Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa
File:                     12f832c3-109c-3d9b-b69b-2fab2a90e816.roa (raw, json)
Hash identifier:          f/Ts+ZLYhwp9kDdvB7hBgjHVfAsF0UDqqB0JzsmyGMA=
Subject key identifier:   81:11:24:E6:5B:A2:22:AF:8B:D7:9D:A2:C4:00:86:01:66:45:07:FA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848CB9399E974569A93C4F539E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa
Signing time:             Thu 06 Feb 2025 18:13:23 +0000
ROA not before:           Thu 06 Feb 2025 18:13:23 +0000
ROA not after:            Wed 07 May 2025 17:13:23 +0000
asID:                     7029
IP address blocks:        173.191.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:93:99:e9:74:56:9a:93:c4:f5:39:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  6 18:13:23 2025 GMT
            Not After : May  7 17:13:23 2025 GMT
        Subject: CN=dcc5ece6-b096-4582-8148-cdf88bb736e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:68:e1:5f:0b:90:90:91:aa:e7:ee:c5:47:ac:
                    86:34:d2:7d:08:0f:12:ac:db:2e:b8:f1:73:79:7a:
                    2d:b0:2c:aa:aa:1d:23:6a:4a:18:8f:44:3c:98:2b:
                    08:9e:1b:b9:41:71:51:7b:0c:6d:19:2c:02:3c:c4:
                    9b:8b:e9:74:08:0c:e1:1b:b4:bb:30:06:e5:18:af:
                    c0:62:d2:d5:e9:4b:38:ce:9b:26:bd:1e:b7:b0:7f:
                    ea:59:d9:56:a5:c8:8f:84:05:5c:2d:e5:02:8c:be:
                    fa:00:63:62:5e:b7:24:c1:7e:70:8e:2f:46:c0:2a:
                    ec:d6:46:f4:c8:3f:7f:b0:99:73:de:00:d9:e4:ef:
                    5f:97:76:fc:bf:54:72:6e:3a:dc:8b:cf:ea:1e:a2:
                    3d:b2:a8:bc:ec:3d:4f:12:e6:e7:8f:0d:bc:84:e7:
                    8f:ac:00:8a:c7:18:e6:d7:fc:bb:d9:05:4b:f4:70:
                    49:42:87:63:19:2b:ad:86:8f:00:c4:f9:b1:dc:cf:
                    3b:b7:91:c4:18:f6:ed:23:70:8c:91:0c:37:e0:b7:
                    ec:98:e9:e5:10:b5:8f:56:96:35:13:b4:ef:c3:1b:
                    13:c7:9f:9e:a4:5f:af:5c:68:c3:4d:76:84:1e:57:
                    ab:4d:95:96:17:c1:f9:71:5a:85:1e:89:13:0f:3e:
                    7b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:11:24:E6:5B:A2:22:AF:8B:D7:9D:A2:C4:00:86:01:66:45:07:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.191.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:5b:c6:71:f5:79:0d:e0:b6:d9:48:aa:1a:9e:30:e2:03:
         f1:68:b2:0f:32:20:1d:7b:7f:d2:82:aa:60:17:79:2a:0a:80:
         92:ec:16:92:17:97:ed:58:a7:8e:07:65:2f:8c:44:68:5c:36:
         ca:f7:7e:75:34:f2:99:95:bf:ce:50:a4:b3:f6:e5:80:dc:a3:
         1a:b7:22:b8:ea:c6:94:3e:8f:b5:71:ab:db:76:5f:8d:49:ea:
         b7:a8:e9:45:41:94:ae:97:ff:3b:51:c4:45:11:d5:8b:29:7f:
         49:8c:d5:63:31:fe:35:23:f9:5e:a1:0a:27:25:7b:62:cf:2f:
         93:8b:f4:e9:2b:0e:71:b5:df:70:72:4c:13:30:cf:c6:59:e1:
         63:4f:11:dd:1c:13:0b:78:2f:02:a0:b9:8c:4c:16:1a:c2:d8:
         62:e3:c8:90:10:e8:27:16:d1:60:a8:48:80:eb:bd:0e:b5:ee:
         84:31:f7:56:76:54:14:83:60:12:02:c9:7d:93:2c:41:e1:ce:
         17:9f:e2:01:a0:f9:01:7f:46:76:1c:80:1a:c8:83:9d:5d:a2:
         ad:9d:19:56:6e:b0:2c:ac:b5:8d:fe:d1:9f:c1:b5:9b:e8:97:
         1c:3d:b0:44:18:2d:8c:79:33:a2:17:3f:bf:65:5b:0e:87:b5:
         71:61:4a:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk5npdFaak8T1OeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwNjE4MTMyM1oXDTI1MDUwNzE3MTMyM1owLzEtMCsGA1UEAxMk
ZGNjNWVjZTYtYjA5Ni00NTgyLTgxNDgtY2RmODhiYjczNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2jhXwuQkJGq5+7FR6yGNNJ9CA8SrNsuuPFz
eXotsCyqqh0jakoYj0Q8mCsInhu5QXFRewxtGSwCPMSbi+l0CAzhG7S7MAblGK/A
YtLV6Us4zpsmvR63sH/qWdlWpciPhAVcLeUCjL76AGNiXrckwX5wji9GwCrs1kb0
yD9/sJlz3gDZ5O9fl3b8v1Rybjrci8/qHqI9sqi87D1PEubnjw28hOePrACKxxjm
1/y72QVL9HBJQodjGSutho8AxPmx3M87t5HEGPbtI3CMkQw34LfsmOnlELWPVpY1
E7TvwxsTx5+epF+vXGjDTXaEHlerTZWWF8H5cVqFHokTDz571wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIERJOZboiKvi9edosQAhgFmRQf6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJmODMyYzMtMTA5Yy0z
ZDliLWI2OWItMmZhYjJhOTBlODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH12W8Zx9XkN4LbZSKoanjDiA/Fosg8yIB17f9KCqmAXeSoKgJLsFpIX
l+1Yp44HZS+MRGhcNsr3fnU08pmVv85QpLP25YDcoxq3IrjqxpQ+j7Vxq9t2X41J
6reo6UVBlK6X/ztRxEUR1Yspf0mM1WMx/jUj+V6hCicle2LPL5OL9OkrDnG133By
TBMwz8ZZ4WNPEd0cEwt4LwKguYxMFhrC2GLjyJAQ6CcW0WCoSIDrvQ617oQx91Z2
VBSDYBICyX2TLEHhzhef4gGg+QF/RnYcgBrIg51doq2dGVZusCystY3+0Z/BtZvo
lxw9sEQYLYx5M6IXP79lWw6HtXFhSpA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:06:21 2025 by rpki-client