Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/83e91d43-1fe3-3e44-a37f-3d4236c177b0.roa
File:                     83e91d43-1fe3-3e44-a37f-3d4236c177b0.roa (raw, json)
Hash identifier:          nVNjVo70MW1r14ZyWPPGXF/j8qGFIC7vnzgpRUKMPYA=
Subject key identifier:   0B:4D:68:98:73:B4:BD:30:F7:E3:4E:6E:8E:A5:1B:3C:76:09:5B:42
Certificate issuer:       /CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d
Certificate serial:       010D0C9F43285848E86663305AD1C5F61888DA00
Authority key identifier: 26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/83e91d43-1fe3-3e44-a37f-3d4236c177b0.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     133073
IP address blocks:        23.154.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:63:30:5a:d1:c5:f6:18:88:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=274e6eb6-0c97-4bd3-b550-4bc859482fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:02:ff:5b:5a:8e:c1:7f:79:00:4f:55:77:
                    7f:99:a7:3e:ba:55:9f:61:07:19:73:09:39:32:c8:
                    f4:ba:93:ef:17:e8:14:c3:ad:51:c8:02:db:14:10:
                    a2:5e:1c:bf:3c:d7:e2:86:2c:e7:08:7f:d3:a2:4a:
                    7c:b3:a0:ff:b3:b2:4e:67:f4:5f:66:0a:f8:86:36:
                    90:e7:1b:3c:be:87:bb:f1:21:e1:e3:b7:4b:94:6a:
                    e7:17:d9:ad:48:37:a9:bb:e8:31:82:fa:92:a0:5a:
                    0e:ef:c5:32:4a:70:0e:ab:dd:2a:a0:a9:cc:b3:0b:
                    22:1d:70:e9:8b:3f:f4:c9:24:45:df:65:c3:3b:c3:
                    75:fb:45:f1:ce:2e:11:e9:d1:93:96:e1:91:58:d9:
                    ed:a5:6b:cb:a3:da:c5:63:44:2c:f6:3e:a9:7c:fa:
                    50:0d:1e:52:13:d8:a4:16:51:de:c8:6a:27:2b:99:
                    0b:d3:6a:a3:55:b1:68:43:9b:db:e6:19:5a:fe:3a:
                    84:2b:5d:c2:77:27:c2:1e:11:a4:6d:c0:36:93:6b:
                    a2:e5:55:02:81:32:4f:76:ca:a2:e0:4c:16:df:68:
                    d0:d6:5f:57:dd:76:65:c9:28:cb:bf:23:e0:7e:b4:
                    8b:0f:36:cd:24:c8:c2:45:54:c8:e5:35:12:e5:2e:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:68:98:73:B4:BD:30:F7:E3:4E:6E:8E:A5:1B:3C:76:09:5B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/83e91d43-1fe3-3e44-a37f-3d4236c177b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl

            X509v3 Authority Key Identifier:
                keyid:26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0a:f4:f5:32:5a:cd:37:22:66:48:07:1e:4c:63:1f:84:35:
         af:88:c9:b6:b3:68:b3:39:09:8f:bb:dd:91:06:b1:0c:09:0f:
         33:cf:3f:5c:10:8e:0b:0e:a8:0c:f5:df:d7:ca:6a:39:56:a9:
         48:97:96:17:4b:12:0a:37:93:14:97:a2:44:3e:98:78:d0:6b:
         f2:25:d6:90:2b:55:44:77:55:a4:f6:bc:27:94:98:56:20:77:
         3b:ff:0b:33:eb:0d:90:28:ab:0b:55:f7:82:81:47:ee:28:fd:
         63:58:69:08:8a:a2:da:5b:13:69:94:d1:18:e6:a3:26:e7:46:
         d8:3f:82:df:54:bc:34:63:57:bb:c6:78:e1:2d:1b:48:8f:76:
         85:8e:2a:4b:c3:78:e8:31:4f:7f:b4:fb:7c:cc:8a:d6:53:ca:
         c8:a5:64:1c:6e:0f:98:61:53:97:1a:fb:d1:c5:b8:ca:2d:02:
         72:ed:ae:9c:b4:59:43:d2:d7:15:20:44:c1:3c:e7:82:8d:5d:
         a5:c4:dd:6e:c4:ac:5c:0f:95:f2:13:91:47:b2:1c:83:86:2b:
         86:fc:ef:69:f0:fa:36:95:3e:81:fc:ef:ad:a9:b9:43:f3:98:
         63:e6:55:e0:5f:d1:b3:b1:7c:bd:e7:f8:5f:cb:76:bb:88:d5:
         3f:ab:8d:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmMwWtHF9hiI2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhkZTg5YWItY2E4Yy00ZWE1LWI4YjktYjc5MzEzZjBk
NDhkMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk
Mjc0ZTZlYjYtMGM5Ny00YmQzLWI1NTAtNGJjODU5NDgyZmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7EC/1tajsF/eQBPVXd/mac+ulWfYQcZcwk5
Msj0upPvF+gUw61RyALbFBCiXhy/PNfihiznCH/Tokp8s6D/s7JOZ/RfZgr4hjaQ
5xs8voe78SHh47dLlGrnF9mtSDepu+gxgvqSoFoO78UySnAOq90qoKnMswsiHXDp
iz/0ySRF32XDO8N1+0Xxzi4R6dGTluGRWNntpWvLo9rFY0Qs9j6pfPpQDR5SE9ik
FlHeyGonK5kL02qjVbFoQ5vb5hla/jqEK13CdyfCHhGkbcA2k2ui5VUCgTJPdsqi
4EwW32jQ1l9X3XZlySjLvyPgfrSLDzbNJMjCRVTI5TUS5S6LzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtNaJhztL0w9+NObo6lGzx2CVtCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRl
ODlhYi1jYThjLTRlYTUtYjhiOS1iNzkzMTNmMGQ0OGQvODNlOTFkNDMtMWZlMy0z
ZTQ0LWEzN2YtM2Q0MjM2YzE3N2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjhkZTg5YWItY2E4Yy00ZWE1LWI4
YjktYjc5MzEzZjBkNDhkL2Y4ZGU4OWFiLWNhOGMtNGVhNS1iOGI5LWI3OTMxM2Yw
ZDQ4ZC5jcmwwHwYDVR0jBBgwFoAUJpZFpHlshpE8Cz01ojuiNX+BGMEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRlODlhYi1jYThjLTRlYTUtYjhiOS1iNzkz
MTNmMGQ0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQK9PUyWs03ImZIBx5MYx+ENa+IybazaLM5CY+73ZEGsQwJDzPPP1wQ
jgsOqAz139fKajlWqUiXlhdLEgo3kxSXokQ+mHjQa/Il1pArVUR3VaT2vCeUmFYg
dzv/CzPrDZAoqwtV94KBR+4o/WNYaQiKotpbE2mU0RjmoybnRtg/gt9UvDRjV7vG
eOEtG0iPdoWOKkvDeOgxT3+0+3zMitZTysilZBxuD5hhU5ca+9HFuMotAnLtrpy0
WUPS1xUgRME854KNXaXE3W7ErFwPlfITkUeyHIOGK4b872nw+jaVPoH8762puUPz
mGPmVeBf0bOxfL3n+F/LdruI1T+rjWg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:19 2025 by rpki-client