Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/eb627df6-6cdc-3a44-959a-40959e824bc4.roa
File:                     eb627df6-6cdc-3a44-959a-40959e824bc4.roa (raw, json)
Hash identifier:          9EM+1G0/cMtjWm+R2BqMZlu0Mubvl4pc0TK1hgv111o=
Subject key identifier:   13:FB:3C:54:8D:40:C7:0E:0C:33:EA:62:D7:59:61:DC:ED:88:D1:30
Certificate issuer:       /CN=4190a890-d7ce-4ea4-a558-53090be01bab
Certificate serial:       010D0C9F432858483F803B67CAFF8F4EC27D4140
Authority key identifier: AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/eb627df6-6cdc-3a44-959a-40959e824bc4.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     15967
IP address blocks:        185.248.212.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:3b:67:ca:ff:8f:4e:c2:7d:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4190a890-d7ce-4ea4-a558-53090be01bab
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=e5a9f3b7-d293-4aa1-862a-6dc487806bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:51:d9:76:97:93:6a:7c:e0:b3:5d:40:c6:59:
                    69:e0:5d:70:90:fa:f5:fc:45:04:f1:07:36:b4:e5:
                    19:d5:7e:b9:7b:1b:9f:f5:2b:c6:49:c4:6d:85:2e:
                    66:2b:61:10:1b:64:a4:7b:d9:02:77:f6:26:ca:65:
                    70:72:38:c3:6f:1d:aa:1b:b2:dd:2f:f2:a1:c7:c2:
                    7f:8f:b6:fb:99:02:1d:19:ae:9b:49:5f:54:d2:dd:
                    a4:4e:da:6f:6e:85:87:a8:26:32:36:ef:01:aa:e0:
                    b9:6c:fa:3a:b6:a4:8b:3a:f0:87:f1:fd:57:8a:e5:
                    cf:2a:27:13:5f:76:18:30:ee:2e:7b:5e:5c:be:f1:
                    41:3a:74:ca:d9:97:da:53:af:8d:08:71:5d:3e:57:
                    e9:6a:50:a7:7a:f9:41:3e:17:5c:5b:fd:84:46:d5:
                    0e:09:d0:46:b2:ed:87:4f:91:9d:5c:b6:ef:58:b7:
                    00:81:57:80:f2:ef:c9:4b:62:d8:43:cd:b1:fc:20:
                    1d:0b:d2:64:85:41:2a:79:9e:ff:42:b0:78:85:0b:
                    16:36:4b:7c:27:26:a2:41:d7:95:2a:ab:aa:22:a7:
                    97:3e:75:7b:e5:97:2c:0c:82:8e:98:75:5d:0d:2f:
                    30:56:73:b1:ed:d5:6a:34:78:ce:ed:b1:9c:ef:86:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FB:3C:54:8D:40:C7:0E:0C:33:EA:62:D7:59:61:DC:ED:88:D1:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/eb627df6-6cdc-3a44-959a-40959e824bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.crl

            X509v3 Authority Key Identifier:
                keyid:AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:88:45:82:8f:54:4b:ce:91:74:36:2d:4b:42:d5:0a:1b:eb:
         e3:ae:06:c2:60:14:58:95:93:27:d7:70:37:52:10:bb:03:d3:
         21:7c:c5:75:15:54:cd:d9:2f:71:9c:a4:dd:a7:1e:1d:87:f2:
         93:07:ea:6b:e5:c8:45:8e:e9:cf:f4:75:bd:d4:ce:d0:89:34:
         fa:8a:30:d5:e0:ea:d3:f5:40:28:c5:b2:95:67:16:7b:b0:a1:
         e1:31:2a:17:29:18:1f:30:00:e4:38:9d:c7:aa:de:1d:99:49:
         1f:bb:55:22:c8:88:62:dd:ba:78:44:28:84:3a:de:e2:0f:c5:
         c5:07:4a:ee:5f:37:c1:25:05:a0:de:b4:9d:e2:b9:5f:05:be:
         e0:96:96:37:1e:0a:05:03:23:89:f0:44:f8:b0:ed:ef:66:04:
         07:33:1b:0f:e9:a2:5b:54:2a:81:5a:d8:e9:36:45:9e:b1:a6:
         1e:1a:83:f3:68:90:66:62:ac:e6:3e:dc:88:79:6c:0b:d6:07:
         4c:87:80:39:fa:10:9e:82:bd:54:4d:f6:7a:b5:98:7d:49:f4:
         d8:41:ac:95:18:30:44:81:0b:44:28:40:d0:14:7d:cd:58:f3:
         36:f7:20:27:48:d7:d1:f7:28:3f:ed:67:42:08:1d:47:8b:72:
         71:76:6f:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gDtnyv+PTsJ9QUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE5MGE4OTAtZDdjZS00ZWE0LWE1NTgtNTMwOTBiZTAx
YmFiMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
ZTVhOWYzYjctZDI5My00YWExLTg2MmEtNmRjNDg3ODA2YmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlHZdpeTanzgs11Axllp4F1wkPr1/EUE8Qc2
tOUZ1X65exuf9SvGScRthS5mK2EQG2Ske9kCd/YmymVwcjjDbx2qG7LdL/Khx8J/
j7b7mQIdGa6bSV9U0t2kTtpvboWHqCYyNu8BquC5bPo6tqSLOvCH8f1XiuXPKicT
X3YYMO4ue15cvvFBOnTK2ZfaU6+NCHFdPlfpalCnevlBPhdcW/2ERtUOCdBGsu2H
T5GdXLbvWLcAgVeA8u/JS2LYQ82x/CAdC9JkhUEqeZ7/QrB4hQsWNkt8JyaiQdeV
KquqIqeXPnV75ZcsDIKOmHVdDS8wVnOx7dVqNHjO7bGc74bIGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBP7PFSNQMcODDPqYtdZYdztiNEwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MTkw
YTg5MC1kN2NlLTRlYTQtYTU1OC01MzA5MGJlMDFiYWIvZWI2MjdkZjYtNmNkYy0z
YTQ0LTk1OWEtNDA5NTllODI0YmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDE5MGE4OTAtZDdjZS00ZWE0LWE1
NTgtNTMwOTBiZTAxYmFiLzQxOTBhODkwLWQ3Y2UtNGVhNC1hNTU4LTUzMDkwYmUw
MWJhYi5jcmwwHwYDVR0jBBgwFoAUqqiYuKebRtSbTh2iWwPItLEh4KswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MTkwYTg5MC1kN2NlLTRlYTQtYTU1OC01MzA5
MGJlMDFiYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufjUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWIRYKPVEvOkXQ2LUtC1Qob6+OuBsJgFFiVkyfXcDdSELsD0yF8xXUV
VM3ZL3GcpN2nHh2H8pMH6mvlyEWO6c/0db3UztCJNPqKMNXg6tP1QCjFspVnFnuw
oeExKhcpGB8wAOQ4nceq3h2ZSR+7VSLIiGLdunhEKIQ63uIPxcUHSu5fN8ElBaDe
tJ3iuV8FvuCWljceCgUDI4nwRPiw7e9mBAczGw/poltUKoFa2Ok2RZ6xph4ag/No
kGZirOY+3Ih5bAvWB0yHgDn6EJ6CvVRN9nq1mH1J9NhBrJUYMESBC0QoQNAUfc1Y
8zb3ICdI19H3KD/tZ0IIHUeLcnF2b/g=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:30 2025 by rpki-client