Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31be3737-57fc-30db-b2f0-288f41b5339e.roa
File:                     31be3737-57fc-30db-b2f0-288f41b5339e.roa (raw, json)
Hash identifier:          GInQDaCDGn5OK70e2UAu/KiNtgJ9LDWaNaq1YHLpLUg=
Subject key identifier:   5D:F2:CD:D5:2D:2E:E8:37:03:05:A7:D1:2A:9A:9B:00:F4:0C:F8:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF32F3275075174D6C0300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31be3737-57fc-30db-b2f0-288f41b5339e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        24.1.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:32:f3:27:50:75:17:4d:6c:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=2ea4f77c-37b0-45ab-8794-baec555b7238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:00:43:a5:14:c2:19:ca:61:4f:b6:dd:a3:
                    10:1a:9f:5c:97:af:80:90:98:ab:d6:b7:7b:bd:26:
                    b2:b4:b3:9d:a3:6a:2c:3f:61:10:82:1c:58:6f:77:
                    67:0d:ac:e6:5b:f4:cb:2b:3d:3e:1a:7c:cf:99:10:
                    f8:e1:a9:96:80:8e:c6:22:9d:73:54:36:df:52:5f:
                    69:c9:7d:ea:b3:05:2d:7d:f7:23:1d:8c:fd:ab:0f:
                    40:12:5c:1a:3b:dd:2d:46:73:26:29:88:a0:6e:69:
                    69:10:48:1c:4d:23:7d:1d:3b:5c:fc:76:08:e2:cb:
                    45:35:77:fa:05:62:0f:4d:5c:71:0d:33:72:e0:ad:
                    eb:6b:92:d7:6c:39:9d:a7:b3:ae:c7:53:cd:a8:9f:
                    2f:61:36:e4:58:e8:1b:28:76:da:31:29:8a:cc:50:
                    d5:88:94:4e:dc:32:cc:8f:f5:99:c6:a4:7b:3b:bf:
                    ac:77:2d:05:33:af:93:1c:8a:d5:8f:ea:e7:70:ae:
                    2d:ae:68:45:b9:76:8f:14:47:d9:0b:3f:af:ff:e9:
                    21:6b:de:4a:a4:ce:cf:0d:ff:bf:07:9f:00:7c:09:
                    a1:c2:6a:6a:ef:c1:41:61:23:bf:2b:0f:30:37:95:
                    59:f3:d7:6d:7b:ea:c3:6b:dd:cf:07:ec:74:ea:e0:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:CD:D5:2D:2E:E8:37:03:05:A7:D1:2A:9A:9B:00:F4:0C:F8:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31be3737-57fc-30db-b2f0-288f41b5339e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9b:26:64:29:6b:77:32:80:9c:5a:a3:79:40:fc:84:da:bb:
         d9:65:e5:69:ac:9d:f5:03:97:1f:1b:24:8c:77:5e:f5:99:17:
         0c:69:9b:ab:a2:15:54:c1:4c:8d:a9:1f:d1:0c:28:98:d3:29:
         dc:6f:65:a7:e6:2b:90:97:e5:c3:7e:7c:bf:67:f8:44:cb:d9:
         8f:9c:80:31:a1:32:40:05:5b:4d:00:d6:34:64:bf:b0:57:a3:
         f5:6f:d9:c4:a1:ef:f7:4b:6a:89:6e:d0:d0:bc:ce:d3:3e:43:
         10:97:b7:79:ee:40:3a:d1:50:17:fb:67:a8:85:fc:a5:0c:c1:
         19:bd:05:37:a7:80:b2:7c:c5:b1:a1:fe:7f:85:be:26:e9:6c:
         5d:c5:ff:2e:36:ba:1d:83:7e:8d:70:73:f4:7e:b4:e2:14:2e:
         43:23:9d:1e:7a:5d:a0:d1:a5:c6:9b:31:5e:b1:c6:fc:f8:af:
         0f:74:4d:29:24:ce:27:3c:4a:04:9c:a2:0b:ce:ca:50:9a:9d:
         9c:ef:36:b5:ee:ee:52:65:29:e0:a0:24:92:ba:a2:c1:f0:1b:
         4a:89:09:6a:2c:8a:58:ff:fd:87:43:f6:98:08:52:72:01:bb:
         b3:33:13:d2:16:fb:8c:94:dc:62:7e:ff:4f:b5:93:af:55:1e:
         f8:ca:9e:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrzLzJ1B1F01sAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MmVhNGY3N2MtMzdiMC00NWFiLTg3OTQtYmFlYzU1NWI3MjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+YAQ6UUwhnKYU+23aMQGp9cl6+AkJir1rd7
vSaytLOdo2osP2EQghxYb3dnDazmW/TLKz0+GnzPmRD44amWgI7GIp1zVDbfUl9p
yX3qswUtffcjHYz9qw9AElwaO90tRnMmKYigbmlpEEgcTSN9HTtc/HYI4stFNXf6
BWIPTVxxDTNy4K3ra5LXbDmdp7Oux1PNqJ8vYTbkWOgbKHbaMSmKzFDViJRO3DLM
j/WZxqR7O7+sdy0FM6+THIrVj+rncK4trmhFuXaPFEfZCz+v/+kha95KpM7PDf+/
B58AfAmhwmpq78FBYSO/Kw8wN5VZ89dte+rDa93PB+x06uB9mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3yzdUtLug3AwWn0SqamwD0DPgYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzFiZTM3MzctNTdmYy0z
MGRiLWIyZjAtMjg4ZjQxYjUzMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAFPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCbJmQpa3cygJxao3lA/ITau9ll5WmsnfUDlx8bJIx3XvWZFwxpm6ui
FVTBTI2pH9EMKJjTKdxvZafmK5CX5cN+fL9n+ETL2Y+cgDGhMkAFW00A1jRkv7BX
o/Vv2cSh7/dLaolu0NC8ztM+QxCXt3nuQDrRUBf7Z6iF/KUMwRm9BTengLJ8xbGh
/n+FvibpbF3F/y42uh2Dfo1wc/R+tOIULkMjnR56XaDRpcabMV6xxvz4rw90TSkk
zic8SgScogvOylCanZzvNrXu7lJlKeCgJJK6osHwG0qJCWosilj//YdD9pgIUnIB
u7MzE9IW+4yU3GJ+/0+1k69VHvjKnsc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:06 2025 by rpki-client