Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/788f44e3-fc62-30cd-a877-a209999913e6.roa
File:                     788f44e3-fc62-30cd-a877-a209999913e6.roa (raw, json)
Hash identifier:          Z2rGsNDMPn7vxvF5UVtFQiCNStScMiNj9OnBigl5vfU=
Subject key identifier:   E4:9F:1A:EB:87:EC:B4:C6:0D:07:EA:D3:96:91:2B:1D:3D:5A:7B:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57CF6796DFBD0660BBC3280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/788f44e3-fc62-30cd-a877-a209999913e6.roa
Signing time:             Tue 04 Feb 2025 13:52:55 +0000
ROA not before:           Tue 04 Feb 2025 13:52:55 +0000
ROA not after:            Mon 05 May 2025 12:52:55 +0000
asID:                     30036
IP address blocks:        173.22.40.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7c:f6:79:6d:fb:d0:66:0b:bc:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:52:55 2025 GMT
            Not After : May  5 12:52:55 2025 GMT
        Subject: CN=d8f699b6-1a5a-4ab3-9b5f-4679df09a06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:53:93:b3:15:f1:d0:0b:cc:79:a1:81:38:
                    73:96:cd:7d:17:75:4e:48:83:27:5f:ac:b5:16:e5:
                    c8:cb:a3:e6:b5:1c:46:da:9c:34:ec:72:43:69:e7:
                    8a:de:11:77:f8:7f:3a:15:7e:44:d3:c1:88:bf:f8:
                    c0:8b:58:2d:82:c5:fb:9b:62:a0:97:ea:63:9a:70:
                    f4:3e:1b:74:e5:54:26:c6:c0:de:94:3a:62:54:ca:
                    bc:54:54:b7:00:cd:67:b0:05:6d:a5:9e:84:5e:89:
                    0d:4b:70:51:97:c2:64:27:b8:25:a7:07:f3:15:4e:
                    a9:a7:27:04:d8:6c:39:e0:39:02:bd:be:16:77:3e:
                    31:43:3f:c3:df:ab:6e:71:99:9c:4a:39:26:92:15:
                    f8:e1:2f:e1:ca:d0:6b:a5:30:3a:e3:1a:5d:3b:fc:
                    aa:46:88:62:3e:5d:b4:7a:a7:84:89:3f:4d:8c:55:
                    7a:51:3d:88:18:79:c0:d5:27:3e:a3:f1:b1:e2:1a:
                    49:5f:ab:4a:91:14:7f:7f:08:62:17:d3:93:ef:d0:
                    6e:18:18:e5:f6:83:53:5f:c6:77:71:1e:e1:65:ec:
                    08:58:a8:09:66:5b:15:44:60:bd:28:24:75:80:ed:
                    a1:5a:47:36:d8:40:73:a6:2d:b9:25:ef:18:2c:0d:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9F:1A:EB:87:EC:B4:C6:0D:07:EA:D3:96:91:2B:1D:3D:5A:7B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/788f44e3-fc62-30cd-a877-a209999913e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e8:93:c1:82:76:a5:2e:fd:2f:4e:94:18:3d:ba:47:be:0f:
         43:1b:df:24:ae:b7:f0:d2:43:e1:d2:ce:17:ac:cc:d6:c7:7f:
         58:78:ac:12:09:35:e6:06:e8:ab:42:2a:55:35:c7:10:61:9f:
         e0:9e:77:ac:07:bc:bd:f7:6d:b4:41:fd:9b:3d:1d:3c:79:bd:
         10:6b:92:ee:dc:ed:de:1a:80:04:e0:09:27:0f:14:55:46:a1:
         06:fb:cd:29:7f:29:43:a3:3e:54:42:05:12:6e:4e:b3:82:0a:
         82:4d:76:5e:10:0d:eb:42:1d:20:31:63:59:e0:af:b6:cc:76:
         80:57:35:e2:19:24:2c:61:2e:e4:70:5a:63:4f:64:28:bd:20:
         46:f6:5b:6e:41:46:41:f8:a4:87:7f:dc:50:f9:eb:71:21:fc:
         08:8d:5d:38:ae:26:54:00:e0:74:26:af:45:66:5e:0a:50:d2:
         e6:79:12:76:71:e9:e7:0c:a7:99:06:06:62:14:d6:51:89:b7:
         e2:24:ec:3e:c7:45:ef:91:3b:61:11:22:00:01:37:5c:3a:f2:
         62:34:4b:0b:9e:98:05:46:05:59:0a:e2:3c:6e:51:7b:ad:a6:
         95:06:7a:42:9b:f2:2e:76:a6:08:b4:ab:8a:5b:a8:0c:82:23:
         b1:ab:9a:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfPZ5bfvQZgu8MoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNTI1NVoXDTI1MDUwNTEyNTI1NVowLzEtMCsGA1UEAxMk
ZDhmNjk5YjYtMWE1YS00YWIzLTliNWYtNDY3OWRmMDlhMDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4clTk7MV8dALzHmhgThzls19F3VOSIMnX6y1
FuXIy6PmtRxG2pw07HJDaeeK3hF3+H86FX5E08GIv/jAi1gtgsX7m2Kgl+pjmnD0
Pht05VQmxsDelDpiVMq8VFS3AM1nsAVtpZ6EXokNS3BRl8JkJ7glpwfzFU6ppycE
2Gw54DkCvb4Wdz4xQz/D36tucZmcSjkmkhX44S/hytBrpTA64xpdO/yqRohiPl20
eqeEiT9NjFV6UT2IGHnA1Sc+o/Gx4hpJX6tKkRR/fwhiF9OT79BuGBjl9oNTX8Z3
cR7hZewIWKgJZlsVRGC9KCR1gO2hWkc22EBzpi25Je8YLA25kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSfGuuH7LTGDQfq05aRKx09WntEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzg4ZjQ0ZTMtZmM2Mi0z
MGNkLWE4NzctYTIwOTk5OTkxM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvok8GCdqUu/S9OlBg9uke+D0Mb3ySut/DSQ+HSzheszNbHf1h4rBIJ
NeYG6KtCKlU1xxBhn+Ced6wHvL33bbRB/Zs9HTx5vRBrku7c7d4agATgCScPFFVG
oQb7zSl/KUOjPlRCBRJuTrOCCoJNdl4QDetCHSAxY1ngr7bMdoBXNeIZJCxhLuRw
WmNPZCi9IEb2W25BRkH4pId/3FD563Eh/AiNXTiuJlQA4HQmr0VmXgpQ0uZ5EnZx
6ecMp5kGBmIU1lGJt+Ik7D7HRe+RO2ERIgABN1w68mI0SwuemAVGBVkK4jxuUXut
ppUGekKb8i52pgi0q4pbqAyCI7GrmpE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:10 2025 by rpki-client