Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42bd2af7-1b49-38dd-adfb-63e5f94cfb92.roa
File:                     42bd2af7-1b49-38dd-adfb-63e5f94cfb92.roa (raw, json)
Hash identifier:          BXcpIj5kz6gM629IFeevVt0DqfSwD9cgy5KYMxAJJnE=
Subject key identifier:   1A:B9:A4:86:B5:7F:D8:48:CA:D3:C1:E8:01:63:E2:D7:54:4D:FC:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB16D132A7D5EDC686AE240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42bd2af7-1b49-38dd-adfb-63e5f94cfb92.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        174.160.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:6d:13:2a:7d:5e:dc:68:6a:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=e5d90983-1715-40fe-bf6e-59711613bc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:54:57:30:f1:09:bc:77:30:e8:09:e7:86:
                    ca:ee:29:19:07:ad:3c:7b:d2:c6:d7:db:91:43:92:
                    c8:cc:7b:c1:f3:be:c6:90:f8:44:4d:69:48:13:6d:
                    01:7a:fa:ed:56:fd:8c:ef:88:51:ac:6c:ce:03:94:
                    d2:81:87:60:84:02:4b:ea:a6:f9:2a:cc:d4:6d:49:
                    94:1e:18:81:69:20:9d:fa:e4:4c:7e:77:57:ce:5b:
                    9c:41:8d:21:8c:8f:bf:00:77:00:7c:cb:12:a3:79:
                    d3:d7:96:f0:e1:f3:31:6d:04:42:db:20:b1:3f:34:
                    2c:b1:2f:6d:e8:f4:21:09:e7:a2:24:d6:30:1d:c6:
                    ab:d2:7f:96:5f:df:94:a2:31:a4:b4:42:a9:1f:91:
                    d7:12:84:02:20:78:d1:b3:8a:95:33:0b:0d:72:38:
                    71:8f:4b:4a:27:84:5f:6c:39:ea:98:8c:4e:48:6e:
                    26:c4:fb:32:0f:c9:1c:49:19:3d:63:a9:95:21:61:
                    e3:35:54:84:a8:cc:11:9a:f8:95:2e:50:be:c9:b8:
                    39:4d:b8:1d:ba:82:ab:b5:67:26:94:43:7d:0d:6e:
                    0a:3f:61:f2:c4:f2:d4:1a:cc:82:b8:98:30:17:c8:
                    cf:21:d3:e3:b4:9c:d5:f9:17:ef:6c:b3:55:44:af:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:A4:86:B5:7F:D8:48:CA:D3:C1:E8:01:63:E2:D7:54:4D:FC:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42bd2af7-1b49-38dd-adfb-63e5f94cfb92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.160.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:7c:8f:d9:be:4e:45:ee:2b:5a:59:7e:6a:78:b6:49:73:f7:
         49:a5:41:d3:c4:03:70:bd:e2:ad:70:ec:85:a2:9a:7c:ad:5d:
         a3:de:c3:7b:9b:95:3c:8e:75:b4:26:74:d1:a3:fa:8d:5d:6f:
         ec:8b:b9:d6:9c:82:d3:7b:81:ee:80:65:89:1b:20:cb:df:3d:
         05:83:09:41:63:68:b5:77:7c:f5:99:b4:90:c5:5a:b4:b1:bb:
         87:1b:b5:6d:37:53:d0:d1:1e:c3:2c:10:2d:bc:11:99:60:27:
         03:2e:76:5b:e1:26:22:37:d9:24:44:96:5a:7b:c3:a2:12:bf:
         3c:8f:b6:e9:7e:1e:2a:08:b7:6e:b3:0b:91:2a:d1:8b:11:a1:
         ff:9c:d5:d9:c3:ae:53:41:be:5f:a2:e2:e3:53:64:13:e0:48:
         e2:38:9e:74:fb:f6:99:c2:d0:07:ac:0e:36:c2:e8:8d:f2:d7:
         b2:b4:02:bf:7d:b8:c2:1d:0e:7d:40:96:9f:b6:6c:3e:1b:fc:
         5f:b4:45:33:1e:94:e2:99:87:28:4e:03:10:12:19:58:bf:61:
         93:43:6e:77:61:b2:19:f1:a2:a0:76:23:32:00:e1:45:5a:80:
         1f:ee:66:8f:84:59:db:a4:8e:be:7b:50:05:54:f3:c2:09:c2:
         ca:db:c6:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssW0TKn1e3Ghq4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTVkOTA5ODMtMTcxNS00MGZlLWJmNmUtNTk3MTE2MTNiYzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0tUVzDxCbx3MOgJ54bK7ikZB608e9LG19uR
Q5LIzHvB877GkPhETWlIE20BevrtVv2M74hRrGzOA5TSgYdghAJL6qb5KszUbUmU
HhiBaSCd+uRMfndXzlucQY0hjI+/AHcAfMsSo3nT15bw4fMxbQRC2yCxPzQssS9t
6PQhCeeiJNYwHcar0n+WX9+UojGktEKpH5HXEoQCIHjRs4qVMwsNcjhxj0tKJ4Rf
bDnqmIxOSG4mxPsyD8kcSRk9Y6mVIWHjNVSEqMwRmviVLlC+ybg5TbgduoKrtWcm
lEN9DW4KP2HyxPLUGsyCuJgwF8jPIdPjtJzV+RfvbLNVRK+qwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBq5pIa1f9hIytPB6AFj4tdUTfyYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJiZDJhZjctMWI0OS0z
OGRkLWFkZmItNjNlNWY5NGNmYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqAmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANJ8j9m+TkXuK1pZfmp4tklz90mlQdPEA3C94q1w7IWimnytXaPew3ub
lTyOdbQmdNGj+o1db+yLudacgtN7ge6AZYkbIMvfPQWDCUFjaLV3fPWZtJDFWrSx
u4cbtW03U9DRHsMsEC28EZlgJwMudlvhJiI32SREllp7w6ISvzyPtul+HioIt26z
C5Eq0YsRof+c1dnDrlNBvl+i4uNTZBPgSOI4nnT79pnC0AesDjbC6I3y17K0Ar99
uMIdDn1Alp+2bD4b/F+0RTMelOKZhyhOAxASGVi/YZNDbndhshnxoqB2IzIA4UVa
gB/uZo+EWdukjr57UAVU88IJwsrbxhw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:11 2025 by rpki-client