Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e7da2aee-b6ab-3396-9ddc-5212f05ee819.roa
File:                     e7da2aee-b6ab-3396-9ddc-5212f05ee819.roa (raw, json)
Hash identifier:          EEqKpE/BiYgvZU5p7/14kFjTiNDTxeQx9IxXHqpQEUE=
Subject key identifier:   A5:DE:90:D4:6D:50:55:FC:A8:0B:EF:F0:F1:79:84:A0:CD:35:FF:5C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848B4C0D7F53E8F746D6A68D600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e7da2aee-b6ab-3396-9ddc-5212f05ee819.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     54113
IP address blocks:        157.5.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:d7:f5:3e:8f:74:6d:6a:68:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=88866719-02bc-49f5-876d-33c2ea3c6dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:c8:e6:8a:13:34:77:eb:bb:ec:44:9e:f5:
                    08:09:eb:ab:b2:0b:04:c9:ea:1e:be:2e:a1:05:f8:
                    65:c6:79:c9:4e:12:8f:02:d1:af:89:30:e5:61:d1:
                    7d:a0:a2:05:28:e8:91:4b:31:f5:e4:ac:40:24:88:
                    5e:87:a6:a1:6a:fa:38:53:c8:f1:58:1e:9e:aa:1f:
                    aa:4a:d1:75:4a:a6:59:bf:cf:5f:86:f3:98:1e:2c:
                    42:49:d5:4d:4b:21:0e:1a:6e:de:18:a4:2e:87:3e:
                    6c:7a:b9:49:76:1f:f8:c5:12:8e:b1:4f:29:fe:b2:
                    3d:ab:bf:e2:66:d8:08:c9:dd:d7:5f:18:6b:18:63:
                    83:9a:02:9e:56:a1:1f:09:f4:c4:36:c4:3b:1c:dd:
                    8e:68:71:12:cb:15:98:f9:db:57:4c:61:e5:af:5c:
                    f5:ec:74:99:7a:ea:a9:a1:cc:88:b5:3d:fe:ec:4b:
                    2e:f1:d4:5d:8e:51:5b:e7:c6:50:ab:7e:e4:70:5d:
                    97:00:e8:a5:ce:f3:53:8d:de:6c:6a:79:a7:54:bb:
                    1e:ef:f9:0d:57:b0:65:14:14:25:2e:78:7e:89:0a:
                    a7:66:b5:6f:21:3e:99:30:52:ac:7e:bd:2f:c7:df:
                    5a:5f:6c:fd:c8:95:95:a8:f5:64:5c:b8:5b:55:aa:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DE:90:D4:6D:50:55:FC:A8:0B:EF:F0:F1:79:84:A0:CD:35:FF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e7da2aee-b6ab-3396-9ddc-5212f05ee819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:05:cd:40:bb:4c:45:73:14:3e:3f:76:26:fb:ee:35:de:c3:
         df:ed:c3:36:ad:37:8c:3e:6d:6e:8d:aa:e4:96:53:33:8f:c6:
         ef:57:3c:ce:c5:84:23:3a:2d:e4:7a:3e:12:b1:be:4a:31:e0:
         39:6a:48:cb:df:e2:1d:b4:43:e4:50:6a:e9:5b:82:56:84:7a:
         3a:9d:65:63:39:b7:4b:62:37:da:16:a7:97:68:a4:c1:29:fb:
         ab:04:93:64:ee:5f:41:87:d8:fe:fd:5c:ae:19:17:41:52:a5:
         bf:3b:6c:5b:9b:34:fc:a0:29:bc:95:21:a7:9d:3b:c3:21:8d:
         1e:b7:df:d2:72:6e:58:c1:80:84:66:5e:23:ce:22:1a:53:2f:
         5e:73:6d:ed:05:b9:a1:ef:b6:21:7b:d4:1e:65:3e:a5:b7:7e:
         0b:1a:9f:39:1d:cf:09:b1:ec:f7:46:75:21:1d:c0:ac:50:e8:
         bc:eb:47:8a:44:a4:54:19:8a:92:99:05:77:9b:74:7f:75:e4:
         be:34:d1:5c:68:70:3a:0d:15:78:86:37:c9:19:37:0f:21:ad:
         05:16:d3:28:55:5e:0e:87:c0:59:78:e8:e5:77:09:e2:b5:cb:
         0e:eb:6d:bd:03:f2:72:80:ed:a6:e0:89:e1:7c:c4:58:88:dc:
         03:86:f2:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNf1Po90bWpo1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
ODg4NjY3MTktMDJiYy00OWY1LTg3NmQtMzNjMmVhM2M2ZGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPPI5ooTNHfru+xEnvUICeursgsEyeoevi6h
BfhlxnnJThKPAtGviTDlYdF9oKIFKOiRSzH15KxAJIheh6ahavo4U8jxWB6eqh+q
StF1SqZZv89fhvOYHixCSdVNSyEOGm7eGKQuhz5serlJdh/4xRKOsU8p/rI9q7/i
ZtgIyd3XXxhrGGODmgKeVqEfCfTENsQ7HN2OaHESyxWY+dtXTGHlr1z17HSZeuqp
ocyItT3+7Esu8dRdjlFb58ZQq37kcF2XAOilzvNTjd5sanmnVLse7/kNV7BlFBQl
Lnh+iQqnZrVvIT6ZMFKsfr0vx99aX2z9yJWVqPVkXLhbVaok8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXekNRtUFX8qAvv8PF5hKDNNf9cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTdkYTJhZWUtYjZhYi0z
Mzk2LTlkZGMtNTIxMmYwNWVlODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQV5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsFzUC7TEVzFD4/dib77jXew9/twzatN4w+bW6NquSWUzOPxu9XPM7F
hCM6LeR6PhKxvkox4DlqSMvf4h20Q+RQaulbglaEejqdZWM5t0tiN9oWp5dopMEp
+6sEk2TuX0GH2P79XK4ZF0FSpb87bFubNPygKbyVIaedO8MhjR6339JybljBgIRm
XiPOIhpTL15zbe0FuaHvtiF71B5lPqW3fgsanzkdzwmx7PdGdSEdwKxQ6LzrR4pE
pFQZipKZBXebdH915L400VxocDoNFXiGN8kZNw8hrQUW0yhVXg6HwFl46OV3CeK1
yw7rbb0D8nKA7abgieF8xFiI3AOG8oU=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:45:16 2025 by rpki-client