Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa
File:                     ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa (raw, json)
Hash identifier:          7d6hfYpGo4Jl5cSc0kKJPgL2nOPRC5r/0UGN11k3a0M=
Subject key identifier:   B4:F6:4F:56:2C:7C:3A:07:1C:A2:AC:D8:E5:1A:2D:C0:AC:99:DE:24
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848FFC4B79852E2E8CC3FBD9C40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa
Signing time:             Tue 25 Feb 2025 10:54:23 +0000
ROA not before:           Tue 25 Feb 2025 10:54:23 +0000
ROA not after:            Mon 26 May 2025 09:54:23 +0000
asID:                     30036
IP address blocks:        198.40.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ff:c4:b7:98:52:e2:e8:cc:3f:bd:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 25 10:54:23 2025 GMT
            Not After : May 26 09:54:23 2025 GMT
        Subject: CN=e75ae035-1e78-4ca4-bf6b-a4f680785386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:46:b6:bc:4a:b6:f3:f3:e3:2b:a6:d3:cb:
                    8c:4a:6e:9d:9d:89:71:90:ac:3c:a8:9d:74:b0:04:
                    e9:07:5c:18:69:c3:76:2c:35:2c:dc:88:95:45:93:
                    50:21:ba:eb:04:ac:61:26:e8:76:ee:b9:88:b0:84:
                    13:d2:1e:ab:d4:b6:08:8d:d0:25:02:4d:69:01:24:
                    c5:a2:7d:f7:ee:73:11:9a:a8:f2:64:d3:d3:50:7a:
                    9e:5f:cd:46:46:8c:83:58:08:f5:31:5d:44:fa:4a:
                    df:37:00:72:71:97:52:0b:ad:5d:02:dc:18:6e:47:
                    fd:b8:fe:ce:c8:24:16:41:fc:a4:89:f8:3e:33:7a:
                    5c:19:94:0d:2c:17:36:32:bd:dd:c0:e4:6c:5a:3f:
                    28:0d:79:4d:4c:de:11:4a:e1:da:69:1e:60:52:60:
                    4d:39:ea:d9:a6:51:a9:c6:a3:fc:5f:e7:9c:ee:ea:
                    c3:bd:99:fd:e2:b7:dc:8c:cf:a6:f6:6f:b4:d9:b1:
                    61:b9:7b:fe:fe:bd:bd:c6:e5:5c:f1:96:e3:25:df:
                    8b:b3:74:e6:26:c0:73:2e:19:7a:b0:e8:34:d6:66:
                    53:a2:55:9f:96:78:c4:8f:3c:1e:ca:fc:05:c5:1f:
                    8f:2f:02:59:be:e9:7b:c9:4a:69:a5:89:67:3d:0b:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F6:4F:56:2C:7C:3A:07:1C:A2:AC:D8:E5:1A:2D:C0:AC:99:DE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3d:e0:2c:fe:20:16:58:bc:13:1c:e6:86:3e:c0:d8:85:bc:
         33:52:0e:3c:12:8e:dc:2d:21:9e:55:d3:f5:e4:ee:1e:90:7b:
         5f:d7:a1:c0:64:00:0f:13:d5:2a:1e:ff:56:94:6f:5b:25:97:
         6b:cc:8a:6c:14:b0:d1:74:df:41:16:0c:63:3b:bc:fc:9b:1d:
         2d:6a:48:e3:99:67:b4:93:a7:99:27:ea:b6:0a:29:d4:69:77:
         df:e1:bd:79:bc:6f:37:30:df:a1:99:39:ce:87:eb:07:8e:76:
         1d:db:49:f5:86:e8:89:95:4f:57:56:4c:e6:a0:23:c8:46:cc:
         2a:f5:19:6a:9b:4c:2f:2b:13:1a:01:d5:b3:d5:40:d2:17:b0:
         9a:c8:92:b9:75:5a:74:eb:b9:a8:0d:de:0e:82:8f:3c:21:b6:
         67:45:bd:e9:cd:63:0b:7d:2c:28:83:15:4a:51:11:75:af:b6:
         34:56:97:8a:bc:a8:f1:93:96:5c:69:db:73:87:45:00:83:1a:
         42:15:43:bf:4a:e8:ae:8d:32:74:5d:79:02:32:db:50:ab:a2:
         d8:69:de:47:75:e0:bf:63:97:63:94:5a:37:f4:47:e1:02:88:
         5a:98:f9:2d:9e:f1:7f:50:e8:01:80:17:31:9a:9e:76:49:58:
         45:d3:48:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/xLeYUuLozD+9nEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIyNTEwNTQyM1oXDTI1MDUyNjA5NTQyM1owLzEtMCsGA1UEAxMk
ZTc1YWUwMzUtMWU3OC00Y2E0LWJmNmItYTRmNjgwNzg1Mzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ9GtrxKtvPz4yum08uMSm6dnYlxkKw8qJ10
sATpB1wYacN2LDUs3IiVRZNQIbrrBKxhJuh27rmIsIQT0h6r1LYIjdAlAk1pASTF
on337nMRmqjyZNPTUHqeX81GRoyDWAj1MV1E+krfNwBycZdSC61dAtwYbkf9uP7O
yCQWQfykifg+M3pcGZQNLBc2Mr3dwORsWj8oDXlNTN4RSuHaaR5gUmBNOerZplGp
xqP8X+ec7urDvZn94rfcjM+m9m+02bFhuXv+/r29xuVc8ZbjJd+Ls3TmJsBzLhl6
sOg01mZTolWflnjEjzweyvwFxR+PLwJZvul7yUpppYlnPQsdpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLT2T1YsfDoHHKKs2OUaLcCsmd4kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWU4YzVmODMtZGY4Zi0z
ZDIwLTkyYjEtZjdlOGEyMTEzZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABM94Cz+IBZYvBMc5oY+wNiFvDNSDjwSjtwtIZ5V0/Xk7h6Qe1/XocBk
AA8T1Soe/1aUb1sll2vMimwUsNF030EWDGM7vPybHS1qSOOZZ7STp5kn6rYKKdRp
d9/hvXm8bzcw36GZOc6H6weOdh3bSfWG6ImVT1dWTOagI8hGzCr1GWqbTC8rExoB
1bPVQNIXsJrIkrl1WnTruagN3g6CjzwhtmdFvenNYwt9LCiDFUpREXWvtjRWl4q8
qPGTllxp23OHRQCDGkIVQ79K6K6NMnRdeQIy21Crothp3kd14L9jl2OUWjf0R+EC
iFqY+S2e8X9Q6AGAFzGannZJWEXTSFo=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:48 2025 by rpki-client