Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb168ec7-56c8-31fc-8a3c-90724c712be0.roa
File:                     cb168ec7-56c8-31fc-8a3c-90724c712be0.roa (raw, json)
Hash identifier:          itgbOdqz4F3elmNkse9JzfdcCcr04yAv178fu3VyKTQ=
Subject key identifier:   25:0A:F2:A7:DA:72:47:AC:D1:7F:1E:78:09:6A:C2:D3:C5:8B:42:92
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DB440D7E37314C75F80D69940
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb168ec7-56c8-31fc-8a3c-90724c712be0.roa
Signing time:             Mon 25 Apr 2022 12:00:00 +0000
ROA not before:           Mon 25 Apr 2022 12:00:00 +0000
ROA not after:            Tue 18 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        166.102.142.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b4:40:d7:e3:73:14:c7:5f:80:d6:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 25 12:00:00 2022 GMT
            Not After : Apr 18 04:00:00 2028 GMT
        Subject: CN=3248b848-ce1f-4efc-b890-cbd434ffbd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:5b:15:c1:41:37:c8:1e:21:f6:cb:cf:c5:
                    0e:08:ac:85:4e:14:8a:0d:5c:17:7d:ee:66:1c:4e:
                    51:41:e5:f1:af:48:21:d6:44:d6:d2:df:1a:bf:3f:
                    5f:82:bb:cf:c9:08:9b:40:19:90:28:41:18:9b:6b:
                    e6:6e:b3:9b:f5:fb:91:58:02:6f:01:11:b1:43:14:
                    cb:87:0c:d1:24:07:de:36:9a:d8:90:52:ee:40:85:
                    8f:66:07:be:8a:d8:f8:cd:8c:a2:58:14:51:4a:c8:
                    20:44:15:09:35:e7:5d:3d:ea:66:34:61:e4:90:ec:
                    a5:d7:08:79:c1:4a:81:fd:f3:a1:83:55:fd:1a:c7:
                    04:01:2f:c2:6c:e8:74:a5:0a:24:f8:65:ba:33:2d:
                    a7:cb:97:00:d1:2a:53:8f:2f:db:da:b9:75:6d:b0:
                    47:9b:86:6e:68:71:01:dc:2f:96:e4:0a:fe:60:31:
                    8e:01:c8:ee:f9:2b:f0:a2:18:6b:c2:3f:c3:17:03:
                    e1:0b:44:26:c8:de:a6:82:ad:98:3c:fa:8b:0c:ff:
                    af:e1:28:a3:25:eb:cf:95:94:fc:b3:5f:24:f6:86:
                    e8:08:de:45:3b:45:46:e3:17:ac:17:86:4f:1b:ae:
                    89:07:12:91:18:6c:ae:0f:38:77:6f:4c:4b:92:b4:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0A:F2:A7:DA:72:47:AC:D1:7F:1E:78:09:6A:C2:D3:C5:8B:42:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb168ec7-56c8-31fc-8a3c-90724c712be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.102.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:25:8d:f6:c4:77:ce:67:bb:06:85:70:08:d5:43:79:7c:f6:
         26:88:4e:25:2a:bc:89:73:db:75:66:c1:e7:43:6d:bc:a5:64:
         70:a5:3f:2f:10:f9:75:6b:e7:0c:f0:7f:f8:39:14:76:4a:bd:
         1b:30:9f:58:03:c2:0b:80:43:54:ea:76:78:81:24:9d:8c:88:
         04:24:65:35:da:3b:59:66:5b:31:e5:01:37:13:e3:11:b3:41:
         06:bc:49:7d:7e:33:d8:e7:23:d2:03:81:15:8b:f2:c9:3a:ff:
         71:10:ad:b7:86:53:bb:fd:c8:b3:50:c2:90:5b:03:8b:eb:f8:
         33:5b:42:c6:fb:46:22:c7:95:b9:eb:2d:16:f9:53:32:51:38:
         94:4e:62:38:4c:09:f7:cd:a2:e9:00:3c:0e:46:a9:93:33:4f:
         f5:f5:83:39:b0:a0:80:4a:91:e8:35:d4:07:31:90:f3:70:73:
         fc:ba:c1:81:0d:cb:3b:3f:63:12:20:c1:3c:78:67:50:22:ab:
         7d:b1:82:88:a3:3c:92:9f:9c:15:38:35:3f:f6:16:bd:f7:59:
         6b:66:bf:67:18:4b:1a:eb:b3:36:28:7f:eb:c5:72:4b:b8:b9:
         ea:2e:4d:e3:10:fe:b8:8f:58:41:26:ea:39:11:64:30:52:08:
         ac:08:0b:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD20QNfjcxTHX4DWmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDQyNTEyMDAwMFoXDTI4MDQxODA0MDAwMFowLzEtMCsGA1UEAxMk
MzI0OGI4NDgtY2UxZi00ZWZjLWI4OTAtY2JkNDM0ZmZiZDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGlbFcFBN8geIfbLz8UOCKyFThSKDVwXfe5m
HE5RQeXxr0gh1kTW0t8avz9fgrvPyQibQBmQKEEYm2vmbrOb9fuRWAJvARGxQxTL
hwzRJAfeNprYkFLuQIWPZge+itj4zYyiWBRRSsggRBUJNeddPepmNGHkkOyl1wh5
wUqB/fOhg1X9GscEAS/CbOh0pQok+GW6My2ny5cA0SpTjy/b2rl1bbBHm4ZuaHEB
3C+W5Ar+YDGOAcju+Svwohhrwj/DFwPhC0QmyN6mgq2YPPqLDP+v4SijJevPlZT8
s18k9oboCN5FO0VG4xesF4ZPG66JBxKRGGyuDzh3b0xLkrS36wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUK8qfackes0X8eeAlqwtPFi0KSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2IxNjhlYzctNTZjOC0z
MWZjLThhM2MtOTA3MjRjNzEyYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpmaOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMljfbEd85nuwaFcAjVQ3l89iaITiUqvIlz23VmwedDbbylZHClPy8Q
+XVr5wzwf/g5FHZKvRswn1gDwguAQ1TqdniBJJ2MiAQkZTXaO1lmWzHlATcT4xGz
QQa8SX1+M9jnI9IDgRWL8sk6/3EQrbeGU7v9yLNQwpBbA4vr+DNbQsb7RiLHlbnr
LRb5UzJROJROYjhMCffNoukAPA5GqZMzT/X1gzmwoIBKkeg11AcxkPNwc/y6wYEN
yzs/YxIgwTx4Z1Aiq32xgoijPJKfnBU4NT/2Fr33WWtmv2cYSxrrszYof+vFcku4
ueouTeMQ/riPWEEm6jkRZDBSCKwIC2I=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:12 2025 by rpki-client