Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
File:                     55a4b51a-6d67-315f-a016-1c040d115980.roa (raw, json)
Hash identifier:          Cq/au5hNMzxXyAWokShXxdE0rm0Aow3O1K7aET7218g=
Subject key identifier:   5A:EB:90:6C:2A:C4:3D:4F:D9:8F:5C:FE:C4:86:41:5E:8D:C6:D0:3A
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F4328584900216110ED59F4A1F8BF2540
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     21693
IP address blocks:        192.234.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:61:10:ed:59:f4:a1:f8:bf:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=da577e81-390b-448e-a412-36b5268c4c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:4a:8c:5e:db:50:74:86:75:19:52:90:38:
                    bc:75:01:fa:f6:f8:64:11:28:04:e7:5f:68:60:ac:
                    8f:b9:ea:34:f5:a9:8c:a1:6a:78:95:f1:c8:79:4c:
                    a9:cc:01:66:e1:11:4f:af:e0:f7:37:95:0f:60:c7:
                    56:a5:ef:c5:62:1f:25:9d:92:1c:47:a4:c8:a0:c3:
                    41:d6:86:16:a9:e8:e8:2c:df:cf:6e:81:4d:41:4a:
                    93:0c:d8:f5:2e:d9:a0:48:85:6b:39:bd:4b:d7:4f:
                    39:76:34:b8:50:d4:0b:17:8d:22:72:26:97:10:61:
                    9f:43:8f:87:0a:76:d6:2e:37:ba:8c:1d:78:80:95:
                    96:bb:47:3b:2d:0f:87:2f:f0:96:d3:10:39:87:42:
                    7f:d6:08:f6:c8:57:46:d0:4b:53:66:48:c1:8a:73:
                    f9:ec:f8:81:f4:06:5b:44:3f:f0:99:4a:1e:a8:03:
                    31:f1:1d:e8:5b:be:b8:dc:cb:30:46:62:7e:96:c3:
                    7f:28:f3:77:e5:f7:eb:7d:97:0a:45:4c:35:ba:41:
                    e8:dc:9b:40:b9:a6:ed:9b:fe:f2:68:86:be:d5:31:
                    7d:af:54:3d:6c:96:62:46:7e:32:f5:47:1b:f8:00:
                    31:37:6b:a2:e6:07:d7:27:25:71:bc:ba:9c:60:c8:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EB:90:6C:2A:C4:3D:4F:D9:8F:5C:FE:C4:86:41:5E:8D:C6:D0:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f3:46:0c:ae:2c:73:a7:90:be:1e:b7:20:fb:08:47:70:da:
         cb:06:79:ab:da:c1:c2:8a:94:9e:4a:75:3e:28:d5:9b:9e:49:
         b6:83:f7:3c:71:99:df:db:8f:ba:07:e1:c9:01:8b:a6:8b:fe:
         c8:33:67:10:a1:8d:bc:e4:99:61:ed:48:9e:97:b2:c4:01:6a:
         b6:0e:94:0c:62:e5:95:99:bf:de:ac:62:b6:6a:9d:33:4d:7f:
         ca:84:2b:0b:0b:04:23:8f:30:6d:d0:07:5a:b2:d8:0e:c7:e9:
         72:7b:23:10:a2:7d:49:40:77:37:74:21:54:24:a0:3e:8f:5c:
         fc:af:a2:bb:dc:7b:c5:d5:85:de:bf:04:9c:28:e0:3f:6d:c0:
         c3:eb:b9:46:c2:b0:8d:21:0d:76:d4:f9:31:a5:59:18:7c:da:
         73:d1:ff:0b:56:8d:5b:6a:55:c1:7d:cf:89:4f:1e:80:d6:89:
         b1:76:02:a1:38:51:5c:82:17:8f:84:45:5d:c7:e3:12:be:1c:
         a1:65:b1:fe:e8:aa:dc:20:6d:00:f5:1e:c7:c5:4c:3e:a4:1c:
         60:0e:ae:12:0f:9b:6a:ce:11:f5:ff:72:c9:6c:b7:bd:8d:dc:
         01:77:34:d4:e7:1d:99:ab:d9:77:f8:8c:a1:43:04:af:bb:28:
         ec:e1:66:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWEQ7Vn0ofi/JUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk4MWY2YjgtYzMyMy00MTFkLWI2YjgtMDNiYjQ0ZDJh
ZGIxMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZGE1NzdlODEtMzkwYi00NDhlLWE0MTItMzZiNTI2OGM0YzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5VKjF7bUHSGdRlSkDi8dQH69vhkESgE519o
YKyPueo09amMoWp4lfHIeUypzAFm4RFPr+D3N5UPYMdWpe/FYh8lnZIcR6TIoMNB
1oYWqejoLN/PboFNQUqTDNj1LtmgSIVrOb1L1085djS4UNQLF40iciaXEGGfQ4+H
CnbWLje6jB14gJWWu0c7LQ+HL/CW0xA5h0J/1gj2yFdG0EtTZkjBinP57PiB9AZb
RD/wmUoeqAMx8R3oW7643MswRmJ+lsN/KPN35ffrfZcKRUw1ukHo3JtAuabtm/7y
aIa+1TF9r1Q9bJZiRn4y9Ucb+AAxN2ui5gfXJyVxvLqcYMipiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFrrkGwqxD1P2Y9c/sSGQV6NxtA6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTgx
ZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2JiNDRkMmFkYjEvNTVhNGI1MWEtNmQ2Ny0z
MTVmLWEwMTYtMWMwNDBkMTE1OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk4MWY2YjgtYzMyMy00MTFkLWI2
YjgtMDNiYjQ0ZDJhZGIxLzM5ODFmNmI4LWMzMjMtNDExZC1iNmI4LTAzYmI0NGQy
YWRiMS5jcmwwHwYDVR0jBBgwFoAUZcFvpzmgevfeykEi3I5W4/e8dL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zOTgxZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2Ji
NDRkMmFkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOqHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3zRgyuLHOnkL4etyD7CEdw2ssGeavawcKKlJ5KdT4o1ZueSbaD9zxx
md/bj7oH4ckBi6aL/sgzZxChjbzkmWHtSJ6XssQBarYOlAxi5ZWZv96sYrZqnTNN
f8qEKwsLBCOPMG3QB1qy2A7H6XJ7IxCifUlAdzd0IVQkoD6PXPyvorvce8XVhd6/
BJwo4D9twMPruUbCsI0hDXbU+TGlWRh82nPR/wtWjVtqVcF9z4lPHoDWibF2AqE4
UVyCF4+ERV3H4xK+HKFlsf7oqtwgbQD1HsfFTD6kHGAOrhIPm2rOEfX/cslst72N
3AF3NNTnHZmr2Xf4jKFDBK+7KOzhZik=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:42 2025 by rpki-client