Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4d3624c-2e36-3df6-aa53-c9733866bb04.roa
File:                     c4d3624c-2e36-3df6-aa53-c9733866bb04.roa (raw, json)
Hash identifier:          XurNmvq+/XcGIQfr8LAjaNFByi07NT7K6WULsQ8Ko/4=
Subject key identifier:   89:7D:BB:7A:A3:6D:49:5B:7F:BE:3B:55:BD:26:4A:E9:E3:AF:BC:17
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C58450626CDFFE34AB1C0A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4d3624c-2e36-3df6-aa53-c9733866bb04.roa
Signing time:             Tue 04 Feb 2025 14:07:44 +0000
ROA not before:           Tue 04 Feb 2025 14:07:44 +0000
ROA not after:            Mon 05 May 2025 13:07:44 +0000
asID:                     30036
IP address blocks:        173.19.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:84:50:62:6c:df:fe:34:ab:1c:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 14:07:44 2025 GMT
            Not After : May  5 13:07:44 2025 GMT
        Subject: CN=230675ff-240c-4029-afac-cd76b8c05678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:74:e5:e7:40:e2:e6:e8:de:a5:c1:60:c0:c5:
                    35:ea:db:2e:50:9a:3d:41:a5:c6:6c:85:02:77:17:
                    2c:1a:2c:a2:c4:19:a8:bb:90:e2:30:df:3c:ed:d5:
                    6c:a1:52:a8:e5:2c:3f:95:8a:a6:a6:5d:e5:f5:e0:
                    28:9e:e0:8f:e1:78:19:ab:eb:e3:41:d7:45:c6:e8:
                    f2:e3:5b:16:eb:00:d0:3f:83:f6:cf:85:6a:25:dc:
                    41:4a:43:aa:7c:aa:6c:2a:1e:64:cc:e9:21:4c:dc:
                    a5:21:15:d0:34:37:ac:6d:04:a5:9b:22:2b:35:5b:
                    0d:c1:b4:dc:26:ce:7b:63:d1:78:aa:ee:f9:e0:09:
                    39:54:48:db:d2:e8:0e:0c:61:5f:aa:2c:01:b0:50:
                    2f:d4:07:28:99:3c:f0:2e:d7:56:55:68:ef:fb:9d:
                    3a:e9:2c:de:1f:22:c7:b2:ce:03:88:94:ed:64:94:
                    6d:5b:0e:c7:3b:e5:d3:a7:74:53:f8:9a:c9:b8:e9:
                    ae:53:99:97:d8:ea:16:0c:62:0f:97:82:60:e8:de:
                    d2:6c:3f:85:8b:cf:58:85:6b:bc:bd:48:33:2f:c0:
                    7c:35:05:e7:de:47:7f:f1:c9:33:6f:11:e7:5e:50:
                    ab:57:be:d4:3d:e9:6e:3b:40:fd:d0:5a:96:c1:f8:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7D:BB:7A:A3:6D:49:5B:7F:BE:3B:55:BD:26:4A:E9:E3:AF:BC:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4d3624c-2e36-3df6-aa53-c9733866bb04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e8:b3:12:6a:72:71:65:40:7a:78:1f:f5:0a:83:53:14:f1:
         ce:05:f8:17:8a:12:8e:6b:1c:e2:b2:d0:08:97:6d:73:3d:7e:
         0b:b7:f6:08:42:b9:b0:54:21:4f:ce:14:89:e9:5d:16:0d:da:
         20:0f:f2:46:cb:85:e7:ed:c3:7e:a4:2a:da:bb:fa:6f:e6:3c:
         10:a7:95:ad:b5:c3:fb:eb:af:38:2a:e5:4c:fe:ca:5e:0a:ea:
         33:50:05:23:21:4f:4a:15:98:63:b9:d9:10:87:0c:cc:10:3a:
         7b:98:33:c0:39:a2:42:d0:0a:95:a1:71:a8:a9:65:0f:62:4a:
         f8:60:6d:04:ba:bc:a0:1e:42:2e:8e:ff:ca:ab:bd:fc:f3:a2:
         13:80:a0:93:13:d8:fa:c8:b6:af:5e:ff:83:aa:9d:7d:ed:dc:
         77:0a:14:44:70:ee:76:8e:73:d3:68:4e:d1:5f:1d:83:3c:fb:
         76:31:d9:dd:d1:71:ff:ae:bf:85:c9:b6:ba:ef:ec:6a:25:85:
         12:4c:3e:d1:11:bb:79:cc:c8:65:14:0e:01:b0:a9:93:5c:be:
         7e:fc:42:e0:84:3b:fe:15:ae:61:78:ce:a1:ac:8c:61:aa:b5:
         dc:dd:95:06:5b:0b:82:24:5e:26:1e:fb:84:76:7b:38:32:ab:
         44:4c:8a:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFhFBibN/+NKscCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDE0MDc0NFoXDTI1MDUwNTEzMDc0NFowLzEtMCsGA1UEAxMk
MjMwNjc1ZmYtMjQwYy00MDI5LWFmYWMtY2Q3NmI4YzA1Njc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3Tl50Di5ujepcFgwMU16tsuUJo9QaXGbIUC
dxcsGiyixBmou5DiMN887dVsoVKo5Sw/lYqmpl3l9eAonuCP4XgZq+vjQddFxujy
41sW6wDQP4P2z4VqJdxBSkOqfKpsKh5kzOkhTNylIRXQNDesbQSlmyIrNVsNwbTc
Js57Y9F4qu754Ak5VEjb0ugODGFfqiwBsFAv1AcomTzwLtdWVWjv+5066SzeHyLH
ss4DiJTtZJRtWw7HO+XTp3RT+JrJuOmuU5mX2OoWDGIPl4Jg6N7SbD+Fi89YhWu8
vUgzL8B8NQXn3kd/8ckzbxHnXlCrV77UPeluO0D90FqWwfgpdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIl9u3qjbUlbf747Vb0mSunjr7wXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzRkMzYyNGMtMmUzNi0z
ZGY2LWFhNTMtYzk3MzM4NjZiYjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRPIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPosxJqcnFlQHp4H/UKg1MU8c4F+BeKEo5rHOKy0AiXbXM9fgu39ghC
ubBUIU/OFInpXRYN2iAP8kbLheftw36kKtq7+m/mPBCnla21w/vrrzgq5Uz+yl4K
6jNQBSMhT0oVmGO52RCHDMwQOnuYM8A5okLQCpWhcaipZQ9iSvhgbQS6vKAeQi6O
/8qrvfzzohOAoJMT2PrItq9e/4OqnX3t3HcKFERw7naOc9NoTtFfHYM8+3Yx2d3R
cf+uv4XJtrrv7GolhRJMPtERu3nMyGUUDgGwqZNcvn78QuCEO/4VrmF4zqGsjGGq
tdzdlQZbC4IkXiYe+4R2ezgyq0RMikc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:33 2025 by rpki-client