Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa
File:                     51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (raw, json)
Hash identifier:          dD6cUneyFNBfMXENiUx1Hv18LXVtv8oPCAFR6td2iOU=
Subject key identifier:   A8:38:8E:6D:E4:31:D4:28:26:3D:A7:DF:D2:8C:F0:B3:24:36:A2:42
Certificate issuer:       /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
Certificate serial:       010D0C9F43285848BFEBA5D5D57BAB1DC4CC2300
Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     395185
IP address blocks:        23.137.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:a5:d5:d5:7b:ab:1d:c4:cc:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=4f66ec39-8b10-44ca-9bcc-f64bec0e8be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:4c:87:cb:a7:80:46:03:72:1d:15:c6:50:
                    1c:1e:7a:6d:89:a1:4c:d2:ce:0d:61:91:8c:19:c8:
                    45:f0:6b:d4:6d:94:0f:98:06:10:33:f7:73:95:f1:
                    b9:68:05:cf:60:75:e9:51:e9:85:a1:75:81:cb:6f:
                    16:70:d9:f9:78:02:67:ac:8a:af:c7:69:90:2d:24:
                    79:f6:37:b9:10:c7:ba:a5:f1:5f:70:b9:d2:25:63:
                    8d:1c:17:ea:ab:d3:36:74:75:d9:7a:dc:5b:70:eb:
                    bb:d5:c7:d1:8a:c2:b7:f2:49:2a:31:5f:25:87:9f:
                    81:0d:e3:6c:9f:08:a7:3b:7d:ae:19:00:1c:89:62:
                    38:b0:33:77:b2:e5:64:65:7a:1a:63:bb:43:08:14:
                    c6:ff:7b:2b:e8:52:56:96:f5:26:64:10:38:cd:66:
                    0e:fa:1f:fb:d5:ae:17:ee:24:36:71:37:f3:50:b0:
                    be:93:86:4d:2c:4e:e3:09:f8:3a:7f:08:f7:1f:97:
                    4b:27:92:49:8d:2b:ef:41:f9:a7:46:a2:e5:a2:e7:
                    ab:fc:d2:bf:7a:d7:fe:1c:49:0b:ab:fe:75:80:36:
                    f7:d1:c5:ec:54:bf:5d:2f:8b:ab:33:7b:d6:93:b7:
                    14:4a:be:d7:c2:79:50:53:b2:13:6c:8a:9b:e1:ed:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:8E:6D:E4:31:D4:28:26:3D:A7:DF:D2:8C:F0:B3:24:36:A2:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl

            X509v3 Authority Key Identifier:
                keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7a:d2:06:4f:e0:b5:0f:6b:f6:64:e4:42:86:8b:41:81:c9:
         a2:39:a9:48:07:0b:ae:c4:b0:4c:97:29:94:4b:0a:21:14:80:
         c4:21:0a:fe:44:d3:d8:8a:07:93:95:3d:6d:0d:a5:57:73:56:
         9f:29:4e:72:97:89:28:91:a7:a1:d1:44:4e:55:85:86:68:12:
         7b:f0:e5:92:ad:09:42:8f:c6:65:90:8d:87:f8:43:45:a2:4d:
         19:ba:9b:c5:c6:17:38:eb:a2:83:19:67:df:d9:88:c7:b4:c1:
         77:c7:34:bb:b7:46:5d:df:ed:ba:a9:d5:5d:eb:b4:73:4c:92:
         1d:e0:79:4a:79:c3:15:bb:29:02:b4:97:87:8a:4b:4f:75:f3:
         45:46:c3:81:66:4e:f0:cb:6c:c5:b8:bf:74:39:8d:bf:5f:6c:
         76:86:b2:bc:25:54:c9:38:cf:f8:e0:0e:08:3b:43:04:23:cb:
         32:c1:63:18:35:4f:de:22:51:d6:0e:0b:49:74:5f:4a:73:63:
         16:f9:9f:9f:11:1e:fd:5b:38:0e:a3:c1:ce:42:86:ff:76:4b:
         41:87:db:7e:c4:5d:89:29:51:66:21:44:b0:e2:75:ff:38:69:
         5e:22:f3:46:ef:51:5c:eb:09:1e:81:54:1a:39:ad:38:88:f4:
         c6:28:e1:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66XV1XurHcTMIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBjMWJmNjgtOWRjOS00ZDBmLWExN2ItM2QwZjg0NWJi
ZDBmMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NGY2NmVjMzktOGIxMC00NGNhLTliY2MtZjY0YmVjMGU4YmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdNMh8ungEYDch0VxlAcHnptiaFM0s4NYZGM
GchF8GvUbZQPmAYQM/dzlfG5aAXPYHXpUemFoXWBy28WcNn5eAJnrIqvx2mQLSR5
9je5EMe6pfFfcLnSJWONHBfqq9M2dHXZetxbcOu71cfRisK38kkqMV8lh5+BDeNs
nwinO32uGQAciWI4sDN3suVkZXoaY7tDCBTG/3sr6FJWlvUmZBA4zWYO+h/71a4X
7iQ2cTfzULC+k4ZNLE7jCfg6fwj3H5dLJ5JJjSvvQfmnRqLlouer/NK/etf+HEkL
q/51gDb30cXsVL9dL4urM3vWk7cUSr7XwnlQU7ITbIqb4e0N8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKg4jm3kMdQoJj2n39KM8LMkNqJCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGMx
YmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1YmJkMGYvNTFiYTM0ZjItMGY4MC0z
YThiLTgwMmUtMDNhMmFmYzQ4N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBjMWJmNjgtOWRjOS00ZDBmLWEx
N2ItM2QwZjg0NWJiZDBmLzcwYzFiZjY4LTlkYzktNGQwZi1hMTdiLTNkMGY4NDVi
YmQwZi5jcmwwHwYDVR0jBBgwFoAUM7wGYFV++Ssa/p8C4ub26K0mMeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBm
ODQ1YmJkMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4m4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIF60gZP4LUPa/Zk5EKGi0GByaI5qUgHC67EsEyXKZRLCiEUgMQhCv5E
09iKB5OVPW0NpVdzVp8pTnKXiSiRp6HRRE5VhYZoEnvw5ZKtCUKPxmWQjYf4Q0Wi
TRm6m8XGFzjrooMZZ9/ZiMe0wXfHNLu3Rl3f7bqp1V3rtHNMkh3geUp5wxW7KQK0
l4eKS09180VGw4FmTvDLbMW4v3Q5jb9fbHaGsrwlVMk4z/jgDgg7QwQjyzLBYxg1
T94iUdYOC0l0X0pzYxb5n58RHv1bOA6jwc5Chv92S0GH237EXYkpUWYhRLDidf84
aV4i80bvUVzrCR6BVBo5rTiI9MYo4cI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:37 2025 by rpki-client