Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa
File:                     2d388d51-a371-39d1-bf5a-73549a9917de.roa (raw, json)
Hash identifier:          VEW3urbjvw1dRRSXq2gGzZsio1lm+h78++AR1xGtsQ0=
Subject key identifier:   08:89:C3:5E:2A:6D:09:A4:BE:39:33:F2:75:E0:FF:64:8B:C8:9A:82
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F4328584898D60F90FB3D86D995044800
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     23528
IP address blocks:        168.203.38.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:0f:90:fb:3d:86:d9:95:04:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=ef869a70-7f97-441c-b67d-b344e74683ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:e7:d9:b8:a3:fd:78:25:72:dc:61:6a:e7:
                    a5:18:da:ae:fe:c8:7f:c4:c1:84:7e:11:fe:63:65:
                    15:ce:91:17:b0:47:e0:37:81:09:33:a9:f0:42:7c:
                    df:46:dc:88:83:cc:c6:ee:ec:89:7c:47:a5:98:4d:
                    59:a4:62:c2:96:84:b0:2c:85:db:c1:02:8f:e4:c9:
                    fc:b4:d2:61:75:a6:2d:fb:bd:18:35:ec:f4:46:be:
                    19:5c:ef:50:32:3c:a0:10:db:5c:56:7e:5b:45:fc:
                    66:47:32:0f:c9:79:9a:07:3e:3d:a4:73:56:dc:c2:
                    5e:66:54:12:27:b6:91:5f:c4:61:f0:31:4e:73:93:
                    a6:50:6a:1f:96:19:a3:2e:c8:e7:aa:ca:4c:9a:35:
                    15:05:9c:7b:5e:5c:17:73:98:71:6e:01:68:ea:08:
                    d0:1d:19:16:dd:43:21:95:da:ad:bf:0e:75:5e:5a:
                    bb:35:17:05:28:67:2b:ab:29:8b:b7:60:87:05:87:
                    4e:dc:56:73:12:c7:29:4c:5c:a9:ac:d2:3f:56:1f:
                    f4:5f:6f:87:18:64:83:d8:ea:d9:be:61:39:2e:c4:
                    83:a1:22:79:3f:e3:e9:99:0a:f5:57:27:8c:74:f5:
                    bd:15:5a:28:8d:86:70:98:54:f1:df:2e:8c:4b:1e:
                    4b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:89:C3:5E:2A:6D:09:A4:BE:39:33:F2:75:E0:FF:64:8B:C8:9A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:0b:b6:61:65:3c:c6:1e:cd:0c:7f:52:51:a6:7d:48:65:
         5d:71:a6:07:ec:6e:1f:df:d3:e3:fc:22:15:aa:fa:e2:ff:bc:
         f2:23:af:ec:d2:38:9a:37:7b:e6:17:b1:66:db:be:d1:6c:3f:
         cd:94:54:c0:8b:23:a9:9b:ee:a1:b9:d5:15:8c:c8:51:7d:b5:
         ee:c3:e6:2d:96:75:91:91:74:82:79:d8:34:3e:3f:26:65:0b:
         d6:14:f6:06:1e:a7:6b:14:f3:d6:d0:d8:31:48:02:dd:03:40:
         f5:d0:71:f3:b6:d9:1f:5e:94:4b:6a:57:9a:0b:d6:90:07:76:
         7c:d2:7a:93:fd:e5:75:81:6c:75:7a:46:fe:a2:69:05:da:db:
         5a:ce:65:d9:12:ba:dc:5c:88:9c:e6:70:56:4f:a1:e6:01:d8:
         fa:0f:82:ab:5b:b4:e0:40:8d:db:14:05:cd:31:71:8e:02:3d:
         e7:06:d5:43:ed:3a:74:51:57:3f:a1:cc:d3:1a:b8:1d:f3:9e:
         22:d8:0c:b5:87:80:a1:42:80:4a:9a:a6:8b:b4:2c:ff:1d:2e:
         cc:b0:a5:82:42:c6:c4:0f:5d:ab:1e:8c:c6:d0:1d:43:ea:2a:
         fa:3c:9f:71:1a:10:75:81:95:63:34:b0:ff:6e:b4:77:f6:4f:
         9f:5f:4b:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1g+Q+z2G2ZUESAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi
MDRhMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWY4NjlhNzAtN2Y5Ny00NDFjLWI2N2QtYjM0NGU3NDY4M2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcPn2bij/XglctxhauelGNqu/sh/xMGEfhH+
Y2UVzpEXsEfgN4EJM6nwQnzfRtyIg8zG7uyJfEelmE1ZpGLCloSwLIXbwQKP5Mn8
tNJhdaYt+70YNez0Rr4ZXO9QMjygENtcVn5bRfxmRzIPyXmaBz49pHNW3MJeZlQS
J7aRX8Rh8DFOc5OmUGoflhmjLsjnqspMmjUVBZx7XlwXc5hxbgFo6gjQHRkW3UMh
ldqtvw51Xlq7NRcFKGcrqymLt2CHBYdO3FZzEscpTFyprNI/Vh/0X2+HGGSD2OrZ
vmE5LsSDoSJ5P+PpmQr1VyeMdPW9FVoojYZwmFTx3y6MSx5LEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAiJw14qbQmkvjkz8nXg/2SLyJqCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj
ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvMmQzODhkNTEtYTM3MS0z
OWQxLWJmNWEtNzM1NDlhOTkxN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5
ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw
YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2
ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFp3C7ZhZTzGHs0Mf1JRpn1IZV1xpgfsbh/f0+P8IhWq+uL/vPIjr+zS
OJo3e+YXsWbbvtFsP82UVMCLI6mb7qG51RWMyFF9te7D5i2WdZGRdIJ52DQ+PyZl
C9YU9gYep2sU89bQ2DFIAt0DQPXQcfO22R9elEtqV5oL1pAHdnzSepP95XWBbHV6
Rv6iaQXa21rOZdkSutxciJzmcFZPoeYB2PoPgqtbtOBAjdsUBc0xcY4CPecG1UPt
OnRRVz+hzNMauB3zniLYDLWHgKFCgEqapou0LP8dLsywpYJCxsQPXasejMbQHUPq
Kvo8n3EaEHWBlWM0sP9utHf2T59fS/w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:19 2025 by rpki-client