Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f59c31e-6a60-341c-8350-e447ea8658bf.roa
File:                     9f59c31e-6a60-341c-8350-e447ea8658bf.roa (raw, json)
Hash identifier:          pn2Bfz87VXF4fxiFfyg5NUS4+1ReSCWgVod+O5EZMLk=
Subject key identifier:   7E:DF:6A:CF:B9:EE:F7:D3:A2:7B:93:30:2A:F3:A4:94:C1:CE:9C:C5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C2619C2CF6BD940557A61200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f59c31e-6a60-341c-8350-e447ea8658bf.roa
Signing time:             Mon 03 Feb 2025 11:10:23 +0000
ROA not before:           Mon 03 Feb 2025 11:10:23 +0000
ROA not after:            Sun 04 May 2025 10:10:23 +0000
asID:                     30036
IP address blocks:        173.17.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:61:9c:2c:f6:bd:94:05:57:a6:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:10:23 2025 GMT
            Not After : May  4 10:10:23 2025 GMT
        Subject: CN=018b146d-22fa-417f-be29-f99b5b95830e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:6f:5b:44:45:13:9c:96:a7:7c:0c:0a:83:
                    c6:1c:f7:88:cc:76:61:69:85:24:4d:3d:11:40:87:
                    58:25:56:c9:d9:a5:cc:43:c2:7f:dc:e2:f5:32:8b:
                    65:8b:f1:1c:8c:64:a0:01:de:b0:34:51:50:d2:24:
                    74:19:f7:73:04:f4:ac:d2:ba:ac:52:bd:2c:a7:d7:
                    70:54:2f:34:f3:0d:69:68:b8:c6:34:d2:35:c2:b3:
                    f8:fa:8a:76:23:d0:ec:7a:31:77:0a:bd:37:07:ea:
                    58:f4:b3:3a:88:6e:e3:fe:19:5e:f8:ac:8a:af:c6:
                    8b:13:04:9f:4a:df:94:33:6e:51:c7:15:74:0c:1c:
                    80:0d:f2:72:df:d9:e5:b9:6d:16:15:65:a2:53:b1:
                    79:46:00:ba:53:5f:64:62:71:a5:51:74:28:24:dc:
                    fc:2a:a9:8f:9d:ad:cf:ac:de:a1:85:af:74:18:1d:
                    d5:cf:a2:ff:b2:2d:15:73:c9:ea:6b:9e:73:db:8f:
                    2c:a2:67:44:89:63:36:07:ff:92:6e:43:da:ef:b9:
                    6e:ed:bd:86:8f:cd:ba:e1:40:2e:0b:5d:32:85:69:
                    fb:5e:72:60:f6:00:c5:2f:6c:c4:bd:c4:72:a3:f1:
                    a3:5d:69:a0:61:53:a1:52:64:8e:41:93:63:00:36:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:6A:CF:B9:EE:F7:D3:A2:7B:93:30:2A:F3:A4:94:C1:CE:9C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f59c31e-6a60-341c-8350-e447ea8658bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:e9:d6:86:2a:14:40:ca:5c:c2:cd:db:1d:ff:17:21:00:
         c7:79:76:d0:bb:94:40:53:0d:e8:44:2d:a7:81:d1:95:42:33:
         d8:da:27:2b:12:79:c3:bf:89:22:19:5d:73:68:55:21:4c:8c:
         55:88:44:02:a9:b3:65:99:d3:97:c0:32:bd:fe:a4:c5:fd:d8:
         00:d6:ea:65:46:f1:72:7d:55:e9:82:36:be:46:70:d5:e6:4d:
         78:09:c7:f1:bb:51:35:ce:94:6d:cc:70:fd:c2:59:26:1b:33:
         79:e5:1d:69:5b:ea:17:0b:df:b6:b3:ca:2c:08:5f:ad:31:3b:
         9a:08:22:73:c6:67:57:93:94:4c:b7:65:cd:93:bf:40:c3:20:
         ea:3c:38:3a:12:10:9b:76:e5:59:01:f3:8d:d5:ae:7d:0f:1a:
         32:03:a4:4e:84:44:33:df:ee:37:76:7a:59:75:78:7a:5e:6d:
         b0:7a:2e:1e:f5:8b:1b:1b:92:ce:95:fe:df:c5:63:36:31:32:
         0e:4b:3f:12:a9:a4:d3:b5:33:5a:fb:31:e8:d6:23:3e:e1:9e:
         b4:bd:98:f2:ed:08:f1:ec:b1:87:cf:02:30:f8:79:76:08:bd:
         fc:00:3d:61:97:fd:7d:bf:6c:fe:f6:71:95:c8:5d:8b:69:6a:
         de:29:20:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYZws9r2UBVemEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTAyM1oXDTI1MDUwNDEwMTAyM1owLzEtMCsGA1UEAxMk
MDE4YjE0NmQtMjJmYS00MTdmLWJlMjktZjk5YjViOTU4MzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz9vW0RFE5yWp3wMCoPGHPeIzHZhaYUkTT0R
QIdYJVbJ2aXMQ8J/3OL1Motli/EcjGSgAd6wNFFQ0iR0GfdzBPSs0rqsUr0sp9dw
VC808w1paLjGNNI1wrP4+op2I9DsejF3Cr03B+pY9LM6iG7j/hle+KyKr8aLEwSf
St+UM25RxxV0DByADfJy39nluW0WFWWiU7F5RgC6U19kYnGlUXQoJNz8KqmPna3P
rN6hha90GB3Vz6L/si0Vc8nqa55z248somdEiWM2B/+SbkPa77lu7b2Gj8264UAu
C10yhWn7XnJg9gDFL2zEvcRyo/GjXWmgYVOhUmSOQZNjADbIzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7fas+57vfTonuTMCrzpJTBzpzFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWY1OWMzMWUtNmE2MC0z
NDFjLTgzNTAtZTQ0N2VhODY1OGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrREeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1c6daGKhRAylzCzdsd/xchAMd5dtC7lEBTDehELaeB0ZVCM9jaJysS
ecO/iSIZXXNoVSFMjFWIRAKps2WZ05fAMr3+pMX92ADW6mVG8XJ9VemCNr5GcNXm
TXgJx/G7UTXOlG3McP3CWSYbM3nlHWlb6hcL37azyiwIX60xO5oIInPGZ1eTlEy3
Zc2Tv0DDIOo8ODoSEJt25VkB843Vrn0PGjIDpE6ERDPf7jd2ell1eHpebbB6Lh71
ixsbks6V/t/FYzYxMg5LPxKppNO1M1r7MejWIz7hnrS9mPLtCPHssYfPAjD4eXYI
vfwAPWGX/X2/bP72cZXIXYtpat4pIJo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:18 2025 by rpki-client