Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/e1029973-96d5-32a5-8773-acab0086dbba.roa
File:                     e1029973-96d5-32a5-8773-acab0086dbba.roa (raw, json)
Hash identifier:          3uGcuNTOfny5u5+xWPpBhjCtPCraNyUHqSyOm0bJimA=
Subject key identifier:   F2:94:94:19:47:49:7A:3B:24:42:A7:5B:49:FA:32:8C:B0:C6:21:88
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F43285848F22C6DF570ACF4917EC9CE80
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/e1029973-96d5-32a5-8773-acab0086dbba.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     7794
IP address blocks:        216.75.160.0/19 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:6d:f5:70:ac:f4:91:7e:c9:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=522462cc-1a7a-4871-9f4f-4c317a00a0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:0f:34:44:4e:38:27:f1:e3:3a:62:73:24:
                    27:f2:be:a3:ee:26:0f:84:ee:54:2a:c0:6d:4f:54:
                    a9:3a:61:5e:d2:39:28:d4:c0:64:e5:a0:e3:20:36:
                    87:d1:29:4e:ae:d5:5c:cd:28:ce:85:89:95:cb:5f:
                    8d:8b:35:03:f8:27:5e:01:04:9a:7a:9d:7a:c7:54:
                    1c:88:15:2b:9d:c7:7c:d0:3f:9a:b3:a0:6e:ff:ec:
                    53:a9:39:1e:b5:c1:b2:f3:82:ef:fd:07:e7:20:51:
                    f8:2b:ec:01:64:d0:e0:40:9b:f6:65:cd:27:2d:79:
                    60:7b:66:9a:be:4b:94:7d:b2:59:64:2c:41:00:e6:
                    99:66:d1:82:a7:50:61:3f:2c:d8:eb:ba:76:1a:3d:
                    72:5e:28:31:61:0d:1a:df:1f:ad:89:70:13:83:0f:
                    bf:19:e9:78:22:62:f8:d4:f2:4e:8d:54:ed:05:62:
                    f3:5b:07:8b:ea:ae:fa:6c:8a:66:25:39:1f:d6:04:
                    e8:ae:7e:8a:e6:7c:d5:68:47:a6:07:fa:86:57:e7:
                    f1:a9:67:e3:45:18:fc:dc:34:b0:20:9b:1b:03:06:
                    38:2f:4b:0f:9c:f5:f4:9a:97:ce:87:e1:08:64:03:
                    21:17:47:33:7a:e9:ba:e9:42:c3:e5:bb:f8:8f:3f:
                    01:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:94:94:19:47:49:7A:3B:24:42:A7:5B:49:FA:32:8C:B0:C6:21:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/e1029973-96d5-32a5-8773-acab0086dbba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e7:e3:c4:b9:0b:c0:11:e6:60:f5:90:e9:fe:b9:55:ee:8e:4a:
         5d:3b:62:7b:32:38:da:80:0c:dc:06:a0:cc:c2:e9:4f:15:f2:
         39:39:5e:7b:94:77:03:a7:1e:72:63:72:e4:08:e6:df:cd:c4:
         f3:eb:5c:f3:6c:de:22:17:e2:18:89:f9:b8:72:bf:6a:81:42:
         01:d1:5f:ba:d7:e1:45:49:25:85:b8:07:e2:ac:f7:99:ea:41:
         0e:72:6b:56:1f:19:28:45:fc:a4:03:04:f4:8f:1c:cd:51:38:
         52:65:e2:17:6b:99:58:bf:7b:f7:2f:98:13:13:93:80:1b:13:
         46:6e:89:a2:26:48:52:e6:0c:2c:26:57:fc:cf:51:af:20:53:
         8f:34:4b:b6:c4:77:5d:f2:27:bb:e9:9e:0c:48:c8:40:86:c1:
         62:7c:9a:bd:ac:79:99:ef:7e:61:dc:7a:c6:d9:20:5d:93:20:
         11:54:a1:b8:65:b1:6d:a7:e5:69:db:0b:50:c2:28:7a:25:5f:
         22:34:ed:c3:af:9f:1a:47:e6:b2:c1:56:d3:48:8c:fd:e6:2e:
         c2:bb:e0:6f:f8:95:da:68:1f:d9:2f:0a:88:c1:9f:a5:ec:a4:
         b4:64:c5:a7:11:b4:15:3c:99:d4:fd:80:c4:6d:99:8b:d5:08:
         f7:91:f5:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG31cKz0kX7JzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx
NzZlMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
NTIyNDYyY2MtMWE3YS00ODcxLTlmNGYtNGMzMTdhMDBhMGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXwPNEROOCfx4zpicyQn8r6j7iYPhO5UKsBt
T1SpOmFe0jko1MBk5aDjIDaH0SlOrtVczSjOhYmVy1+NizUD+CdeAQSaep16x1Qc
iBUrncd80D+as6Bu/+xTqTketcGy84Lv/QfnIFH4K+wBZNDgQJv2Zc0nLXlge2aa
vkuUfbJZZCxBAOaZZtGCp1BhPyzY67p2Gj1yXigxYQ0a3x+tiXATgw+/Gel4ImL4
1PJOjVTtBWLzWweL6q76bIpmJTkf1gTorn6K5nzVaEemB/qGV+fxqWfjRRj83DSw
IJsbAwY4L0sPnPX0mpfOh+EIZAMhF0czeum66ULD5bv4jz8B4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKUlBlHSXo7JEKnW0n6MoywxiGIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk
Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvZTEwMjk5NzMtOTZkNS0z
MmE1LTg3NzMtYWNhYjAwODZkYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1
ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz
MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm
Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2EugMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOfjxLkLwBHmYPWQ6f65Ve6OSl07YnsyONqADNwGoMzC6U8V8jk5XnuU
dwOnHnJjcuQI5t/NxPPrXPNs3iIX4hiJ+bhyv2qBQgHRX7rX4UVJJYW4B+Ks95nq
QQ5ya1YfGShF/KQDBPSPHM1ROFJl4hdrmVi/e/cvmBMTk4AbE0ZuiaImSFLmDCwm
V/zPUa8gU480S7bEd13yJ7vpngxIyECGwWJ8mr2seZnvfmHcesbZIF2TIBFUobhl
sW2n5WnbC1DCKHolXyI07cOvnxpH5rLBVtNIjP3mLsK74G/4ldpoH9kvCojBn6Xs
pLRkxacRtBU8mdT9gMRtmYvVCPeR9c8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:55 2025 by rpki-client