Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27524b53-b03b-3759-8c76-8aaeff053815.roa
File:                     27524b53-b03b-3759-8c76-8aaeff053815.roa (raw, json)
Hash identifier:          ccGMwz8q4lh92fG69l6rrRiLaPwHVlmBfnryVU1Ya08=
Subject key identifier:   85:24:AC:9C:8F:C3:97:48:F2:B6:03:56:20:11:B3:DE:15:3F:38:9E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C558D6D7FDCBD3A8F9550A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27524b53-b03b-3759-8c76-8aaeff053815.roa
Signing time:             Tue 04 Feb 2025 12:40:08 +0000
ROA not before:           Tue 04 Feb 2025 12:40:08 +0000
ROA not after:            Mon 05 May 2025 11:40:08 +0000
asID:                     30036
IP address blocks:        173.31.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:58:d6:d7:fd:cb:d3:a8:f9:55:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:40:08 2025 GMT
            Not After : May  5 11:40:08 2025 GMT
        Subject: CN=fa234ad4-e6ee-4d30-95d4-3884c50146f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:49:dc:66:67:9b:4d:ff:7d:93:73:6e:28:
                    2c:a7:c1:96:ee:40:63:38:bc:79:19:71:7f:b1:6b:
                    15:45:e2:71:4e:6e:a2:06:27:1a:72:8d:84:18:3b:
                    d5:3b:ea:91:21:fd:84:6b:be:fe:1e:50:3a:ae:39:
                    34:81:9b:99:82:b3:6b:27:72:fa:78:72:aa:8c:52:
                    18:a2:a5:83:bb:2b:a8:09:a6:19:89:e8:f9:97:bd:
                    e5:9d:0b:a9:96:25:ed:a2:5e:52:d0:b2:36:a4:aa:
                    eb:3f:f9:6e:15:5f:88:35:24:1b:92:3e:bc:9e:f5:
                    b4:af:39:c1:f2:11:4f:64:d5:6c:7a:df:e5:4d:d3:
                    d5:84:9f:d9:0d:3f:b6:fa:56:5b:2b:0f:11:ba:b6:
                    87:5c:b7:56:8a:39:d7:90:81:8b:50:f1:3a:db:97:
                    42:f1:aa:73:76:48:c4:3e:b8:9c:cb:07:4b:80:c8:
                    98:74:c4:80:bc:b7:6b:c0:7f:7b:c1:3b:7b:13:0a:
                    b3:61:0d:63:4f:f5:e4:fc:9e:e7:be:7d:d9:1f:74:
                    6f:9c:e5:d8:0d:f4:a8:a2:75:5e:67:3a:17:bc:55:
                    01:26:03:41:07:4c:52:6f:8f:4c:5c:f2:d1:a0:20:
                    3d:5b:c9:e5:57:a6:35:6e:33:8f:60:79:3e:83:2a:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:AC:9C:8F:C3:97:48:F2:B6:03:56:20:11:B3:DE:15:3F:38:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27524b53-b03b-3759-8c76-8aaeff053815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:77:53:57:23:73:9a:c2:6d:0e:0d:57:4c:73:f6:6a:5e:
         79:9e:05:a7:bb:64:34:7c:91:2f:90:d8:d3:38:29:94:ec:2f:
         aa:a2:db:e7:59:d2:e5:0a:5e:15:5a:4d:b3:ad:83:e5:80:e3:
         a6:cc:7e:ce:a2:33:c1:0f:ff:22:55:08:e4:c3:0a:88:b0:56:
         a5:9e:de:88:3b:d6:02:93:b2:5c:36:5b:f5:5d:59:31:13:33:
         e6:aa:fa:80:2a:c9:24:a8:69:50:95:3b:43:4d:00:e3:67:f6:
         a3:81:15:f7:3b:12:1f:a3:3b:83:04:1f:55:54:07:3e:a5:9c:
         f5:e7:9e:fb:f1:89:76:52:7e:e7:4e:a7:86:e5:82:b3:21:8b:
         6d:63:1b:41:f5:0f:6d:ae:28:87:58:b5:ee:a9:52:5c:77:dc:
         5d:3d:83:db:62:62:94:79:24:78:e9:42:77:90:45:dd:4c:3e:
         66:c1:29:45:75:a9:9e:76:0f:84:41:97:14:b3:d3:a0:54:08:
         a8:c0:96:37:00:36:3e:81:54:f3:e4:b7:da:1b:8d:52:d6:86:
         65:09:60:e8:5e:14:43:3c:9e:33:bb:39:47:0c:7c:c7:2d:dd:
         4e:a7:80:4f:43:68:99:69:b9:3b:f5:52:95:14:19:a2:55:f0:
         73:02:1b:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWNbX/cvTqPlVCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyNDAwOFoXDTI1MDUwNTExNDAwOFowLzEtMCsGA1UEAxMk
ZmEyMzRhZDQtZTZlZS00ZDMwLTk1ZDQtMzg4NGM1MDE0NmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVdJ3GZnm03/fZNzbigsp8GW7kBjOLx5GXF/
sWsVReJxTm6iBicaco2EGDvVO+qRIf2Ea77+HlA6rjk0gZuZgrNrJ3L6eHKqjFIY
oqWDuyuoCaYZiej5l73lnQupliXtol5S0LI2pKrrP/luFV+INSQbkj68nvW0rznB
8hFPZNVset/lTdPVhJ/ZDT+2+lZbKw8RuraHXLdWijnXkIGLUPE625dC8apzdkjE
PricywdLgMiYdMSAvLdrwH97wTt7EwqzYQ1jT/Xk/J7nvn3ZH3RvnOXYDfSoonVe
ZzoXvFUBJgNBB0xSb49MXPLRoCA9W8nlV6Y1bjOPYHk+gyoLCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIUkrJyPw5dI8rYDViARs94VPzieMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjc1MjRiNTMtYjAzYi0z
NzU5LThjNzYtOGFhZWZmMDUzODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR+pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHewd1NXI3Oawm0ODVdMc/ZqXnmeBae7ZDR8kS+Q2NM4KZTsL6qi2+dZ
0uUKXhVaTbOtg+WA46bMfs6iM8EP/yJVCOTDCoiwVqWe3og71gKTslw2W/VdWTET
M+aq+oAqySSoaVCVO0NNAONn9qOBFfc7Eh+jO4MEH1VUBz6lnPXnnvvxiXZSfudO
p4blgrMhi21jG0H1D22uKIdYte6pUlx33F09g9tiYpR5JHjpQneQRd1MPmbBKUV1
qZ52D4RBlxSz06BUCKjAljcANj6BVPPkt9objVLWhmUJYOheFEM8njO7OUcMfMct
3U6ngE9DaJlpuTv1UpUUGaJV8HMCG00=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:03:00 2025 by rpki-client