                    8a:a0:bf:c8:aa:00:e2:15:39:84:d4:72:93:41:28:
                    de:0c:b3:a9:36:fc:0e:87:d3:eb:19:32:65:43:e3:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:27:73:47:07:E2:0D:5F:A4:F9:9C:31:C1:0C:B5:B3:40:8A:45:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:45:71:94:cc:f8:e2:a1:e1:4a:fb:5a:48:6c:3d:4a:e8:a6:
         e7:e2:9b:e8:cd:f1:42:9e:32:fe:5b:0e:b8:0d:62:a9:75:a2:
         55:ed:27:39:cc:1c:9d:9f:78:7e:6c:34:0d:62:d1:0c:ac:80:
         09:25:c7:01:67:df:6c:32:d2:c8:bb:dc:fc:57:22:73:6f:58:
         75:0e:b8:08:bd:5a:d4:90:af:4e:41:09:d1:6e:fa:10:82:6f:
         a6:05:1c:3e:c0:71:d5:12:35:9c:03:08:25:7d:49:6d:bf:4a:
         d3:03:f6:1c:f1:53:b2:8f:ff:ef:49:c7:f4:c0:ab:91:91:3c:
         28:77:7a:db:fb:00:0d:97:2e:eb:89:34:7a:4c:57:49:74:54:
         00:8f:12:f1:1e:5f:95:a4:26:f8:cf:a3:cc:ec:98:9b:c0:62:
         72:66:d1:9e:c6:cc:e5:5a:77:64:a0:a3:d3:ed:e0:4a:16:66:
         9b:6c:2f:00:9d:78:a1:ed:0a:c3:ca:35:05:d1:8d:84:17:e7:
         d1:de:08:13:9b:46:ed:7f:09:60:ec:b2:e2:f6:b2:cd:54:b4:
         97:8c:71:5b:3b:c8:82:b3:20:93:51:e0:51:62:29:b5:d2:85:
         d9:c6:fe:d1:ab:4b:be:01:a3:6c:fb:15:85:9e:86:54:b4:70:
         a1:b4:b3:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWolJ+yZRENBTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MDllOGJiOTQtN2ZiZi00ZmQ2LTg1NWUtNTI4ODViNmRjMWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso4W0LDDkENw7uW8npV99yc4U+FI/VFzaAeA
e775VxzB7CKNO62griJRWjghKhPRNZwZX6WoEzgUSPHEd2SfZkx8v45IWoC6jrSL
/FIO1imM6FtGBDd71cARClV+YNroeSpuEqRz7jfiB2aL+A4dQm2mExkGkMqfnGEy
SyX2Zoo0b3AZSVcbczFAVYsrmOOgLVKiitknFHbYDK+wKsze0uUN4tX1bOmBZEsN
Ob+Wi35Z6sPozbRZ0/D7Dlfo395J1/Fz3EB1PW3pi8fvvobJSVFfXkHprf9pE0Uu
tnIytA6KoL/IqgDiFTmE1HKTQSjeDLOpNvwOh9PrGTJlQ+PpdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQnc0cH4g1fpPmcMcEMtbNAikXKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNmM3YzI3ZjgtOTRmNC0z
ZTUwLThhMWEtNTM5ZjRmNTgzMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNFcZTM+OKh4Ur7WkhsPUropufim+jN8UKeMv5bDrgNYql1olXtJznM
HJ2feH5sNA1i0QysgAklxwFn32wy0si73PxXInNvWHUOuAi9WtSQr05BCdFu+hCC
b6YFHD7AcdUSNZwDCCV9SW2/StMD9hzxU7KP/+9Jx/TAq5GRPCh3etv7AA2XLuuJ
NHpMV0l0VACPEvEeX5WkJvjPo8zsmJvAYnJm0Z7GzOVad2Sgo9Pt4EoWZptsLwCd
eKHtCsPKNQXRjYQX59HeCBObRu1/CWDssuL2ss1UtJeMcVs7yIKzIJNR4FFiKbXS
hdnG/tGrS74Bo2z7FYWehlS0cKG0s8A=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:00 2025 by rpki-client