Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71133679-175b-3380-8988-b59156a5b542.roa
File:                     71133679-175b-3380-8988-b59156a5b542.roa (raw, json)
Hash identifier:          ZIMaOwpA5kys+MRU1j1+EyBPQhkeFi+PTcplCII/vag=
Subject key identifier:   E8:1A:DC:92:47:89:03:C6:6D:87:BC:7B:1B:7D:B7:F2:A0:E0:7E:C7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B6618273FEC965A4688E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71133679-175b-3380-8988-b59156a5b542.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        204.101.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b6:61:82:73:fe:c9:65:a4:68:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=32abd35e-5364-4225-9757-b9a60a56f535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:e6:d1:2c:c0:17:34:b6:ab:e9:ee:6e:00:
                    8c:ff:70:8f:9d:c1:a6:f9:c6:56:80:4c:c3:40:b9:
                    83:8b:1c:1a:12:df:ef:7c:cb:1f:f8:8e:77:0f:ac:
                    4e:fe:af:51:02:3f:a7:2a:32:10:9b:96:90:a7:18:
                    7a:1b:47:8a:49:5e:c7:23:22:3d:1e:8d:7b:4e:3f:
                    21:f2:55:76:7b:89:25:77:00:37:a9:6f:82:48:04:
                    02:ef:89:94:5d:87:2a:13:69:34:51:e7:3c:98:52:
                    24:9d:b2:6f:d6:8c:78:1e:95:4d:33:cc:95:cf:f9:
                    19:dd:d6:97:e6:a0:25:46:2e:c3:fb:d3:39:44:85:
                    7f:68:0d:4f:fc:52:8e:3d:b2:0d:e3:94:58:5b:55:
                    9e:bd:95:81:03:70:f2:af:9b:9d:9a:d9:1c:4f:c5:
                    d2:f6:8b:0e:80:b8:9f:d1:4e:f6:6d:f3:35:cc:75:
                    65:3d:c4:8c:a6:52:2d:a6:9e:de:a2:dc:f4:ea:0e:
                    f5:d0:0e:cc:02:05:8d:bc:ce:8c:f3:6a:6d:8f:b6:
                    dc:e6:2b:16:c4:47:e3:2d:76:9c:f3:85:06:1a:3f:
                    c5:d0:85:46:d1:20:1e:ce:d2:e8:13:9b:b5:95:d9:
                    0e:e7:23:8c:a1:48:b4:41:fd:b9:5e:00:b3:22:73:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:DC:92:47:89:03:C6:6D:87:BC:7B:1B:7D:B7:F2:A0:E0:7E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71133679-175b-3380-8988-b59156a5b542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:09:40:c3:8c:b5:de:67:1e:21:b1:b0:d2:bf:69:12:70:6c:
         f6:60:3c:28:0c:13:89:8d:2a:1b:a8:42:b6:35:1c:c4:fc:95:
         c0:95:af:69:2f:23:07:c5:0d:68:7b:7d:6a:ed:0f:55:f8:c1:
         f8:d6:51:d2:7d:e3:24:bb:15:62:c3:6e:8b:b7:c1:38:cd:20:
         92:e9:a7:09:6d:41:f6:17:f7:09:90:94:a3:63:46:15:a2:cc:
         b4:6d:ad:85:bc:85:64:dd:02:e5:02:95:25:36:30:02:4a:4f:
         6e:e7:ed:ad:63:d8:55:74:12:88:a0:cb:27:21:b4:e3:7e:03:
         78:9c:24:21:65:5f:cf:37:50:d9:ed:8d:bd:0d:38:0d:22:1f:
         04:23:71:9a:d9:8d:62:cb:4f:38:92:0a:f5:bf:9a:d5:09:0c:
         69:26:f5:20:4f:5b:31:f9:5c:60:14:25:af:75:dc:87:e2:b1:
         c6:00:94:fb:8e:21:8b:b3:52:e9:44:7d:a1:84:27:8d:3d:2e:
         33:09:5b:96:06:78:e9:c2:af:2c:0d:c8:3f:97:16:79:05:18:
         f9:54:ff:a1:6b:e6:fa:d9:9f:06:a8:34:5f:5d:12:28:c0:d2:
         77:5b:f2:0c:89:9c:d7:30:7c:94:9e:30:de:b3:fb:12:2f:3a:
         02:91:3e:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtmGCc/7JZaRojgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzJhYmQzNWUtNTM2NC00MjI1LTk3NTctYjlhNjBhNTZmNTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4fm0SzAFzS2q+nubgCM/3CPncGm+cZWgEzD
QLmDixwaEt/vfMsf+I53D6xO/q9RAj+nKjIQm5aQpxh6G0eKSV7HIyI9Ho17Tj8h
8lV2e4kldwA3qW+CSAQC74mUXYcqE2k0Uec8mFIknbJv1ox4HpVNM8yVz/kZ3daX
5qAlRi7D+9M5RIV/aA1P/FKOPbIN45RYW1WevZWBA3Dyr5udmtkcT8XS9osOgLif
0U72bfM1zHVlPcSMplItpp7eotz06g710A7MAgWNvM6M82ptj7bc5isWxEfjLXac
84UGGj/F0IVG0SAeztLoE5u1ldkO5yOMoUi0Qf25XgCzInMTewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOga3JJHiQPGbYe8ext9t/Kg4H7HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNzExMzM2NzktMTc1Yi0z
MzgwLTg5ODgtYjU5MTU2YTViNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMJQMOMtd5nHiGxsNK/aRJwbPZgPCgME4mNKhuoQrY1HMT8lcCVr2kv
IwfFDWh7fWrtD1X4wfjWUdJ94yS7FWLDbou3wTjNIJLppwltQfYX9wmQlKNjRhWi
zLRtrYW8hWTdAuUClSU2MAJKT27n7a1j2FV0EoigyychtON+A3icJCFlX883UNnt
jb0NOA0iHwQjcZrZjWLLTziSCvW/mtUJDGkm9SBPWzH5XGAUJa913IfiscYAlPuO
IYuzUulEfaGEJ409LjMJW5YGeOnCrywNyD+XFnkFGPlU/6Fr5vrZnwaoNF9dEijA
0ndb8gyJnNcwfJSeMN6z+xIvOgKRPv0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:29:51 2025 by rpki-client