Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa
File:                     a63c59ce-5a49-3f3e-8855-0d302277390e.roa (raw, json)
Hash identifier:          vtVHpq3fpmAfDACMXxHPbC+RN+pdZYnPWntAfmoujgQ=
Subject key identifier:   3B:A2:83:AD:4B:5B:77:A8:CE:A6:8B:22:1E:0A:2E:27:D5:3A:70:D1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C263886CAFE05EFE0FC91C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa
Signing time:             Mon 03 Feb 2025 11:14:15 +0000
ROA not before:           Mon 03 Feb 2025 11:14:15 +0000
ROA not after:            Sun 04 May 2025 10:14:15 +0000
asID:                     30036
IP address blocks:        173.24.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:63:88:6c:af:e0:5e:fe:0f:c9:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:14:15 2025 GMT
            Not After : May  4 10:14:15 2025 GMT
        Subject: CN=737a286a-77be-4334-a0cf-fb1607d413e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:90:12:86:3b:cc:90:0b:a9:3d:46:06:d5:
                    d2:b5:ff:d5:12:e2:2a:67:b0:8e:fb:a4:18:31:16:
                    49:10:c9:c1:e1:a9:9a:06:7d:ee:3b:74:c2:54:f5:
                    33:cc:ba:5e:bd:9f:25:82:12:ac:ba:b5:f3:5e:ae:
                    58:85:2e:00:66:a7:1e:e7:a5:3b:8a:ad:51:7a:2a:
                    4d:49:fe:50:ed:b4:1c:ee:98:64:53:57:95:b9:46:
                    6f:6a:e3:77:3d:6d:94:d5:e0:93:79:5f:bf:0f:23:
                    d4:1e:5f:31:a6:cf:b9:58:6a:59:8b:b1:8b:f0:de:
                    e2:f5:d2:5c:8e:e3:21:ec:2a:d3:f9:9a:ef:da:92:
                    b2:92:38:8f:cb:45:8d:b2:55:6f:ba:74:d8:dd:be:
                    1a:ea:2d:24:97:44:d3:53:27:02:26:82:a0:d6:2b:
                    28:f1:4f:23:3e:c3:2f:1d:6a:c4:01:e5:38:73:c3:
                    58:bd:57:97:6a:be:d7:5d:52:e3:4f:0f:88:6e:6a:
                    1c:71:35:02:62:df:fe:f6:d4:36:75:a3:d5:60:d7:
                    f4:c1:e8:a0:7b:45:36:0a:ee:53:43:3f:46:72:1d:
                    da:70:f6:b3:c2:cb:cf:3b:bb:58:87:01:62:9e:33:
                    b9:d8:22:51:55:6a:1b:a0:98:ce:1d:8c:d7:ac:eb:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A2:83:AD:4B:5B:77:A8:CE:A6:8B:22:1E:0A:2E:27:D5:3A:70:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:bd:27:c5:b4:e7:17:8d:5a:e0:1d:77:e3:41:c4:74:ab:3f:
         52:95:3c:0a:e7:d9:02:4f:69:2c:5e:d6:41:55:c9:8c:a6:2a:
         19:db:45:58:f4:ad:04:d2:ee:68:92:ec:2f:3e:0f:90:d4:2b:
         a6:07:4f:09:04:9b:d9:d4:b3:37:d9:f9:cd:8b:32:44:9a:36:
         b6:de:df:30:29:c1:68:40:9e:3f:0b:be:0d:0a:ae:c9:2b:b9:
         12:9a:20:fe:a9:ba:a6:cb:54:6e:42:ca:09:78:6c:f7:0b:23:
         76:a8:e9:82:e3:80:c7:bf:8d:f9:92:9d:e1:f7:bf:e4:20:9e:
         76:40:39:4f:cb:b0:d1:e6:cb:ca:95:bf:c3:7f:cf:bc:29:6f:
         76:45:32:53:d9:66:3a:88:ab:a7:43:11:f2:fd:02:da:65:f4:
         e4:c1:37:31:65:b2:04:1f:e4:62:d5:b2:5e:0d:f6:92:b7:7f:
         cc:67:a6:98:95:2e:8a:34:6b:fb:34:b2:8e:c4:ff:97:3b:20:
         a2:7f:34:04:66:3f:01:f5:b7:5b:51:03:eb:3e:6e:07:2c:0f:
         4f:6f:2d:41:32:9e:e7:69:b3:0d:56:10:37:8a:9e:fb:b8:33:
         fa:66:78:7b:23:b1:51:eb:95:8f:73:32:90:6a:de:70:45:27:
         88:68:14:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCY4hsr+Be/g/JHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTQxNVoXDTI1MDUwNDEwMTQxNVowLzEtMCsGA1UEAxMk
NzM3YTI4NmEtNzdiZS00MzM0LWEwY2YtZmIxNjA3ZDQxM2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnOQEoY7zJALqT1GBtXStf/VEuIqZ7CO+6QY
MRZJEMnB4amaBn3uO3TCVPUzzLpevZ8lghKsurXzXq5YhS4AZqce56U7iq1ReipN
Sf5Q7bQc7phkU1eVuUZvauN3PW2U1eCTeV+/DyPUHl8xps+5WGpZi7GL8N7i9dJc
juMh7CrT+Zrv2pKykjiPy0WNslVvunTY3b4a6i0kl0TTUycCJoKg1iso8U8jPsMv
HWrEAeU4c8NYvVeXar7XXVLjTw+IbmoccTUCYt/+9tQ2daPVYNf0weige0U2Cu5T
Qz9Gch3acPazwsvPO7tYhwFinjO52CJRVWoboJjOHYzXrOsXHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDuig61LW3eozqaLIh4KLifVOnDRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYzYzU5Y2UtNWE0OS0z
ZjNlLTg4NTUtMGQzMDIyNzczOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRihMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAe9J8W05xeNWuAdd+NBxHSrP1KVPArn2QJPaSxe1kFVyYymKhnbRVj0
rQTS7miS7C8+D5DUK6YHTwkEm9nUszfZ+c2LMkSaNrbe3zApwWhAnj8Lvg0Krskr
uRKaIP6puqbLVG5Cygl4bPcLI3ao6YLjgMe/jfmSneH3v+QgnnZAOU/LsNHmy8qV
v8N/z7wpb3ZFMlPZZjqIq6dDEfL9Atpl9OTBNzFlsgQf5GLVsl4N9pK3f8xnppiV
Loo0a/s0so7E/5c7IKJ/NARmPwH1t1tRA+s+bgcsD09vLUEynudpsw1WEDeKnvu4
M/pmeHsjsVHrlY9zMpBq3nBFJ4hoFPQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:04 2025 by rpki-client