Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa
File:                     e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa (raw, json)
Hash identifier:          ymBT1tTbm8F8pU+pGHnglQWxomRFe1BnW+t8sKmBIRo=
Subject key identifier:   18:1C:57:B0:B7:14:DE:A8:B5:71:A2:D6:A6:76:9D:6F:DB:FC:3F:51
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D21101355F1DEE7A056F0080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     21609
IP address blocks:        40.141.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:01:35:5f:1d:ee:7a:05:6f:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=eda7c906-a113-4554-b4b3-cdf75a773d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:84:df:35:0c:c3:6b:fa:37:bd:d0:e8:8b:
                    46:83:37:6b:83:3e:95:a1:89:d2:2e:4d:58:e5:96:
                    57:8f:04:93:5a:a1:4c:9e:0e:52:ab:9e:60:c5:d7:
                    cd:3d:7f:84:ae:eb:55:6b:32:12:ab:21:07:86:1c:
                    6d:33:de:bb:fb:3f:a3:9c:fe:b9:25:c6:62:3d:ad:
                    87:44:5e:ea:af:bf:87:33:86:52:5b:a3:8b:e1:08:
                    04:bf:79:4c:ce:82:ae:c2:9e:6c:c2:03:e6:da:2f:
                    34:02:f4:82:ad:ce:56:b7:74:9d:5d:69:ac:70:9d:
                    74:71:9e:92:3d:70:54:e1:8b:0f:14:b0:d0:05:e1:
                    81:b4:d5:f5:bc:2c:71:39:c8:8a:aa:6b:47:bb:fe:
                    73:d3:ae:17:df:b2:2a:10:33:8c:d8:6c:65:a2:0c:
                    f2:fa:70:bb:fe:63:d6:74:36:ef:84:21:02:35:40:
                    cb:de:7b:a4:88:61:06:99:68:d3:52:75:dc:11:55:
                    14:97:d5:26:87:6f:55:ef:bb:ad:6a:47:83:5c:a3:
                    af:28:29:64:dc:cc:e6:19:22:30:fb:0b:53:86:15:
                    c9:16:2e:39:00:4c:ad:25:22:d3:3d:5b:7d:9a:1e:
                    55:03:56:5c:d6:d8:ba:f5:8d:87:ab:63:88:74:a8:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1C:57:B0:B7:14:DE:A8:B5:71:A2:D6:A6:76:9D:6F:DB:FC:3F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.141.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:4f:ff:76:c9:5e:c0:fd:06:a3:99:8a:5d:cf:b4:ea:81:f1:
         06:c8:25:4c:ed:dc:7b:5d:e2:04:b8:4b:6f:32:82:11:7a:7c:
         de:2a:d0:cd:a6:38:76:2d:18:90:82:40:5c:d8:05:22:5c:5d:
         3f:6e:48:3e:f3:83:37:8d:16:f9:97:1d:1c:7f:11:9b:6c:27:
         6b:ae:12:1f:4e:d0:65:ff:10:c9:7d:0e:4d:8d:14:69:cb:69:
         ba:63:1a:c5:0d:f3:f0:bd:e9:97:60:ea:af:54:de:87:1d:0a:
         a9:eb:d4:87:3c:34:b2:c4:01:74:21:86:4c:e5:5a:35:c9:7f:
         70:23:ce:d7:fc:3f:34:0d:cf:5b:e5:1c:d0:6b:d4:4d:37:cf:
         ee:cd:5f:6d:87:8d:61:0b:4e:49:f7:91:be:ba:21:9c:78:81:
         a0:4f:87:b3:14:c8:48:55:e0:9e:13:59:ed:23:41:50:14:97:
         f6:26:3f:61:d1:83:62:58:0f:2c:b6:e7:67:0a:8f:9a:26:62:
         48:4e:ea:72:61:fe:bd:df:e7:b9:12:95:75:a1:50:5e:b7:92:
         53:7e:14:1a:7f:3e:e1:57:ca:37:f8:12:f6:6b:ae:ae:67:f6:
         a1:01:f1:26:77:ec:e8:53:c7:00:ee:a7:af:42:a0:ad:7e:65:
         0b:d3:d9:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQE1Xx3uegVvAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZWRhN2M5MDYtYTExMy00NTU0LWI0YjMtY2RmNzVhNzczZDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8yE3zUMw2v6N73Q6ItGgzdrgz6VoYnSLk1Y
5ZZXjwSTWqFMng5Sq55gxdfNPX+ErutVazISqyEHhhxtM967+z+jnP65JcZiPa2H
RF7qr7+HM4ZSW6OL4QgEv3lMzoKuwp5swgPm2i80AvSCrc5Wt3SdXWmscJ10cZ6S
PXBU4YsPFLDQBeGBtNX1vCxxOciKqmtHu/5z064X37IqEDOM2Gxlogzy+nC7/mPW
dDbvhCECNUDL3nukiGEGmWjTUnXcEVUUl9Umh29V77utakeDXKOvKClk3MzmGSIw
+wtThhXJFi45AEytJSLTPVt9mh5VA1Zc1ti69Y2Hq2OIdKj11QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgcV7C3FN6otXGi1qZ2nW/b/D9RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTAyNGQyZWEtMDRmNS0z
YjFkLTk0NDctOGQyOWQyZjFmNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI06MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVP/3bJXsD9BqOZil3PtOqB8QbIJUzt3Htd4gS4S28yghF6fN4q0M2m
OHYtGJCCQFzYBSJcXT9uSD7zgzeNFvmXHRx/EZtsJ2uuEh9O0GX/EMl9Dk2NFGnL
abpjGsUN8/C96Zdg6q9U3ocdCqnr1Ic8NLLEAXQhhkzlWjXJf3Ajztf8PzQNz1vl
HNBr1E03z+7NX22HjWELTkn3kb66IZx4gaBPh7MUyEhV4J4TWe0jQVAUl/YmP2HR
g2JYDyy252cKj5omYkhO6nJh/r3f57kSlXWhUF63klN+FBp/PuFXyjf4EvZrrq5n
9qEB8SZ37OhTxwDup69CoK1+ZQvT2Zw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:03:53 2025 by rpki-client