Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa
File:                     e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa (raw, json)
Hash identifier:          QS0DVerXH9GyjSrbRJUike0lfhx8ioRJc8hXHS0C5wY=
Subject key identifier:   F0:A3:E3:A0:EC:FC:26:44:E4:FE:C5:FC:A8:ED:86:9A:F3:20:F9:1C
Certificate issuer:       /CN=a8b4c7d3-7599-471e-a1ea-6de7b1582c5f
Certificate serial:       010D0C9F432858492CAE9CE66151483880106F80
Authority key identifier: B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     400914
IP address blocks:        209.178.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:9c:e6:61:51:48:38:80:10:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b4c7d3-7599-471e-a1ea-6de7b1582c5f
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a0ff0d21-9fc3-4f11-a1cd-8bf3802a6870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:53:49:45:e4:29:68:6d:c5:f3:e5:ae:5d:
                    6c:81:99:ab:01:58:fc:52:3d:3f:8c:e1:d3:d7:4f:
                    96:95:d7:a6:33:a8:f5:bb:46:0a:e2:6a:d0:a5:07:
                    3c:00:92:af:60:63:d0:a2:85:04:d1:a1:8a:cc:b5:
                    03:b3:b0:43:aa:92:ff:04:16:eb:58:f7:a5:2e:28:
                    1c:20:bb:23:ad:7e:8d:c8:4b:48:51:bf:7f:6a:59:
                    84:87:67:30:ea:27:57:05:f2:bc:5e:86:40:88:45:
                    47:5d:cd:b1:e4:d3:c3:9a:d4:80:e2:2d:94:00:d0:
                    17:4a:53:d9:bc:5d:ae:60:05:9a:22:81:6a:64:3c:
                    1f:1c:03:db:34:68:31:94:8f:f7:04:91:40:5c:81:
                    c2:fe:a8:70:f9:14:41:a0:e1:09:41:71:9a:af:bb:
                    2a:45:04:ad:3b:ca:77:b0:c6:2b:25:da:ac:a2:5b:
                    59:68:67:8e:2b:86:2f:3d:f5:7f:ec:d0:87:a6:22:
                    88:74:a3:2b:62:a7:4c:eb:ef:d2:83:4d:cb:bd:ad:
                    81:90:73:5b:b3:42:93:59:bb:5c:92:cc:73:40:8e:
                    62:76:09:8f:e8:88:05:87:6a:ab:8e:ea:4e:cc:9a:
                    c5:68:90:83:af:ea:c0:d2:30:b8:b6:fd:eb:74:0d:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A3:E3:A0:EC:FC:26:44:E4:FE:C5:FC:A8:ED:86:9A:F3:20:F9:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.crl

            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e1:2f:a3:d0:10:99:8f:31:c7:34:0c:b8:55:c1:59:25:fe:
         7b:75:5a:c4:36:02:8c:74:d8:4a:e1:c4:67:53:a0:c7:24:b0:
         7f:05:ac:d8:00:ef:c1:69:78:60:1e:d2:80:08:45:03:a9:b8:
         33:65:30:f9:c3:7d:32:d7:77:24:06:b1:ce:64:b9:8f:c4:21:
         21:fd:3b:a8:f0:cd:33:99:78:cf:78:47:ee:62:60:be:fd:a9:
         cf:70:bb:17:fb:23:e6:17:07:e6:20:1d:88:46:03:9d:ec:f2:
         60:c8:a4:9e:38:d7:f1:89:37:7e:9e:f0:7c:5c:ca:0e:34:ed:
         6a:d5:bf:c4:00:ef:dd:86:d2:d8:de:4f:44:7e:ba:00:a6:76:
         d0:89:54:2e:de:22:26:a8:8a:9c:e7:80:71:d1:57:ff:cf:01:
         11:cf:36:12:79:ab:ba:a6:68:4d:08:fe:12:38:c5:c2:24:23:
         00:7b:3f:17:26:f0:31:f6:a6:b5:94:a2:48:b6:02:cb:f2:04:
         a1:f9:29:ae:97:ec:22:1e:f1:8a:fe:00:25:8f:e5:5e:19:7f:
         ba:06:68:7f:c5:1a:e1:c4:ed:2b:08:eb:16:cd:e9:55:0a:94:
         21:ae:ee:45:61:7d:96:44:f5:03:62:0e:3b:0c:1e:8a:26:0f:
         d3:71:da:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpzmYVFIOIAQb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThiNGM3ZDMtNzU5OS00NzFlLWExZWEtNmRlN2IxNTgy
YzVmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YTBmZjBkMjEtOWZjMy00ZjExLWExY2QtOGJmMzgwMmE2ODcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipZTSUXkKWhtxfPlrl1sgZmrAVj8Uj0/jOHT
10+WldemM6j1u0YK4mrQpQc8AJKvYGPQooUE0aGKzLUDs7BDqpL/BBbrWPelLigc
ILsjrX6NyEtIUb9/almEh2cw6idXBfK8XoZAiEVHXc2x5NPDmtSA4i2UANAXSlPZ
vF2uYAWaIoFqZDwfHAPbNGgxlI/3BJFAXIHC/qhw+RRBoOEJQXGar7sqRQStO8p3
sMYrJdqsoltZaGeOK4YvPfV/7NCHpiKIdKMrYqdM6+/Sg03Lva2BkHNbs0KTWbtc
ksxzQI5idgmP6IgFh2qrjupOzJrFaJCDr+rA0jC4tv3rdA3jnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCj46Ds/CZE5P7F/KjthprzIPkcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOGI0
YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3YjE1ODJjNWYvZTNlNDk3ZjEtZjhmNS0z
NTJiLTk5NmUtY2NkMWE3MGU5NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYThiNGM3ZDMtNzU5OS00NzFlLWEx
ZWEtNmRlN2IxNTgyYzVmL2E4YjRjN2QzLTc1OTktNDcxZS1hMWVhLTZkZTdiMTU4
MmM1Zi5jcmwwHwYDVR0jBBgwFoAUsaewuEUeFVnBHrAqXXddxTsk7skwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOGI0YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3
YjE1ODJjNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bL2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjhL6PQEJmPMcc0DLhVwVkl/nt1WsQ2Aox02ErhxGdToMcksH8FrNgA
78FpeGAe0oAIRQOpuDNlMPnDfTLXdyQGsc5kuY/EISH9O6jwzTOZeM94R+5iYL79
qc9wuxf7I+YXB+YgHYhGA53s8mDIpJ441/GJN36e8Hxcyg407WrVv8QA792G0tje
T0R+ugCmdtCJVC7eIiaoipzngHHRV//PARHPNhJ5q7qmaE0I/hI4xcIkIwB7Pxcm
8DH2prWUoki2AsvyBKH5Ka6X7CIe8Yr+ACWP5V4Zf7oGaH/FGuHE7SsI6xbN6VUK
lCGu7kVhfZZE9QNiDjsMHoomD9Nx2jk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:06:46 2025 by rpki-client