Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/61d90c80-c9a3-3af4-946a-30352c46c7e0.roa
File:                     61d90c80-c9a3-3af4-946a-30352c46c7e0.roa (raw, json)
Hash identifier:          ZBd4jcYZe8mqX7WD9iIPOg3OVqcmP4ehT3s92Fwqkrs=
Subject key identifier:   C5:BC:3A:36:60:71:6B:00:CC:4C:9D:55:A8:9B:03:CE:B1:BF:AD:CF
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F43285848DA70FAA35AAEF2598E89F620
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/61d90c80-c9a3-3af4-946a-30352c46c7e0.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     19281
IP address blocks:        149.112.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fa:a3:5a:ae:f2:59:8e:89:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=6932d5c2-9261-4f05-a36e-d99d7abe8098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fa:66:8b:f9:c2:b3:ed:ac:79:ed:9b:c5:c2:
                    c0:d7:22:c8:ad:9d:a2:e3:1a:a4:60:ee:12:c4:c6:
                    80:34:80:9c:2e:84:ca:02:a9:0e:e2:e0:0d:4b:3f:
                    06:b0:6d:34:4c:10:8e:58:78:cc:aa:5d:a1:25:5f:
                    8a:80:5e:60:f8:f0:e0:37:67:e6:26:e3:e9:e4:74:
                    6d:55:fc:47:00:d6:e3:c7:af:46:08:a5:9c:a3:d0:
                    03:ec:44:fc:ca:78:e9:33:e2:a1:ce:e6:c3:0d:a7:
                    8b:2b:c1:ef:dc:18:70:22:b0:49:f2:ef:69:5d:e1:
                    e5:9c:76:cb:79:86:66:d4:73:35:64:e2:c0:9d:bc:
                    bd:b5:5c:11:c2:f4:e0:d6:bf:11:b1:82:2b:73:6a:
                    e3:fc:80:10:01:93:0c:c9:d1:27:1f:ca:77:1b:5d:
                    05:2f:27:a9:02:c3:89:e2:78:d4:15:1f:db:25:7f:
                    ec:4f:ca:92:4a:01:86:6d:54:79:d3:58:dc:be:72:
                    fc:39:86:74:50:38:84:25:96:e9:6f:4e:a8:11:3e:
                    31:d1:b8:b0:77:c2:31:4e:c4:eb:8d:bd:d5:4d:d3:
                    41:4e:39:87:f4:6d:f3:8a:5c:43:0f:8b:d1:a6:1c:
                    59:7c:f5:4c:b1:a0:c4:5c:e6:3d:13:32:20:b2:8b:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BC:3A:36:60:71:6B:00:CC:4C:9D:55:A8:9B:03:CE:B1:BF:AD:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/61d90c80-c9a3-3af4-946a-30352c46c7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b9:0c:94:99:10:6f:40:7c:d7:fd:b5:ea:f8:a1:c2:04:84:
         a2:37:09:49:b4:b2:ef:45:0c:97:92:04:e0:8d:a5:a6:6b:15:
         fb:cb:2a:4c:c2:14:a5:ed:28:28:7c:3e:e6:45:b4:d3:b7:36:
         ed:1c:9b:cb:be:df:09:84:fb:27:86:c6:0b:d3:bf:82:3b:ea:
         da:1f:3c:c1:0f:10:99:d9:50:68:45:86:b7:80:d8:ed:67:9a:
         e5:10:3f:f8:05:b7:b2:8e:f2:2f:c7:60:08:7c:da:d7:f1:35:
         4f:25:a4:64:bc:24:0f:33:b9:80:bc:b0:00:e4:b9:77:2c:2c:
         15:aa:bc:95:56:76:72:86:d8:3a:f3:50:96:27:9a:d5:d1:eb:
         b2:b8:10:79:2c:0b:72:a1:bd:a2:e5:96:c4:7b:b0:2c:66:e5:
         15:e8:86:c6:b3:73:66:e7:f3:b8:94:18:c0:f5:89:36:29:65:
         27:ac:6c:35:66:c0:68:bf:a7:1a:7d:13:ba:9c:4b:ac:93:9a:
         70:0f:b6:19:74:44:97:61:5a:3b:cc:c4:ff:ec:8e:d5:7c:02:
         1d:83:15:5f:5b:26:28:85:1e:06:d8:e7:1a:c5:a2:f3:f0:c4:
         c1:fe:73:26:0d:17:83:dc:02:38:32:53:94:61:c8:0e:01:41:
         3b:3f:a6:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPqjWq7yWY6J9iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThmY2VmMzEtYmM2MS00MjE3LWE2NDgtMmQ1YmIwMGM5
M2E5MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NjkzMmQ1YzItOTI2MS00ZjA1LWEzNmUtZDk5ZDdhYmU4MDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fpmi/nCs+2see2bxcLA1yLIrZ2i4xqkYO4S
xMaANICcLoTKAqkO4uANSz8GsG00TBCOWHjMql2hJV+KgF5g+PDgN2fmJuPp5HRt
VfxHANbjx69GCKWco9AD7ET8ynjpM+KhzubDDaeLK8Hv3BhwIrBJ8u9pXeHlnHbL
eYZm1HM1ZOLAnby9tVwRwvTg1r8RsYIrc2rj/IAQAZMMydEnH8p3G10FLyepAsOJ
4njUFR/bJX/sT8qSSgGGbVR501jcvnL8OYZ0UDiEJZbpb06oET4x0biwd8IxTsTr
jb3VTdNBTjmH9G3zilxDD4vRphxZfPVMsaDEXOY9EzIgsou2HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMW8OjZgcWsAzEydVaibA86xv63PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZj
ZWYzMS1iYzYxLTQyMTctYTY0OC0yZDViYjAwYzkzYTkvNjFkOTBjODAtYzlhMy0z
YWY0LTk0NmEtMzAzNTJjNDZjN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNThmY2VmMzEtYmM2MS00MjE3LWE2
NDgtMmQ1YmIwMGM5M2E5LzU4ZmNlZjMxLWJjNjEtNDIxNy1hNjQ4LTJkNWJiMDBj
OTNhOS5jcmwwHwYDVR0jBBgwFoAUVLP5RXnTuHPWUn9Y82AjBARQS2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZjZWYzMS1iYzYxLTQyMTctYTY0OC0yZDVi
YjAwYzkzYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+5DJSZEG9AfNf9ter4ocIEhKI3CUm0su9FDJeSBOCNpaZrFfvLKkzC
FKXtKCh8PuZFtNO3Nu0cm8u+3wmE+yeGxgvTv4I76tofPMEPEJnZUGhFhreA2O1n
muUQP/gFt7KO8i/HYAh82tfxNU8lpGS8JA8zuYC8sADkuXcsLBWqvJVWdnKG2Drz
UJYnmtXR67K4EHksC3KhvaLllsR7sCxm5RXohsazc2bn87iUGMD1iTYpZSesbDVm
wGi/pxp9E7qcS6yTmnAPthl0RJdhWjvMxP/sjtV8Ah2DFV9bJiiFHgbY5xrFovPw
xMH+cyYNF4PcAjgyU5RhyA4BQTs/pp4=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:02:37 2025 by rpki-client