Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7340892-8be3-3db7-989f-dea7bafa04bc.roa
File:                     b7340892-8be3-3db7-989f-dea7bafa04bc.roa (raw, json)
Hash identifier:          lmoS4qlO9WfZ+5od3/xLVv/nu+EuOrvAx+fu2yUuYSk=
Subject key identifier:   07:DC:53:95:63:74:C6:A7:7A:19:BF:E7:0A:EE:76:96:C9:19:F6:94
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858487CEB5CBF1A37390C59C57100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7340892-8be3-3db7-989f-dea7bafa04bc.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     397232
IP address blocks:        156.154.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:5c:bf:1a:37:39:0c:59:c5:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=6f84fd4a-8230-459c-87af-d7b113c7ff66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:ee:a2:ba:e5:c9:46:54:aa:f8:31:41:9c:
                    20:cd:b0:d9:50:25:a3:79:ce:4f:36:f8:dc:da:55:
                    f9:11:e5:e5:b0:36:fb:5e:75:cc:b7:d8:f4:b7:a5:
                    3b:35:2b:0d:36:d8:88:07:d4:db:b4:df:fe:43:0a:
                    eb:cc:0f:3a:c7:27:3f:2a:b1:d1:24:40:de:fe:d1:
                    b3:2e:bb:6c:c8:98:43:e4:ee:e5:18:14:df:43:31:
                    1f:df:cd:8a:1e:b5:d7:fb:9e:e2:ed:97:2b:2b:3c:
                    8b:ab:d5:f8:61:fc:13:ff:19:31:0f:1a:86:4f:57:
                    1e:77:25:bb:e4:15:34:0d:ba:9e:3c:8b:a9:22:88:
                    8d:a6:85:16:af:ed:c9:7e:b8:30:bd:5b:3e:8d:43:
                    66:bf:f3:06:34:7e:f2:37:27:7e:2e:1b:d9:bd:16:
                    91:e9:9d:90:38:9e:91:9e:c4:65:1e:a3:e5:ac:f1:
                    99:50:08:e8:a7:5f:96:1c:fe:f5:4b:5f:e2:f0:ac:
                    30:8e:32:65:ad:76:c8:37:50:22:b5:5a:fc:59:1f:
                    ac:fe:2e:7c:27:e1:5b:d2:be:eb:52:06:de:5d:86:
                    c5:55:8f:b2:e5:16:f3:53:e0:ea:c2:f4:25:d4:79:
                    b0:9c:9a:2f:fe:6a:89:a9:25:33:22:5a:28:67:4d:
                    6f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DC:53:95:63:74:C6:A7:7A:19:BF:E7:0A:EE:76:96:C9:19:F6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7340892-8be3-3db7-989f-dea7bafa04bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:3a:b7:bb:76:83:69:20:f5:34:15:bf:9d:58:97:5f:ea:
         b9:33:9d:58:38:89:69:93:3b:14:69:bb:62:3d:fd:e4:07:82:
         f9:00:7b:c5:38:86:e4:e9:38:50:cc:c6:b4:b0:ab:40:34:01:
         c4:eb:07:92:5e:24:68:b5:78:ff:38:79:b4:29:31:4a:59:e9:
         d4:de:2d:34:8e:19:94:d6:77:83:24:ff:19:0d:5e:69:ed:a4:
         18:1b:c3:01:16:c1:bb:fd:85:23:4f:67:cf:5c:ca:e6:ce:b4:
         45:98:13:bf:d6:18:a3:87:55:f3:9f:cd:b8:c7:99:c1:13:b3:
         a0:7e:a5:76:f2:9e:7f:ad:d5:e8:83:7b:c4:d8:da:22:52:0f:
         71:c8:17:51:1f:f8:7a:b7:22:89:c7:9b:5c:94:99:bf:86:41:
         af:64:b9:4d:d6:db:ec:20:a3:37:49:d2:3a:b5:54:12:e0:a8:
         92:c6:e8:d8:8c:1a:d1:77:dc:64:db:a1:a5:47:aa:62:0e:0a:
         33:0b:f4:44:dc:30:98:09:53:64:43:58:bf:f9:5a:be:d2:fe:
         ee:9d:e8:24:49:c2:7c:70:51:0d:ca:79:f0:d5:55:49:72:eb:
         9a:b2:95:e6:cb:08:77:5d:45:f7:e1:18:ca:4e:ad:f5:b8:b1:
         13:f8:66:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh861y/Gjc5DFnFcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NmY4NGZkNGEtODIzMC00NTljLTg3YWYtZDdiMTEzYzdmZjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqHuorrlyUZUqvgxQZwgzbDZUCWjec5PNvjc
2lX5EeXlsDb7XnXMt9j0t6U7NSsNNtiIB9TbtN/+QwrrzA86xyc/KrHRJEDe/tGz
LrtsyJhD5O7lGBTfQzEf382KHrXX+57i7ZcrKzyLq9X4YfwT/xkxDxqGT1cedyW7
5BU0DbqePIupIoiNpoUWr+3JfrgwvVs+jUNmv/MGNH7yNyd+LhvZvRaR6Z2QOJ6R
nsRlHqPlrPGZUAjop1+WHP71S1/i8KwwjjJlrXbIN1AitVr8WR+s/i58J+Fb0r7r
UgbeXYbFVY+y5RbzU+DqwvQl1HmwnJov/mqJqSUzIlooZ01vpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAfcU5VjdManehm/5wrudpbJGfaUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjczNDA4OTItOGJlMy0z
ZGI3LTk4OWYtZGVhN2JhZmEwNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3COre7doNpIPU0Fb+dWJdf6rkznVg4iWmTOxRpu2I9/eQHgvkAe8U4
huTpOFDMxrSwq0A0AcTrB5JeJGi1eP84ebQpMUpZ6dTeLTSOGZTWd4Mk/xkNXmnt
pBgbwwEWwbv9hSNPZ89cyubOtEWYE7/WGKOHVfOfzbjHmcETs6B+pXbynn+t1eiD
e8TY2iJSD3HIF1Ef+Hq3IonHm1yUmb+GQa9kuU3W2+wgozdJ0jq1VBLgqJLG6NiM
GtF33GTboaVHqmIOCjML9ETcMJgJU2RDWL/5Wr7S/u6d6CRJwnxwUQ3KefDVVUly
65qylebLCHddRffhGMpOrfW4sRP4Zqs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:15:17 2025 by rpki-client