Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/8e2ea041-1ead-3091-8c95-6513cd5d1e12.roa
File:                     8e2ea041-1ead-3091-8c95-6513cd5d1e12.roa (raw, json)
Hash identifier:          8PpnJ9pMpV5EaQ8JzNuBDsvBjz23zjjroOW+F0g3S10=
Subject key identifier:   0D:52:9C:BF:D4:89:F0:4C:16:AB:AD:E7:F0:6D:6B:C7:D8:0D:67:31
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F43285848BBBB873D744E1AC8599F3D40
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/8e2ea041-1ead-3091-8c95-6513cd5d1e12.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     23341
IP address blocks:        143.55.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:87:3d:74:4e:1a:c8:59:9f:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=ff9837a2-795f-4df8-8173-069b77e397a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:f1:46:4d:dc:cf:84:75:f6:72:0b:e5:f3:
                    92:33:2e:57:4a:5a:f7:5e:39:d3:85:14:6a:b4:53:
                    29:51:25:88:69:74:82:a4:85:45:b2:d1:da:d8:a1:
                    d1:19:e5:d9:25:4b:52:37:ab:55:27:22:a2:94:76:
                    fd:36:24:33:f2:f8:3f:96:74:66:90:7b:47:ee:d8:
                    ff:8b:08:0c:85:9a:a3:c2:ad:2d:69:53:46:af:59:
                    1a:e7:11:89:53:cc:ae:b8:91:d0:53:83:9c:66:da:
                    01:e5:94:bc:e6:fb:68:9c:b3:e6:25:d6:98:62:cb:
                    b0:48:bc:f4:be:73:b2:ac:79:3a:fb:b7:d6:db:27:
                    41:fe:b4:84:89:35:2f:8a:42:78:34:3d:96:1a:e6:
                    b1:f8:57:fe:da:e3:4e:70:11:74:9a:f4:91:47:70:
                    c6:08:0e:97:1b:61:7e:56:c8:9d:da:eb:ed:78:52:
                    eb:f2:31:37:19:e4:9e:94:94:f7:2b:f8:24:ae:a0:
                    9b:ec:e9:3b:8f:98:47:e4:03:2d:35:4a:8d:0e:1c:
                    c0:a4:46:91:76:cb:69:3c:31:4e:3f:03:38:fe:ab:
                    64:cb:07:c4:9b:f3:b1:19:79:9d:79:d0:92:31:8d:
                    1b:bd:d9:72:d0:c2:f5:d8:60:72:c7:69:2b:e4:ad:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:9C:BF:D4:89:F0:4C:16:AB:AD:E7:F0:6D:6B:C7:D8:0D:67:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/8e2ea041-1ead-3091-8c95-6513cd5d1e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:09:f4:66:5d:8d:6d:9a:34:c2:74:7f:bb:49:c9:66:d3:05:
         8f:6e:7c:25:4a:bf:1f:6f:de:e1:4c:c2:34:e1:dc:88:45:ff:
         6c:91:44:a1:f4:09:7d:6a:23:1a:13:c1:44:4e:5e:52:57:97:
         93:90:e7:10:0c:41:c2:55:9d:75:1b:4a:5d:40:37:54:1d:04:
         2e:70:ca:d2:7a:30:ff:83:f3:35:3a:f2:70:a2:18:5d:ef:0d:
         4d:71:93:d5:f4:f3:83:22:9f:89:0c:87:40:37:7c:63:35:83:
         76:fa:9e:ca:c2:31:ce:7e:56:14:4d:59:44:61:72:cd:6b:5f:
         13:59:4b:ed:0f:11:78:49:ba:21:1a:9a:1c:74:54:5b:f7:23:
         ed:ba:cc:20:86:c8:18:06:a7:f3:a9:06:13:40:db:85:3c:c6:
         33:e9:94:45:f8:2e:a1:ce:11:25:75:d9:44:ce:f5:ae:1e:f0:
         f3:c0:40:ca:b9:f7:0d:b8:17:7c:9d:a6:26:de:c8:a9:0a:da:
         14:1b:bd:48:b5:83:63:c4:0f:85:d2:0b:e0:78:26:9f:c0:e7:
         73:64:45:6d:1d:60:d4:fe:fe:45:0f:c1:6c:3c:ca:23:29:14:
         dc:c8:51:d1:79:1f:b8:b1:6a:4f:45:a4:00:36:80:7a:b6:e1:
         75:7c:4e:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4c9dE4ayFmfPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI2ZmQyNjItOTRlYS00ZTMzLWFmM2UtMjEyYWJlMGZj
NjI4MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZmY5ODM3YTItNzk1Zi00ZGY4LTgxNzMtMDY5Yjc3ZTM5N2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbvxRk3cz4R19nIL5fOSMy5XSlr3XjnThRRq
tFMpUSWIaXSCpIVFstHa2KHRGeXZJUtSN6tVJyKilHb9NiQz8vg/lnRmkHtH7tj/
iwgMhZqjwq0taVNGr1ka5xGJU8yuuJHQU4OcZtoB5ZS85vtonLPmJdaYYsuwSLz0
vnOyrHk6+7fW2ydB/rSEiTUvikJ4ND2WGuax+Ff+2uNOcBF0mvSRR3DGCA6XG2F+
Vsid2uvteFLr8jE3GeSelJT3K/gkrqCb7Ok7j5hH5AMtNUqNDhzApEaRdstpPDFO
PwM4/qtkywfEm/OxGXmdedCSMY0bvdly0ML12GByx2kr5K2i8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA1SnL/UifBMFqut5/Bta8fYDWcxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjZm
ZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJhYmUwZmM2MjgvOGUyZWEwNDEtMWVhZC0z
MDkxLThjOTUtNjUxM2NkNWQxZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWI2ZmQyNjItOTRlYS00ZTMzLWFm
M2UtMjEyYWJlMGZjNjI4LzViNmZkMjYyLTk0ZWEtNGUzMy1hZjNlLTIxMmFiZTBm
YzYyOC5jcmwwHwYDVR0jBBgwFoAUNjzIUHmlbKUy9HhU//w8/Bj4M/cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YjZmZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJh
YmUwZmM2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzcNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEJ9GZdjW2aNMJ0f7tJyWbTBY9ufCVKvx9v3uFMwjTh3IhF/2yRRKH0
CX1qIxoTwUROXlJXl5OQ5xAMQcJVnXUbSl1AN1QdBC5wytJ6MP+D8zU68nCiGF3v
DU1xk9X084Min4kMh0A3fGM1g3b6nsrCMc5+VhRNWURhcs1rXxNZS+0PEXhJuiEa
mhx0VFv3I+26zCCGyBgGp/OpBhNA24U8xjPplEX4LqHOESV12UTO9a4e8PPAQMq5
9w24F3ydpibeyKkK2hQbvUi1g2PED4XSC+B4Jp/A53NkRW0dYNT+/kUPwWw8yiMp
FNzIUdF5H7ixak9FpAA2gHq24XV8TgA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:46 2025 by rpki-client