Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2e05eb2-29df-3e1a-ba6b-8ae5a41f268d.roa
File:                     a2e05eb2-29df-3e1a-ba6b-8ae5a41f268d.roa (raw, json)
Hash identifier:          pU1kh/Rjt+YvYADjN2ackO8RYT1zSJ/akYoSb1ZEA8k=
Subject key identifier:   6E:98:F8:50:D9:63:E1:E4:D6:B1:7A:FE:28:54:1D:B4:EC:04:D7:6A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C558B0DCDC1CCBA6F3B0890C
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2e05eb2-29df-3e1a-ba6b-8ae5a41f268d.roa
Signing time:             Tue 04 Feb 2025 12:39:50 +0000
ROA not before:           Tue 04 Feb 2025 12:39:50 +0000
ROA not after:            Mon 05 May 2025 11:39:50 +0000
asID:                     30036
IP address blocks:        173.24.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:58:b0:dc:dc:1c:cb:a6:f3:b0:89:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:39:50 2025 GMT
            Not After : May  5 11:39:50 2025 GMT
        Subject: CN=66e1c869-7ad7-4d23-b1df-0d88e95a08c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:d1:71:c8:58:50:c6:39:97:a0:3f:64:01:
                    a4:4c:38:53:81:b9:dd:19:cd:57:a0:bf:22:b8:db:
                    0e:62:74:0a:99:f1:7b:d8:19:33:5e:75:c2:13:db:
                    f0:ac:c2:3d:4a:84:3c:21:98:62:ad:ed:00:2f:25:
                    b6:67:98:70:95:d0:df:93:90:c2:a4:8a:77:b6:cf:
                    5e:70:70:b0:10:c2:2d:6c:cd:74:68:a2:35:74:b9:
                    22:3b:62:71:93:be:92:70:d0:2e:49:a9:7b:46:4f:
                    f5:b8:f7:26:f4:5c:0b:68:94:58:24:82:1b:09:f1:
                    6e:00:21:14:43:63:7d:61:1f:4a:e1:7d:a6:c0:e9:
                    57:f5:45:86:36:a7:29:d1:8c:4a:c9:0e:f4:d4:20:
                    c1:41:5a:8c:1d:f9:25:54:ad:d7:34:c2:86:4c:1e:
                    9c:c6:13:0e:b3:a5:6e:41:a6:15:09:8e:4f:50:3e:
                    ef:8c:27:84:c5:56:61:fa:2b:1b:ea:e3:2d:da:dc:
                    02:a7:36:32:f8:0b:b5:76:da:fd:e8:69:32:2d:e9:
                    5a:6a:e3:7d:24:3c:ce:40:26:5b:23:ba:0a:ea:6e:
                    ef:a5:a9:cf:5d:4d:56:16:24:23:d6:dc:b6:eb:7f:
                    87:74:2c:62:7c:75:7b:fc:7e:3d:38:36:a1:6d:e1:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:98:F8:50:D9:63:E1:E4:D6:B1:7A:FE:28:54:1D:B4:EC:04:D7:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2e05eb2-29df-3e1a-ba6b-8ae5a41f268d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:53:7b:4f:4f:99:ee:9d:6e:1f:c3:44:3b:9b:80:bd:b6:20:
         29:71:29:b1:22:36:ee:f2:38:e1:1c:a0:9c:f1:bf:a3:c0:5c:
         7c:9c:06:a2:c0:4f:98:6f:67:ac:b3:01:ba:39:1c:84:c7:5a:
         d2:ae:90:a3:71:fc:6a:6e:79:c6:a1:05:b7:30:fa:c1:66:c5:
         81:62:7d:79:9b:b0:83:bb:39:bf:11:e8:57:b6:4b:6a:18:56:
         7a:60:9f:a9:65:ad:83:75:7c:4f:64:52:5f:3c:17:f0:d3:57:
         2a:71:8a:ab:8a:61:c1:0f:ec:bc:c5:57:8f:b6:f0:ce:2b:7a:
         a8:6b:75:0d:55:ab:57:25:32:86:70:02:0c:1c:77:f2:89:f4:
         af:01:2d:12:e7:a6:52:3a:a8:c6:55:ab:57:24:13:6c:14:fd:
         92:d4:36:a7:e6:aa:c6:57:1f:c6:30:fc:21:80:ce:76:ab:17:
         e6:81:9a:29:f5:8c:78:aa:08:fe:af:df:0c:82:84:cf:aa:ec:
         6a:33:d4:5b:9a:74:57:4d:90:15:b0:02:f8:03:e0:b8:9a:96:
         0d:85:5d:cd:1e:a4:26:c4:78:16:17:07:39:20:5c:4c:1b:3f:
         94:9d:ca:2d:42:7a:a7:70:52:45:01:69:2f:c5:ee:64:c7:00:
         95:33:e9:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWLDc3BzLpvOwiQwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyMzk1MFoXDTI1MDUwNTExMzk1MFowLzEtMCsGA1UEAxMk
NjZlMWM4NjktN2FkNy00ZDIzLWIxZGYtMGQ4OGU5NWEwOGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPPRcchYUMY5l6A/ZAGkTDhTgbndGc1XoL8i
uNsOYnQKmfF72BkzXnXCE9vwrMI9SoQ8IZhire0ALyW2Z5hwldDfk5DCpIp3ts9e
cHCwEMItbM10aKI1dLkiO2Jxk76ScNAuSal7Rk/1uPcm9FwLaJRYJIIbCfFuACEU
Q2N9YR9K4X2mwOlX9UWGNqcp0YxKyQ701CDBQVqMHfklVK3XNMKGTB6cxhMOs6Vu
QaYVCY5PUD7vjCeExVZh+isb6uMt2twCpzYy+Au1dtr96GkyLelaauN9JDzOQCZb
I7oK6m7vpanPXU1WFiQj1ty263+HdCxifHV7/H49ODahbeHxmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6Y+FDZY+Hk1rF6/ihUHbTsBNdqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTJlMDVlYjItMjlkZi0z
ZTFhLWJhNmItOGFlNWE0MWYyNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtTe09Pme6dbh/DRDubgL22IClxKbEiNu7yOOEcoJzxv6PAXHycBqLA
T5hvZ6yzAbo5HITHWtKukKNx/GpuecahBbcw+sFmxYFifXmbsIO7Ob8R6Fe2S2oY
Vnpgn6llrYN1fE9kUl88F/DTVypxiquKYcEP7LzFV4+28M4reqhrdQ1Vq1clMoZw
Agwcd/KJ9K8BLRLnplI6qMZVq1ckE2wU/ZLUNqfmqsZXH8Yw/CGAznarF+aBmin1
jHiqCP6v3wyChM+q7Goz1FuadFdNkBWwAvgD4Lialg2FXc0epCbEeBYXBzkgXEwb
P5Sdyi1CeqdwUkUBaS/F7mTHAJUz6Uc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:05 2025 by rpki-client