Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52b0b9d1-843a-3dad-98a9-4f1dc3134a1a.roa
File:                     52b0b9d1-843a-3dad-98a9-4f1dc3134a1a.roa (raw, json)
Hash identifier:          YHKaRGlBxbPklz3QUd/wgOZ9h/IPA4B/vz2975mWiOk=
Subject key identifier:   D8:8E:E0:4C:31:FF:E6:93:DC:3A:44:8F:E6:A1:46:23:60:F0:3D:0A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A9964F8774C7DE2546A60400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52b0b9d1-843a-3dad-98a9-4f1dc3134a1a.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397216
IP address blocks:        156.154.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:4f:87:74:c7:de:25:46:a6:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=f6aa6510-ac32-4977-8f9b-9d50edc5724e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:d5:c2:df:81:04:ce:16:b4:18:f8:e3:ab:
                    4e:45:f1:4e:68:25:0e:5f:56:d3:46:c8:39:0a:8b:
                    d3:4e:39:7c:d0:ae:a9:ca:dc:13:94:a2:f2:37:cd:
                    e3:39:64:f4:f5:17:df:e3:b3:85:8c:2f:e7:9a:62:
                    c8:c3:aa:d1:08:aa:6e:12:e8:b2:8f:89:82:ca:82:
                    e6:d9:27:35:b9:27:24:bd:0c:b0:06:36:1b:43:06:
                    65:a3:ff:2e:bd:7a:97:ea:25:62:de:a1:75:f8:e3:
                    7a:2d:4a:b2:2b:61:b0:6d:10:fd:04:fd:54:32:fe:
                    6a:e7:e2:23:60:34:b6:67:6a:ad:a0:80:25:79:36:
                    f4:0b:6b:1c:a9:9f:36:0b:08:ec:e2:98:b9:d7:dd:
                    24:18:49:4d:c8:25:6b:43:92:1c:7b:1f:bb:ee:62:
                    37:06:2c:df:f5:0c:e2:68:eb:fb:7a:2e:41:2e:00:
                    d6:45:3c:2e:64:97:1d:0d:f5:da:44:08:1c:af:7c:
                    0b:b7:40:77:40:72:4c:4b:e8:9b:4a:70:85:d7:66:
                    26:a9:23:e0:66:f2:1f:1c:de:24:2a:91:67:5f:c2:
                    3f:8f:c3:ae:c6:30:9c:ba:55:b1:f8:47:df:de:09:
                    f8:01:58:76:8b:cc:55:10:bf:e5:e1:90:8a:f6:8b:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8E:E0:4C:31:FF:E6:93:DC:3A:44:8F:E6:A1:46:23:60:F0:3D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52b0b9d1-843a-3dad-98a9-4f1dc3134a1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:09:d3:be:0a:fd:07:8a:3e:de:65:c4:33:88:3f:8f:2f:1e:
         9d:b6:99:ad:d7:95:b2:49:a2:ca:6f:d3:75:23:e6:1b:7e:e5:
         1e:18:28:8d:1c:36:f4:80:b2:f2:f5:67:1b:01:e8:c1:36:07:
         db:40:52:ff:41:21:7c:80:68:67:80:b8:ca:9b:db:9a:de:06:
         00:96:33:8c:1b:6a:b8:53:fb:f0:62:8b:ab:7e:d1:30:89:86:
         f0:06:52:9e:44:de:a4:93:0a:76:34:39:95:e0:85:84:8d:f2:
         ed:03:4d:14:37:13:08:77:4e:0b:5f:49:b8:3b:9a:03:e5:b0:
         ee:8a:80:48:a9:0d:bc:1d:17:3f:f2:4f:30:2d:46:ff:0e:05:
         30:b3:20:66:71:de:94:32:ca:ab:47:c2:fa:16:e2:e9:5d:6d:
         10:48:a2:a5:3f:6c:a4:bc:24:df:f8:1f:0b:eb:cd:44:2a:53:
         f6:11:cd:fe:b3:c7:30:8e:f4:b2:5f:bf:25:c9:c1:6e:02:eb:
         f7:c5:f9:ac:8e:ac:d9:1e:24:95:f1:6c:83:61:51:c8:2a:fd:
         ce:b7:29:d5:ff:96:02:31:02:e7:ae:fb:a0:68:86:b7:ce:fd:
         50:12:7d:a9:7c:d6:21:e4:c3:09:29:2f:1f:b9:ed:f3:4d:28:
         c0:4d:d7:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk+HdMfeJUamBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjZhYTY1MTAtYWMzMi00OTc3LThmOWItOWQ1MGVkYzU3MjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLjVwt+BBM4WtBj446tORfFOaCUOX1bTRsg5
CovTTjl80K6pytwTlKLyN83jOWT09Rff47OFjC/nmmLIw6rRCKpuEuiyj4mCyoLm
2Sc1uSckvQywBjYbQwZlo/8uvXqX6iVi3qF1+ON6LUqyK2GwbRD9BP1UMv5q5+Ij
YDS2Z2qtoIAleTb0C2scqZ82Cwjs4pi5190kGElNyCVrQ5Icex+77mI3Bizf9Qzi
aOv7ei5BLgDWRTwuZJcdDfXaRAgcr3wLt0B3QHJMS+ibSnCF12YmqSPgZvIfHN4k
KpFnX8I/j8OuxjCculWx+Eff3gn4AVh2i8xVEL/l4ZCK9ovpMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNiO4Ewx/+aT3DpEj+ahRiNg8D0KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTJiMGI5ZDEtODQzYS0z
ZGFkLTk4YTktNGYxZGMzMTM0YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQJ074K/QeKPt5lxDOIP48vHp22ma3XlbJJospv03Uj5ht+5R4YKI0c
NvSAsvL1ZxsB6ME2B9tAUv9BIXyAaGeAuMqb25reBgCWM4wbarhT+/Bii6t+0TCJ
hvAGUp5E3qSTCnY0OZXghYSN8u0DTRQ3Ewh3TgtfSbg7mgPlsO6KgEipDbwdFz/y
TzAtRv8OBTCzIGZx3pQyyqtHwvoW4uldbRBIoqU/bKS8JN/4HwvrzUQqU/YRzf6z
xzCO9LJfvyXJwW4C6/fF+ayOrNkeJJXxbINhUcgq/c63KdX/lgIxAueu+6BohrfO
/VASfal81iHkwwkpLx+57fNNKMBN188=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:45:01 2025 by rpki-client