Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/982946d9-324a-3a1b-a33b-187db1bc93c2.roa
File:                     982946d9-324a-3a1b-a33b-187db1bc93c2.roa (raw, json)
Hash identifier:          C2RuK+C3f8AUTUCMwPl3Q19+Gkq/tn5tyH4ZZyQZPjM=
Subject key identifier:   30:92:8F:C4:D6:B0:12:69:D3:89:19:B7:9D:3E:89:4B:11:2B:D4:4D
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584953C44E21CFE2F29CFD828600
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/982946d9-324a-3a1b-a33b-187db1bc93c2.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     206092
IP address blocks:        98.159.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4e:21:cf:e2:f2:9c:fd:82:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=94a47944-c797-4152-a0c1-ae953f21afc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:67:61:ef:7b:64:ea:41:86:41:76:a1:ef:37:
                    b1:fe:a4:e8:a0:19:8b:e7:e2:96:de:97:07:1f:17:
                    3c:a5:6a:46:7e:18:b0:ea:e1:89:a7:f1:4f:e8:9c:
                    76:74:9b:a3:d2:96:a2:d3:b0:f4:a2:04:13:d4:6b:
                    61:cd:d7:95:c8:e3:1c:08:03:49:0d:23:10:fc:30:
                    b1:32:b5:ea:b1:b4:4e:cd:16:29:d6:57:42:f5:c9:
                    05:c7:6c:93:0d:8a:99:26:25:c3:a3:5c:98:22:2f:
                    a1:d3:e3:7d:d5:4c:03:3b:fe:03:90:32:25:4d:7b:
                    c2:2e:e3:7f:fb:2e:49:6f:65:de:90:19:23:8c:48:
                    e8:45:78:cd:eb:08:93:5f:32:6d:ef:40:df:18:db:
                    5e:47:59:b0:9b:8b:44:47:f3:3c:b1:db:6f:e3:2f:
                    6d:6d:02:11:23:32:2f:ee:0d:a3:25:31:69:9e:0a:
                    99:8c:d8:83:13:f2:5b:94:ca:50:e1:87:80:f4:6c:
                    27:ea:10:67:49:6a:4c:ea:91:71:be:86:f8:23:8f:
                    c6:f2:6d:08:a7:26:60:6d:b5:4a:e7:14:29:64:18:
                    96:fe:17:f5:25:08:24:da:aa:42:61:0d:85:1b:d8:
                    9f:6e:17:e4:40:7b:7e:2e:1c:30:14:8f:99:04:a2:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:8F:C4:D6:B0:12:69:D3:89:19:B7:9D:3E:89:4B:11:2B:D4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/982946d9-324a-3a1b-a33b-187db1bc93c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:cb:21:a3:86:37:b4:22:99:3b:fe:26:d1:92:2b:38:21:81:
         38:68:3f:f5:91:50:04:86:0e:64:5b:63:24:6b:8e:6b:3d:b8:
         92:ee:c1:83:78:7d:09:64:e2:12:fa:be:e5:46:46:8d:09:ea:
         65:dd:1e:86:b5:26:cb:09:18:a5:b1:e2:91:b9:11:a7:06:24:
         1d:be:1b:fd:47:c7:1d:83:55:fa:36:e3:90:8e:d2:39:53:e9:
         f1:75:14:38:da:7a:87:5c:66:e4:b9:40:2e:c3:cb:8e:c9:58:
         40:95:b0:9a:67:64:55:8b:1a:8e:4b:a3:83:cf:b4:a5:bd:1e:
         98:31:a7:f4:13:ee:56:e0:92:76:b2:d9:9e:91:7f:07:b3:01:
         10:58:7b:df:b5:f3:73:cf:b3:f5:a5:73:46:90:cd:b7:47:01:
         9d:bc:8b:f7:ce:4d:8a:28:32:f0:65:34:24:28:23:51:e0:80:
         dd:1c:f3:40:99:7b:b5:3d:77:64:93:5e:79:4f:b8:e2:57:ff:
         cc:50:6f:f0:e0:83:7a:0a:be:53:f8:bb:39:02:8f:d5:6a:ce:
         72:7a:67:dc:fa:40:6e:9e:9b:2b:c4:6e:63:9d:1c:f9:fe:d0:
         79:10:a4:6b:e8:cc:65:0d:11:4e:c2:2a:01:0c:67:72:30:06:
         e6:bd:ec:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxE4hz+LynP2ChgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
OTRhNDc5NDQtYzc5Ny00MTUyLWEwYzEtYWU5NTNmMjFhZmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmdh73tk6kGGQXah7zex/qTooBmL5+KW3pcH
Hxc8pWpGfhiw6uGJp/FP6Jx2dJuj0pai07D0ogQT1GthzdeVyOMcCANJDSMQ/DCx
MrXqsbROzRYp1ldC9ckFx2yTDYqZJiXDo1yYIi+h0+N91UwDO/4DkDIlTXvCLuN/
+y5Jb2XekBkjjEjoRXjN6wiTXzJt70DfGNteR1mwm4tER/M8sdtv4y9tbQIRIzIv
7g2jJTFpngqZjNiDE/JblMpQ4YeA9Gwn6hBnSWpM6pFxvob4I4/G8m0IpyZgbbVK
5xQpZBiW/hf1JQgk2qpCYQ2FG9ifbhfkQHt+LhwwFI+ZBKL+xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCSj8TWsBJp04kZt50+iUsRK9RNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvOTgyOTQ2ZDktMzI0YS0z
YTFiLWEzM2ItMTg3ZGIxYmM5M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp8rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfLIaOGN7QimTv+JtGSKzghgThoP/WRUASGDmRbYyRrjms9uJLuwYN4
fQlk4hL6vuVGRo0J6mXdHoa1JssJGKWx4pG5EacGJB2+G/1Hxx2DVfo245CO0jlT
6fF1FDjaeodcZuS5QC7Dy47JWECVsJpnZFWLGo5Lo4PPtKW9Hpgxp/QT7lbgknay
2Z6RfwezARBYe9+183PPs/Wlc0aQzbdHAZ28i/fOTYooMvBlNCQoI1HggN0c80CZ
e7U9d2STXnlPuOJX/8xQb/Dgg3oKvlP4uzkCj9VqznJ6Z9z6QG6emyvEbmOdHPn+
0HkQpGvozGUNEU7CKgEMZ3IwBua97Ng=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:09:50 2025 by rpki-client