Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51553066-3c25-3bd0-a0d2-b63fb6a46c9d.roa
File:                     51553066-3c25-3bd0-a0d2-b63fb6a46c9d.roa (raw, json)
Hash identifier:          QLpY97Vbl29RxGRuHeuk4mmgsHvrSGJNmRi+PghlYto=
Subject key identifier:   03:B7:88:DF:BD:39:E1:2A:B2:51:B4:E9:18:40:1C:E2:30:63:56:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C51C4ECD3010859425C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51553066-3c25-3bd0-a0d2-b63fb6a46c9d.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     397207
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c5:1c:4e:cd:30:10:85:94:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=bf4fdffe-ab19-4076-bff1-572bd574537f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:5f:de:e5:e8:1d:f0:ba:7a:ae:ad:8a:4a:
                    24:e9:54:3d:1a:39:1a:43:2c:41:09:f1:61:68:43:
                    d5:c5:53:b6:48:c8:0c:a6:95:cb:c1:aa:59:fe:f9:
                    45:61:41:e9:10:e2:23:42:be:21:11:13:06:f6:a2:
                    d1:7c:98:43:02:bc:a9:24:fc:69:d9:59:7e:58:fa:
                    09:93:68:a2:d8:c8:67:13:81:e6:8a:d9:e3:2c:36:
                    2e:aa:90:c2:3d:85:58:dd:36:19:36:24:b4:32:0b:
                    cf:3b:2c:f0:72:59:b3:fe:7a:94:91:36:fe:f1:2e:
                    c2:81:ea:56:07:00:f6:f0:62:82:66:92:45:e0:dc:
                    f9:76:af:a3:8f:40:55:74:ee:4d:33:12:9b:94:df:
                    42:f1:aa:50:b9:b9:ff:b7:f5:a8:e8:79:4a:a3:da:
                    cc:e0:9e:36:22:e6:c4:19:de:81:09:31:e4:6a:81:
                    0f:02:1b:7a:71:9b:93:75:92:37:89:58:aa:f0:9e:
                    f8:f7:82:57:38:09:e9:53:b9:5b:9c:89:fb:e6:a1:
                    a9:fe:b0:9c:7b:66:3f:5a:83:b7:b8:aa:39:cd:31:
                    1a:fb:96:1f:bb:f6:6b:35:34:db:e4:35:4c:79:80:
                    14:8e:3e:7d:31:6c:47:01:ec:34:f5:67:26:09:d4:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:88:DF:BD:39:E1:2A:B2:51:B4:E9:18:40:1C:E2:30:63:56:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51553066-3c25-3bd0-a0d2-b63fb6a46c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2f:47:4f:0a:ae:7c:80:34:ae:b0:29:99:98:50:b5:38:cb:
         27:b6:11:43:b9:54:47:43:df:0d:b6:f5:8c:78:fd:00:21:92:
         0f:47:75:29:68:08:d4:63:9d:8e:57:db:5e:e3:62:48:47:62:
         1c:a8:29:60:62:9c:33:7f:be:37:e1:2e:c6:5c:b4:7d:4b:61:
         e2:13:52:3b:a4:a0:48:5d:15:0e:8b:6a:b7:42:fc:1c:5d:c6:
         67:99:6f:89:e6:8a:e9:17:3a:09:96:d0:9d:15:0c:c9:0c:5b:
         ff:f6:82:6d:50:b6:70:c1:e5:a1:a0:28:4d:fe:96:0e:b0:48:
         41:5d:22:dd:7c:fb:e1:c9:bc:c5:3e:be:61:24:61:0d:6b:6d:
         66:d0:91:9a:f5:9c:bd:29:1a:1e:5d:96:96:d1:f6:00:bc:28:
         c6:98:53:be:bf:34:f4:0a:8b:8b:88:bf:ee:78:d2:7a:a2:9c:
         29:79:ee:a5:63:3e:2e:98:8f:74:e6:7d:e1:52:af:38:21:f2:
         aa:59:10:78:b5:e1:11:7f:9a:63:77:fd:e9:75:af:43:62:3c:
         95:c8:02:98:07:2e:31:13:74:a7:0d:2e:a5:91:40:49:3a:f6:
         a3:d9:b4:05:cd:47:db:41:86:52:4d:ab:55:81:74:6d:01:88:
         c3:cc:9e:14
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMUcTs0wEIWUJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
YmY0ZmRmZmUtYWIxOS00MDc2LWJmZjEtNTcyYmQ1NzQ1MzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVFf3uXoHfC6eq6tikok6VQ9GjkaQyxBCfFh
aEPVxVO2SMgMppXLwapZ/vlFYUHpEOIjQr4hERMG9qLRfJhDArypJPxp2Vl+WPoJ
k2ii2MhnE4HmitnjLDYuqpDCPYVY3TYZNiS0MgvPOyzwclmz/nqUkTb+8S7CgepW
BwD28GKCZpJF4Nz5dq+jj0BVdO5NMxKblN9C8apQubn/t/Wo6HlKo9rM4J42IubE
Gd6BCTHkaoEPAht6cZuTdZI3iViq8J7494JXOAnpU7lbnIn75qGp/rCce2Y/WoO3
uKo5zTEa+5Yfu/ZrNTTb5DVMeYAUjj59MWxHAew09WcmCdQgqQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAO3iN+9OeEqslG06RhAHOIwY1bWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTE1NTMwNjYtM2MyNS0z
YmQwLWEwZDItYjYzZmI2YTQ2YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBTL0dPCq58gDSusCmZmFC1OMsnthFDuVRHQ98NtvWMeP0AIZIPR3Up
aAjUY52OV9te42JIR2IcqClgYpwzf7434S7GXLR9S2HiE1I7pKBIXRUOi2q3Qvwc
XcZnmW+J5orpFzoJltCdFQzJDFv/9oJtULZwweWhoChN/pYOsEhBXSLdfPvhybzF
Pr5hJGENa21m0JGa9Zy9KRoeXZaW0fYAvCjGmFO+vzT0CouLiL/ueNJ6opwpee6l
Yz4umI905n3hUq84IfKqWRB4teERf5pjd/3pda9DYjyVyAKYBy4xE3SnDS6lkUBJ
Ovaj2bQFzUfbQYZSTatVgXRtAYjDzJ4U
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:48 2025 by rpki-client