Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75b8d9d2-8829-3de7-9ec1-301b30fd8755.roa
File:                     75b8d9d2-8829-3de7-9ec1-301b30fd8755.roa (raw, json)
Hash identifier:          fNBFw/2dcUjOpwpcov5T3DdeFse9tY64Rm4VhU5dB5k=
Subject key identifier:   13:C2:5B:A4:CF:7D:07:6E:D8:FB:DD:86:2A:94:D3:B7:5E:71:90:16
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5815070662953A8A4F9C700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75b8d9d2-8829-3de7-9ec1-301b30fd8755.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:50:70:66:29:53:a8:a4:f9:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=3c2c7857-fd15-41c9-be68-5f85d830d368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:c5:fe:95:9a:c3:35:6e:0d:53:1e:be:95:
                    b6:79:ba:ac:e7:ef:bd:c7:f9:4e:7b:5e:34:08:a0:
                    82:92:d2:a3:4b:ad:e2:b4:7b:a2:25:19:f2:8f:76:
                    a2:a1:f2:15:8d:3a:14:ff:70:55:a6:70:98:c8:eb:
                    b9:48:8e:72:ef:7e:19:9d:c9:de:8e:02:62:4f:d1:
                    5a:d6:63:3b:5d:b6:4d:a4:e9:e1:bc:41:51:3f:f1:
                    19:eb:ff:9d:18:3b:44:5f:62:ae:93:1b:67:24:f1:
                    69:f7:0a:5e:96:9e:ab:51:87:0a:d1:a4:e3:2b:70:
                    40:59:5d:04:ad:62:03:57:fe:30:ce:12:60:e9:5f:
                    e6:d3:86:80:ed:6b:07:71:8e:51:c8:c6:e5:34:ff:
                    08:da:ca:41:e5:3f:fb:c6:ac:60:d6:4c:ef:e6:c7:
                    87:c5:0a:67:1e:b8:99:c0:77:87:82:d6:24:d3:5a:
                    01:6d:43:a0:28:ab:6d:31:03:6b:27:9d:3a:b1:0a:
                    19:96:51:07:46:c1:df:61:7b:be:87:4b:79:58:e3:
                    2f:55:85:62:aa:00:d0:7a:79:88:42:6f:b1:e7:48:
                    c1:74:aa:de:c7:7d:f9:44:ff:75:5c:2b:92:ea:58:
                    aa:c1:44:25:23:5a:a0:06:40:eb:b1:be:35:e6:c6:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:5B:A4:CF:7D:07:6E:D8:FB:DD:86:2A:94:D3:B7:5E:71:90:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75b8d9d2-8829-3de7-9ec1-301b30fd8755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:53:9e:45:3f:45:74:16:b2:c2:bc:db:da:ad:58:71:7d:5c:
         5c:86:f2:8d:5d:b8:e2:46:4b:c6:79:02:3d:05:84:2e:93:8e:
         9f:60:b5:5d:8a:88:f6:d6:2a:da:74:27:a8:79:26:55:e0:60:
         e1:39:a4:21:d4:9c:3f:48:95:8e:01:fd:d4:97:dd:10:0a:eb:
         fa:a6:ce:0e:a8:6f:7c:c3:71:97:7e:5b:7e:4c:8c:c9:50:93:
         2f:dc:d2:15:c9:fb:4a:eb:a0:5b:35:e2:1d:60:29:6a:f7:5d:
         e9:25:11:e2:8a:60:94:af:80:10:c0:b9:59:7c:d3:52:1b:ce:
         91:df:dd:c6:47:30:c9:a7:c9:97:95:49:8c:c4:b5:ed:46:c4:
         d2:91:e3:77:4a:0f:5a:11:d1:bd:52:25:a8:43:3d:21:dd:3b:
         08:fb:f1:c2:dc:f0:f3:ba:af:86:09:3c:a3:77:d7:57:af:04:
         6b:51:e0:cd:6b:72:56:89:2e:28:d9:92:8f:87:cd:66:c6:be:
         02:94:5a:3c:57:54:cf:d4:21:a1:17:d9:12:39:eb:cd:93:6c:
         51:11:6a:fa:be:f7:45:1d:1e:f9:2f:a9:92:9b:0f:7c:e3:3f:
         19:73:09:7e:db:50:49:dc:5b:ef:61:13:1c:d0:e1:a7:47:f4:
         55:27:d5:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVBwZilTqKT5xwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
M2MyYzc4NTctZmQxNS00MWM5LWJlNjgtNWY4NWQ4MzBkMzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmXF/pWawzVuDVMevpW2ebqs5++9x/lOe140
CKCCktKjS63itHuiJRnyj3aiofIVjToU/3BVpnCYyOu5SI5y734ZncnejgJiT9Fa
1mM7XbZNpOnhvEFRP/EZ6/+dGDtEX2KukxtnJPFp9wpelp6rUYcK0aTjK3BAWV0E
rWIDV/4wzhJg6V/m04aA7WsHcY5RyMblNP8I2spB5T/7xqxg1kzv5seHxQpnHriZ
wHeHgtYk01oBbUOgKKttMQNrJ506sQoZllEHRsHfYXu+h0t5WOMvVYViqgDQenmI
Qm+x50jBdKrex335RP91XCuS6liqwUQlI1qgBkDrsb415sZrHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPCW6TPfQdu2PvdhiqU07decZAWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzViOGQ5ZDItODgyOS0z
ZGU3LTllYzEtMzAxYjMwZmQ4NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALFTnkU/RXQWssK829qtWHF9XFyG8o1duOJGS8Z5Aj0FhC6Tjp9gtV2K
iPbWKtp0J6h5JlXgYOE5pCHUnD9IlY4B/dSX3RAK6/qmzg6ob3zDcZd+W35MjMlQ
ky/c0hXJ+0rroFs14h1gKWr3XeklEeKKYJSvgBDAuVl801IbzpHf3cZHMMmnyZeV
SYzEte1GxNKR43dKD1oR0b1SJahDPSHdOwj78cLc8PO6r4YJPKN311evBGtR4M1r
claJLijZko+HzWbGvgKUWjxXVM/UIaEX2RI5682TbFERavq+90UdHvkvqZKbD3zj
PxlzCX7bUEncW+9hExzQ4adH9FUn1Wo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:24 2025 by rpki-client