Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/50e93d38-1c64-3964-a560-e2c5f379c41d.roa
File:                     50e93d38-1c64-3964-a560-e2c5f379c41d.roa (raw, json)
Hash identifier:          61NfeT1i7cEqG26eT+jefF2R7DSY1tZ5I2p4/B08Yd4=
Subject key identifier:   20:8A:02:FC:59:FD:D4:6B:92:20:14:84:D6:17:AC:AF:9F:AE:D7:6C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246EE6641DFDAF3E1810C80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/50e93d38-1c64-3964-a560-e2c5f379c41d.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397234
IP address blocks:        156.154.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ee:66:41:df:da:f3:e1:81:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=e7e39309-1081-4e24-a53d-d9eec6f2cee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:35:a4:d1:5d:bd:4f:d9:0c:86:82:b8:ce:b5:
                    93:ff:2d:58:f6:ce:7f:e4:cf:8b:ef:db:b5:ca:ef:
                    1b:e7:e1:ef:66:84:02:a5:5e:82:c5:19:bb:a6:33:
                    fe:23:d9:be:27:8a:93:6b:66:cc:9f:5c:dd:d7:e3:
                    08:c0:56:6d:4a:4d:93:4e:e3:3c:c0:6c:4e:d5:07:
                    6e:12:eb:9e:a2:61:ac:a5:61:0f:8d:42:0f:7f:70:
                    a5:9f:59:14:1d:84:dc:4c:38:ea:5b:ce:14:68:a7:
                    24:19:07:a1:3e:07:61:88:ec:2e:bb:3a:2f:33:aa:
                    d4:be:71:b2:7a:fd:7e:8c:6a:65:64:96:1f:49:8f:
                    3f:34:da:36:82:3b:9e:13:5b:89:f3:1e:42:5a:a7:
                    a2:40:94:29:8e:56:b8:d8:d2:36:e8:d1:c6:f9:90:
                    71:61:ac:2e:1f:0f:a1:a3:5c:82:98:e5:3e:37:5c:
                    6e:43:1f:ba:04:8e:8a:8e:02:38:ab:db:dd:66:b6:
                    6f:5f:d1:b5:23:34:bd:34:ad:32:9f:e5:6d:5c:c7:
                    a3:70:00:35:c7:50:18:4d:fb:7f:ed:77:3f:ce:f8:
                    61:43:96:2f:b5:a6:11:22:83:27:2c:dc:13:24:c2:
                    d8:82:f7:51:26:60:5c:c3:5f:c3:29:a5:12:14:4e:
                    fd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8A:02:FC:59:FD:D4:6B:92:20:14:84:D6:17:AC:AF:9F:AE:D7:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/50e93d38-1c64-3964-a560-e2c5f379c41d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:54:26:f8:93:68:93:bf:16:74:ea:21:cf:54:cc:bd:4b:02:
         f5:8c:b0:75:b2:d3:ff:c2:26:d5:08:86:31:a5:2d:51:ff:29:
         47:f5:f7:80:49:81:1c:60:13:c0:5f:26:0d:79:79:6e:a0:4b:
         86:43:81:35:bf:d5:ae:1c:14:5d:1a:1d:3d:25:2b:98:74:4c:
         64:62:90:d8:c0:0c:ef:12:08:57:12:19:a8:89:22:62:01:c5:
         d0:30:a3:b5:22:3a:22:76:a7:dc:08:d8:5d:1b:cf:2b:87:6e:
         e0:e2:c0:79:76:0b:75:e0:78:98:bf:53:55:27:32:55:d7:53:
         d4:f9:bf:71:2a:aa:a5:92:e7:b3:c5:fb:7f:91:ff:4e:31:c1:
         49:31:4d:2d:8d:62:c4:a9:69:99:22:47:4a:d6:e6:44:68:b1:
         6f:4f:77:87:24:06:c6:9f:24:85:0c:8c:97:fd:ae:16:a1:0f:
         19:89:b2:63:e1:16:7f:57:00:2e:ed:3c:7f:56:f1:c5:c7:c2:
         ed:14:6a:50:e6:24:93:c0:9c:1c:ca:d4:90:34:84:39:89:38:
         88:71:43:98:95:11:77:fb:44:da:45:52:06:b9:e3:66:91:d2:
         da:20:47:a5:21:0d:f4:4f:ec:58:76:9e:97:69:77:c8:18:30:
         fb:94:7c:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRu5mQd/a8+GBDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
ZTdlMzkzMDktMTA4MS00ZTI0LWE1M2QtZDllZWM2ZjJjZWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDWk0V29T9kMhoK4zrWT/y1Y9s5/5M+L79u1
yu8b5+HvZoQCpV6CxRm7pjP+I9m+J4qTa2bMn1zd1+MIwFZtSk2TTuM8wGxO1Qdu
EuueomGspWEPjUIPf3Cln1kUHYTcTDjqW84UaKckGQehPgdhiOwuuzovM6rUvnGy
ev1+jGplZJYfSY8/NNo2gjueE1uJ8x5CWqeiQJQpjla42NI26NHG+ZBxYawuHw+h
o1yCmOU+N1xuQx+6BI6KjgI4q9vdZrZvX9G1IzS9NK0yn+VtXMejcAA1x1AYTft/
7Xc/zvhhQ5YvtaYRIoMnLNwTJMLYgvdRJmBcw1/DKaUSFE79lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCCKAvxZ/dRrkiAUhNYXrK+frtdsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTBlOTNkMzgtMWM2NC0z
OTY0LWE1NjAtZTJjNWYzNzljNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABpUJviTaJO/FnTqIc9UzL1LAvWMsHWy0//CJtUIhjGlLVH/KUf194BJ
gRxgE8BfJg15eW6gS4ZDgTW/1a4cFF0aHT0lK5h0TGRikNjADO8SCFcSGaiJImIB
xdAwo7UiOiJ2p9wI2F0bzyuHbuDiwHl2C3XgeJi/U1UnMlXXU9T5v3EqqqWS57PF
+3+R/04xwUkxTS2NYsSpaZkiR0rW5kRosW9Pd4ckBsafJIUMjJf9rhahDxmJsmPh
Fn9XAC7tPH9W8cXHwu0UalDmJJPAnBzK1JA0hDmJOIhxQ5iVEXf7RNpFUga542aR
0togR6UhDfRP7Fh2npdpd8gYMPuUfF4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:45 2025 by rpki-client