Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e267bd34-f679-3fde-8379-e8b361efa6ca.roa
File:                     e267bd34-f679-3fde-8379-e8b361efa6ca.roa (raw, json)
Hash identifier:          hlvHUHFoCTMz8Kj698uZdcN4lay6NbDqfTqgf+oCdE8=
Subject key identifier:   16:D6:A9:EC:63:36:EE:23:CF:C0:5B:90:CF:97:DA:4C:12:AB:91:78
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA94BDFE15B48F2296D80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e267bd34-f679-3fde-8379-e8b361efa6ca.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        166.88.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a9:4b:df:e1:5b:48:f2:29:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=cfe3dc27-026e-4282-bce3-a1bee868bb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bb:5c:b0:54:97:8c:5f:6e:90:d4:33:43:5e:
                    39:fa:bb:0c:bb:34:24:7d:3b:b5:2c:75:6a:6b:7b:
                    de:c4:e8:55:67:fa:d2:e1:b3:85:51:58:0b:85:79:
                    f4:24:b2:fd:af:82:ac:10:17:ed:ce:69:52:93:70:
                    9b:c8:34:f5:3a:3d:55:96:98:ce:0e:e4:fe:30:05:
                    1b:da:dc:de:5b:83:1f:d0:e2:6b:af:da:ef:08:ff:
                    0d:36:b5:b9:45:5d:26:1d:ec:80:52:88:13:a1:0b:
                    29:32:8f:54:c1:7a:5f:f7:06:b4:a2:cf:49:65:4f:
                    bd:10:e2:d2:c9:63:e9:ab:f2:e3:02:45:2b:6e:0d:
                    26:f8:47:c4:33:bc:8e:74:fc:11:14:52:f8:fd:70:
                    2d:4d:04:cd:b1:30:8d:d7:81:55:45:c8:2d:c7:e8:
                    c6:b5:ca:98:69:3f:61:7a:a0:ba:4e:f5:3f:5a:7b:
                    57:12:f0:4c:d5:9b:7d:fd:1e:b6:70:e1:f2:ef:ff:
                    7a:74:24:a2:59:19:81:c5:19:0c:fc:74:59:16:53:
                    c0:2e:3b:57:d5:cf:83:18:52:80:fd:f6:8e:a0:d8:
                    bd:2c:cf:af:5a:c0:18:1f:9d:04:29:1a:70:07:c5:
                    94:12:95:79:3b:e2:3b:b3:a5:31:5d:41:84:be:fa:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D6:A9:EC:63:36:EE:23:CF:C0:5B:90:CF:97:DA:4C:12:AB:91:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e267bd34-f679-3fde-8379-e8b361efa6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:ec:5a:f8:ea:78:d5:38:ea:09:11:1e:d6:63:a8:ac:f7:
         2b:f9:8b:6d:49:f0:9f:59:55:78:e5:5f:79:9c:f7:fa:61:0c:
         b5:03:f6:c2:7a:fb:8b:6f:aa:a3:b9:4c:48:84:5f:84:b2:27:
         cf:08:21:fe:95:d9:d4:3b:e8:01:90:da:1d:cb:b2:82:7e:9a:
         98:7a:23:ce:5e:b3:bf:1d:23:dc:1d:aa:54:71:18:e7:12:7c:
         f8:41:26:d8:cb:25:85:ca:a0:83:48:3a:36:f3:95:c3:e8:1d:
         4e:43:aa:e7:ff:23:7e:69:65:16:a2:ae:01:a6:95:8c:bd:2b:
         a1:e4:f3:31:4d:14:20:77:18:7a:2a:ae:1e:c1:48:10:8d:4c:
         65:5c:7b:17:58:ae:99:0d:63:7c:51:3e:03:4b:9f:63:4e:f4:
         f8:2f:43:e0:41:1b:0a:05:f5:c1:1c:2d:e4:f4:b7:7e:1d:de:
         3e:95:92:9e:58:ed:87:14:e7:7a:1f:b4:2c:a6:5a:b0:87:e1:
         00:2f:b5:68:7c:ea:a8:2e:54:c5:61:dc:9f:bc:90:11:a1:9e:
         e2:af:75:c6:dc:a0:89:0d:c2:8d:2f:da:b3:4d:aa:dc:de:ff:
         da:ef:67:f3:f1:91:fc:f0:17:30:8d:d8:44:7f:dd:5d:63:15:
         67:0c:d9:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6lL3+FbSPIpbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
Y2ZlM2RjMjctMDI2ZS00MjgyLWJjZTMtYTFiZWU4NjhiYjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLtcsFSXjF9ukNQzQ145+rsMuzQkfTu1LHVq
a3vexOhVZ/rS4bOFUVgLhXn0JLL9r4KsEBftzmlSk3CbyDT1Oj1VlpjODuT+MAUb
2tzeW4Mf0OJrr9rvCP8NNrW5RV0mHeyAUogToQspMo9UwXpf9wa0os9JZU+9EOLS
yWPpq/LjAkUrbg0m+EfEM7yOdPwRFFL4/XAtTQTNsTCN14FVRcgtx+jGtcqYaT9h
eqC6TvU/WntXEvBM1Zt9/R62cOHy7/96dCSiWRmBxRkM/HRZFlPALjtX1c+DGFKA
/faOoNi9LM+vWsAYH50EKRpwB8WUEpV5O+I7s6UxXUGEvvq5hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbWqexjNu4jz8BbkM+X2kwSq5F4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTI2N2JkMzQtZjY3OS0z
ZmRlLTgzNzktZThiMzYxZWZhNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGc7Fr46njVOOoJER7WY6is9yv5i21J8J9ZVXjlX3mc9/phDLUD9sJ6
+4tvqqO5TEiEX4SyJ88IIf6V2dQ76AGQ2h3LsoJ+mph6I85es78dI9wdqlRxGOcS
fPhBJtjLJYXKoINIOjbzlcPoHU5Dquf/I35pZRairgGmlYy9K6Hk8zFNFCB3GHoq
rh7BSBCNTGVcexdYrpkNY3xRPgNLn2NO9PgvQ+BBGwoF9cEcLeT0t34d3j6Vkp5Y
7YcU53oftCymWrCH4QAvtWh86qguVMVh3J+8kBGhnuKvdcbcoIkNwo0v2rNNqtze
/9rvZ/PxkfzwFzCN2ER/3V1jFWcM2Ts=
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:50:47 2025 by rpki-client