Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/901d8d49-28b6-3944-8f99-d58261fac2cc.roa
File:                     901d8d49-28b6-3944-8f99-d58261fac2cc.roa (raw, json)
Hash identifier:          bRH9JPLHRE2bvDMtvsQ3qH4qkiORts/cJqcf1ARu+Rk=
Subject key identifier:   13:D7:5D:FC:64:E4:1B:BA:F7:61:B2:D6:2F:F6:65:D8:AF:4E:76:BF
Certificate issuer:       /CN=12c27394-30f8-456b-b6d6-41b0dd1f8ea7
Certificate serial:       010D0C9F432858493B60BA0A0A10FB6454B874E0
Authority key identifier: 34:1C:FE:B7:77:82:40:98:6D:85:72:51:3E:60:FA:22:5D:F8:60:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/901d8d49-28b6-3944-8f99-d58261fac2cc.roa
Signing time:             Tue 18 Mar 2025 19:21:25 +0000
ROA not before:           Tue 18 Mar 2025 19:21:25 +0000
ROA not after:            Mon 16 Jun 2025 19:21:25 +0000
asID:                     6461
IP address blocks:        208.103.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:60:ba:0a:0a:10:fb:64:54:b8:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c27394-30f8-456b-b6d6-41b0dd1f8ea7
        Validity
            Not Before: Mar 18 19:21:25 2025 GMT
            Not After : Jun 16 19:21:25 2025 GMT
        Subject: CN=f227c012-970d-445a-9fff-1ebba0f2eb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1a:4d:ab:26:37:12:48:4e:79:35:36:52:e4:
                    74:28:53:12:63:92:78:69:03:4e:19:2f:f9:ea:a8:
                    41:fa:d4:0d:f6:cc:6e:2a:ec:57:78:c7:3b:87:50:
                    40:b3:43:4f:22:18:b4:1b:dd:ce:31:6c:cf:76:21:
                    ec:7b:ca:eb:29:26:4b:37:d6:ac:63:0e:3f:e2:b6:
                    a5:4f:ee:9a:38:19:6a:6b:e4:bc:93:2b:1e:6d:f9:
                    3b:92:62:b3:18:8d:76:37:02:41:69:7e:2e:45:33:
                    f2:d7:c6:53:0b:c9:47:ad:bb:d7:1b:20:fe:04:31:
                    ba:7f:9d:9b:bf:d1:c2:05:e8:06:fa:33:57:f5:09:
                    66:2c:59:de:93:2a:c5:6f:78:41:e6:da:54:16:b8:
                    5f:9b:fb:bb:24:14:e7:43:b2:a4:05:22:95:70:6c:
                    f8:4e:ad:2d:89:a8:63:7e:ce:c1:94:7b:fa:7d:a3:
                    52:2a:8c:18:dd:00:10:08:58:fc:81:94:75:7c:d9:
                    23:06:6e:69:1e:8d:ba:93:08:68:ed:0d:b4:5f:7f:
                    53:f6:be:e8:33:90:8f:dd:8b:cc:b0:75:f1:c6:2c:
                    8c:01:03:62:2d:af:34:51:be:a8:14:cf:ac:d0:9e:
                    24:2f:25:ca:27:1b:db:a4:e0:90:15:af:3a:4f:5f:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D7:5D:FC:64:E4:1B:BA:F7:61:B2:D6:2F:F6:65:D8:AF:4E:76:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/901d8d49-28b6-3944-8f99-d58261fac2cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.crl

            X509v3 Authority Key Identifier:
                keyid:34:1C:FE:B7:77:82:40:98:6D:85:72:51:3E:60:FA:22:5D:F8:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a7:ac:ae:88:72:41:ba:32:31:12:5a:ec:57:e0:83:5f:be:
         e2:51:82:fc:a7:b8:bf:a2:53:fb:04:3f:a4:2c:10:26:9a:df:
         c6:82:93:49:ce:d8:c4:ba:15:1b:44:e9:7a:e7:c6:7f:f2:ec:
         16:28:2a:d9:3a:aa:96:a6:e4:60:c6:99:8c:4f:83:df:48:4b:
         fa:21:10:fa:95:4a:61:5b:14:2d:35:46:cb:91:1c:9d:96:cc:
         e0:8e:54:9f:04:3e:31:e8:47:f1:6f:66:2d:f1:ce:2d:79:58:
         f2:c4:93:de:99:eb:d8:34:cb:39:51:65:82:e7:58:04:fa:72:
         05:1b:5f:0d:85:38:b0:c3:83:31:b8:6f:79:23:23:c9:00:8f:
         2f:12:db:14:8e:41:1b:fb:6d:28:38:29:47:df:45:e4:a8:6c:
         f1:01:b8:c8:fd:f0:aa:70:1a:9e:23:ef:47:2a:a2:c9:85:c6:
         dc:e2:44:33:d7:18:6c:1c:24:cd:72:81:bb:9c:13:c5:6a:0a:
         3e:5a:15:e6:b4:b8:49:df:ed:0a:e4:e3:bb:05:bf:9d:0e:f0:
         9f:db:6d:ce:58:bc:41:20:ff:3d:94:c5:25:5a:38:b0:8e:52:
         cc:55:eb:b5:f2:a7:99:13:ed:7c:e1:24:8e:b4:36:56:19:67:
         e9:b9:d7:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk7YLoKChD7ZFS4dOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJjMjczOTQtMzBmOC00NTZiLWI2ZDYtNDFiMGRkMWY4
ZWE3MB4XDTI1MDMxODE5MjEyNVoXDTI1MDYxNjE5MjEyNVowLzEtMCsGA1UEAxMk
ZjIyN2MwMTItOTcwZC00NDVhLTlmZmYtMWViYmEwZjJlYjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xpNqyY3EkhOeTU2UuR0KFMSY5J4aQNOGS/5
6qhB+tQN9sxuKuxXeMc7h1BAs0NPIhi0G93OMWzPdiHse8rrKSZLN9asYw4/4ral
T+6aOBlqa+S8kysebfk7kmKzGI12NwJBaX4uRTPy18ZTC8lHrbvXGyD+BDG6f52b
v9HCBegG+jNX9QlmLFnekyrFb3hB5tpUFrhfm/u7JBTnQ7KkBSKVcGz4Tq0tiahj
fs7BlHv6faNSKowY3QAQCFj8gZR1fNkjBm5pHo26kwho7Q20X39T9r7oM5CP3YvM
sHXxxiyMAQNiLa80Ub6oFM+s0J4kLyXKJxvbpOCQFa86T19VWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPXXfxk5Bu692Gy1i/2ZdivTna/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMmMy
NzM5NC0zMGY4LTQ1NmItYjZkNi00MWIwZGQxZjhlYTcvOTAxZDhkNDktMjhiNi0z
OTQ0LThmOTktZDU4MjYxZmFjMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTJjMjczOTQtMzBmOC00NTZiLWI2
ZDYtNDFiMGRkMWY4ZWE3LzEyYzI3Mzk0LTMwZjgtNDU2Yi1iNmQ2LTQxYjBkZDFm
OGVhNy5jcmwwHwYDVR0jBBgwFoAUNBz+t3eCQJhthXJRPmD6Il34YAgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xMmMyNzM5NC0zMGY4LTQ1NmItYjZkNi00MWIw
ZGQxZjhlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ge0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHynrK6IckG6MjESWuxX4INfvuJRgvynuL+iU/sEP6QsECaa38aCk0nO
2MS6FRtE6Xrnxn/y7BYoKtk6qpam5GDGmYxPg99IS/ohEPqVSmFbFC01RsuRHJ2W
zOCOVJ8EPjHoR/FvZi3xzi15WPLEk96Z69g0yzlRZYLnWAT6cgUbXw2FOLDDgzG4
b3kjI8kAjy8S2xSOQRv7bSg4KUffReSobPEBuMj98KpwGp4j70cqosmFxtziRDPX
GGwcJM1ygbucE8VqCj5aFea0uEnf7Qrk47sFv50O8J/bbc5YvEEg/z2UxSVaOLCO
UsxV67Xyp5kT7XzhJI60NlYZZ+m512w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:20 2025 by rpki-client