Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95f0d491-94c3-3b69-9b86-0f2541b69dcc.roa
File:                     95f0d491-94c3-3b69-9b86-0f2541b69dcc.roa (raw, json)
Hash identifier:          T3usu2s4lqDAD4Dj1KkQM9ivJWKBmtT6GTewbwNrGZ8=
Subject key identifier:   1E:18:CC:E3:49:4D:F6:31:00:20:35:4C:F0:3E:A4:73:B8:4E:2E:5F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD20FE86AF54EB72FFE53A40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95f0d491-94c3-3b69-9b86-0f2541b69dcc.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397227
IP address blocks:        156.154.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:20:fe:86:af:54:eb:72:ff:e5:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=3372add3-c4ee-4cdf-a69d-3ee96bfd9250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:f9:93:74:7e:50:cc:e7:4d:08:76:a8:c8:
                    be:90:8b:43:99:30:85:d0:d1:10:66:5e:a2:ea:dd:
                    4c:be:56:90:88:12:25:d6:56:54:3a:41:03:7a:3e:
                    fb:70:2a:b3:cb:b1:21:d1:e1:8a:d6:3c:f3:7b:d4:
                    bd:d3:ed:15:8d:35:30:bd:44:e3:f8:f1:38:1f:48:
                    51:64:85:c3:93:79:51:35:d4:b5:50:18:1c:51:d8:
                    cb:a1:87:c4:11:ce:9d:10:4b:a1:c9:7d:21:9e:3e:
                    e0:3c:95:4c:77:c2:85:2d:cb:89:c4:d7:e4:73:96:
                    8b:f3:bd:23:b8:90:2b:9f:06:a1:f6:bd:3e:c1:41:
                    ab:1f:e4:7b:ee:d6:9e:48:de:4c:fc:fc:28:2b:a4:
                    f2:92:06:92:a2:24:d9:6f:7d:21:46:f2:4a:ef:29:
                    7c:74:48:58:7d:4b:0b:b1:eb:10:61:55:2c:c3:1f:
                    0f:b6:8a:30:12:79:a0:e7:1a:21:00:d5:df:0b:ee:
                    64:b9:3e:1c:60:79:1e:3c:8a:f5:5e:2a:f2:7e:12:
                    7b:8f:39:d7:a2:5f:82:86:ea:c5:56:5b:89:34:a6:
                    3d:ed:f5:b7:69:ba:88:02:d2:3a:5a:83:be:33:6c:
                    42:d7:9f:b5:45:41:50:ef:ae:99:3a:5a:77:e8:98:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:18:CC:E3:49:4D:F6:31:00:20:35:4C:F0:3E:A4:73:B8:4E:2E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95f0d491-94c3-3b69-9b86-0f2541b69dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:59:12:57:1b:d5:0c:35:2f:59:c4:be:89:54:5d:c7:27:
         2a:42:a3:3b:d7:8a:5b:15:15:76:2f:d0:a7:d5:c5:b8:fd:db:
         fe:36:a3:3b:1c:06:d0:eb:17:e1:ac:9c:17:1e:e6:a6:40:d3:
         de:7b:de:68:39:e1:01:49:0b:d8:66:98:10:e5:1a:c1:d2:89:
         4f:cb:7e:aa:ba:5a:31:a8:62:ed:3e:fb:30:a3:49:1f:80:37:
         e7:1c:09:57:91:d5:c3:ba:b0:94:4a:62:de:6d:99:3f:36:ec:
         10:d4:b8:75:c9:60:be:e8:01:4f:67:ac:27:20:82:35:57:c9:
         48:eb:0e:41:aa:d2:17:3d:15:c8:21:92:e6:9e:8c:44:12:67:
         47:76:2e:d2:e7:70:7c:94:99:75:28:a2:31:ed:0e:c4:41:81:
         65:57:4d:7f:d8:78:29:8d:10:6b:1a:39:07:9c:03:73:e9:0b:
         d4:3a:f2:72:07:83:94:74:22:24:7a:4e:fb:71:0b:44:aa:69:
         bb:3e:1d:09:11:d4:cc:2e:3a:62:69:db:a8:0e:a9:63:0c:ea:
         3d:55:b2:69:ca:d4:87:af:06:f8:10:bb:74:de:38:bb:14:47:
         9d:e1:86:05:04:8c:6a:3d:67:0e:53:cd:68:3d:90:3c:81:01:
         0e:4b:21:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IP6Gr1Trcv/lOkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
MzM3MmFkZDMtYzRlZS00Y2RmLWE2OWQtM2VlOTZiZmQ5MjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4v5k3R+UMznTQh2qMi+kItDmTCF0NEQZl6i
6t1MvlaQiBIl1lZUOkEDej77cCqzy7Eh0eGK1jzze9S90+0VjTUwvUTj+PE4H0hR
ZIXDk3lRNdS1UBgcUdjLoYfEEc6dEEuhyX0hnj7gPJVMd8KFLcuJxNfkc5aL870j
uJArnwah9r0+wUGrH+R77taeSN5M/PwoK6TykgaSoiTZb30hRvJK7yl8dEhYfUsL
sesQYVUswx8PtoowEnmg5xohANXfC+5kuT4cYHkePIr1XiryfhJ7jznXol+ChurF
VluJNKY97fW3abqIAtI6WoO+M2xC15+1RUFQ766ZOlp36Jjf0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4YzONJTfYxACA1TPA+pHO4Ti5fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTVmMGQ0OTEtOTRjMy0z
YjY5LTliODYtMGYyNTQxYjY5ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACD0WRJXG9UMNS9ZxL6JVF3HJypCozvXilsVFXYv0KfVxbj92/42ozsc
BtDrF+GsnBce5qZA09573mg54QFJC9hmmBDlGsHSiU/Lfqq6WjGoYu0++zCjSR+A
N+ccCVeR1cO6sJRKYt5tmT827BDUuHXJYL7oAU9nrCcggjVXyUjrDkGq0hc9Fcgh
kuaejEQSZ0d2LtLncHyUmXUoojHtDsRBgWVXTX/YeCmNEGsaOQecA3PpC9Q68nIH
g5R0IiR6TvtxC0Sqabs+HQkR1MwuOmJp26gOqWMM6j1VsmnK1IevBvgQu3TeOLsU
R53hhgUEjGo9Zw5TzWg9kDyBAQ5LIVA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:39 2025 by rpki-client