Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07cfb2a1-6843-33bb-9006-b430b8bc5c25.roa
File:                     07cfb2a1-6843-33bb-9006-b430b8bc5c25.roa (raw, json)
Hash identifier:          l0WxGVMtg/17Es4SfdhJ5QJG75m1Ov9BupJXACEbmMQ=
Subject key identifier:   19:C1:C0:7D:E9:D9:D6:14:C0:89:2B:CB:29:51:C9:71:07:2D:27:F1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584955294B7428DAD186711A9100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07cfb2a1-6843-33bb-9006-b430b8bc5c25.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     2914
IP address blocks:        168.93.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:4b:74:28:da:d1:86:71:1a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=cd94c955-d908-475f-a24a-b2af9d93b3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:aa:95:25:17:82:40:e2:84:3b:2a:55:6e:0b:
                    e4:91:c4:e5:77:2d:08:99:e9:96:d6:36:73:9f:94:
                    3e:c0:51:a6:25:28:3d:b8:5d:d8:90:73:af:e2:c2:
                    c8:be:f4:1b:8d:29:fb:48:b9:1d:ec:31:55:ee:38:
                    e8:c0:e7:48:1a:5c:2f:c1:5c:f5:b6:e5:a0:77:22:
                    b6:ac:24:75:84:12:17:5c:19:c6:99:e9:96:65:1a:
                    92:c4:6e:76:cf:24:ca:ee:4f:db:78:48:99:ec:d2:
                    0d:b0:3d:2e:67:ca:55:6f:67:8a:63:cb:de:1f:80:
                    98:d5:ad:4d:2d:fd:35:0a:27:fd:a4:55:a7:d9:fa:
                    d4:60:ba:4a:d3:2c:0e:fa:6e:9c:1a:a7:b0:b9:4d:
                    f9:7c:50:42:3b:65:13:e6:b9:0a:b7:8a:89:42:05:
                    ba:ca:1a:61:39:31:08:f2:97:a2:cb:ce:c1:bf:2e:
                    fd:74:8c:32:f9:74:5a:46:8d:06:2c:fd:58:ad:97:
                    da:fb:03:df:06:eb:00:1c:c8:78:7a:b4:74:c5:ff:
                    12:29:74:d2:9f:68:38:a0:ba:7e:26:56:98:e1:a5:
                    7e:ca:2d:a9:41:d0:38:58:6c:10:a7:38:41:d3:b7:
                    77:e7:05:56:10:61:1c:bd:d7:56:c0:1e:f1:0e:10:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C1:C0:7D:E9:D9:D6:14:C0:89:2B:CB:29:51:C9:71:07:2D:27:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07cfb2a1-6843-33bb-9006-b430b8bc5c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:2f:c4:bf:0a:33:0b:e4:a9:a4:3a:af:78:c4:dd:1c:24:
         40:bf:17:5b:7a:9a:96:0a:f8:f3:29:62:54:1c:6d:f3:11:74:
         be:7a:54:0f:61:78:c4:b4:b4:48:79:37:1b:89:32:67:48:25:
         ab:0e:42:24:38:f1:47:62:53:4b:8f:97:66:16:24:de:fd:44:
         0a:5b:d9:b4:a1:99:4a:cb:64:01:d8:d3:52:38:17:8c:b2:99:
         ec:53:7b:58:78:52:12:54:3c:3f:08:49:7c:71:d9:7b:f0:40:
         39:b2:ea:dc:9a:26:2d:9c:e6:c6:46:ab:52:54:b4:6b:e5:63:
         f8:be:cd:bf:c9:6a:f3:f7:8f:cf:b0:54:0f:49:f3:3d:a8:80:
         40:ca:fd:00:44:2d:36:a8:ab:c7:39:f2:5d:c9:f1:b6:75:b7:
         a7:aa:f8:18:b7:d9:5d:3a:1f:8f:b4:ce:de:0a:b6:3f:9e:cd:
         de:cb:68:ff:d1:91:65:96:78:38:37:3b:45:1e:35:74:4b:ca:
         79:23:1d:d1:77:90:7e:04:4e:3a:0d:3d:17:fe:21:dd:64:33:
         bd:f3:de:38:6c:70:91:a3:b9:7a:63:05:2e:2f:a3:0f:f9:3d:
         95:bf:61:b9:cb:6f:17:ff:3d:fe:46:73:d7:72:db:8f:4e:f0:
         99:8c:e1:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKUt0KNrRhnEakQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
Y2Q5NGM5NTUtZDkwOC00NzVmLWEyNGEtYjJhZjlkOTNiM2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKqVJReCQOKEOypVbgvkkcTldy0ImemW1jZz
n5Q+wFGmJSg9uF3YkHOv4sLIvvQbjSn7SLkd7DFV7jjowOdIGlwvwVz1tuWgdyK2
rCR1hBIXXBnGmemWZRqSxG52zyTK7k/beEiZ7NINsD0uZ8pVb2eKY8veH4CY1a1N
Lf01Cif9pFWn2frUYLpK0ywO+m6cGqewuU35fFBCO2UT5rkKt4qJQgW6yhphOTEI
8peiy87Bvy79dIwy+XRaRo0GLP1YrZfa+wPfBusAHMh4erR0xf8SKXTSn2g4oLp+
JlaY4aV+yi2pQdA4WGwQpzhB07d35wVWEGEcvddWwB7xDhCbKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnBwH3p2dYUwIkryylRyXEHLSfxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDdjZmIyYTEtNjg0My0z
M2JiLTkwMDYtYjQzMGI4YmM1YzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyyL8S/CjML5KmkOq94xN0cJEC/F1t6mpYK+PMpYlQcbfMRdL56VA9h
eMS0tEh5NxuJMmdIJasOQiQ48UdiU0uPl2YWJN79RApb2bShmUrLZAHY01I4F4yy
mexTe1h4UhJUPD8ISXxx2XvwQDmy6tyaJi2c5sZGq1JUtGvlY/i+zb/JavP3j8+w
VA9J8z2ogEDK/QBELTaoq8c58l3J8bZ1t6eq+Bi32V06H4+0zt4Ktj+ezd7LaP/R
kWWWeDg3O0UeNXRLynkjHdF3kH4ETjoNPRf+Id1kM73z3jhscJGjuXpjBS4vow/5
PZW/YbnLbxf/Pf5Gc9dy249O8JmM4cg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:44:18 2025 by rpki-client