Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89f842fa-8888-3ca7-a825-fbb5e4f282d9.roa
File:                     89f842fa-8888-3ca7-a825-fbb5e4f282d9.roa (raw, json)
Hash identifier:          ov40WYEZIJS8zwZ4JeiAhDfqAMXOatSWYS10HuYcgrE=
Subject key identifier:   0D:47:BB:5A:86:6D:FE:A9:AC:47:F5:E8:38:EF:28:53:D4:65:DF:10
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848EB3109B39D71A15A93546C80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89f842fa-8888-3ca7-a825-fbb5e4f282d9.roa
Signing time:             Tue 18 Feb 2025 02:00:38 +0000
ROA not before:           Tue 18 Feb 2025 02:00:38 +0000
ROA not after:            Mon 19 May 2025 01:00:38 +0000
asID:                     53356
IP address blocks:        172.94.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:31:09:b3:9d:71:a1:5a:93:54:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 18 02:00:38 2025 GMT
            Not After : May 19 01:00:38 2025 GMT
        Subject: CN=bacf1d11-d58f-4085-970f-5dec1e83197d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:61:62:30:9b:90:26:cb:c1:88:3c:36:1e:79:
                    2b:8e:12:cf:65:dd:1b:02:d0:81:4a:23:af:17:14:
                    b0:1b:f2:7e:7d:23:9c:1b:53:0e:5c:da:e6:65:8e:
                    55:46:a9:7c:78:1e:63:fe:27:fd:17:32:a0:20:52:
                    e0:3f:b8:c0:3a:72:a2:e0:4a:08:f2:a2:fe:70:b1:
                    19:b9:e7:e7:28:5a:fc:a9:7e:c6:db:ae:eb:8e:d1:
                    82:23:5d:c8:7d:a2:bf:75:23:8e:6d:62:6e:8b:75:
                    ae:12:95:51:21:6a:59:c0:33:86:b8:2c:95:d0:15:
                    f0:64:1c:aa:26:cc:85:41:d2:7b:fd:62:fb:b9:0b:
                    01:d7:4d:5e:b9:9b:0e:d4:e5:87:ff:b5:bd:89:84:
                    60:55:68:4a:0d:d0:82:5c:6f:0d:4e:6d:ea:44:09:
                    e2:9a:44:97:92:df:63:06:6a:c9:3e:bb:1d:19:27:
                    69:6b:a0:a7:65:15:75:de:ce:03:0d:29:b3:36:b3:
                    c7:e4:25:31:4e:d9:ab:a7:a1:a3:fc:78:57:c3:dc:
                    b4:c3:93:7d:38:45:5d:3f:e7:3a:6f:88:f5:1d:ae:
                    b2:1e:34:0b:05:5b:db:61:35:1d:46:e7:82:a5:2b:
                    30:14:25:5f:98:02:97:4b:65:92:6e:02:8e:8b:03:
                    65:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:BB:5A:86:6D:FE:A9:AC:47:F5:E8:38:EF:28:53:D4:65:DF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89f842fa-8888-3ca7-a825-fbb5e4f282d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:77:41:4c:83:82:07:07:ac:9d:ce:1c:76:d3:48:fb:d0:b1:
         dc:1b:ee:78:8b:bf:af:0d:4d:b2:25:5e:36:2a:2f:3d:7e:81:
         01:8b:2d:05:e3:57:83:f0:0f:0e:a0:af:b0:98:b1:2c:96:01:
         40:b8:92:47:b0:5d:09:3a:2b:57:fe:49:bf:9d:d8:84:08:f1:
         32:84:88:95:5e:fd:54:f8:a6:a4:c2:e4:de:ef:8e:3b:07:1a:
         5a:42:bd:22:b9:c1:2b:78:36:0e:ea:79:c5:e5:3c:2f:25:6d:
         56:c1:72:15:ef:9b:40:2f:7c:9a:07:1b:26:af:71:5f:ce:a6:
         8f:14:87:40:c4:86:86:6d:b0:80:06:55:34:5b:4b:3c:90:6c:
         1b:1d:95:63:52:27:dc:f7:4e:3c:19:37:96:6d:ef:19:67:b4:
         34:24:41:19:be:61:c1:5e:fb:f6:1d:94:6e:6e:9b:9e:53:f8:
         17:b4:64:13:00:78:2d:21:1a:4a:ce:6c:f0:cd:e8:bc:9e:bc:
         c0:f6:dc:76:5f:5b:88:03:ca:01:47:0b:95:c4:1f:36:e1:7c:
         46:21:94:dd:75:2b:f9:cf:b9:40:0d:ec:40:68:0e:80:18:d4:
         7c:c6:df:22:9b:5d:35:d7:81:b9:6d:2d:51:17:70:6c:15:0e:
         02:51:64:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjrMQmznXGhWpNUbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIxODAyMDAzOFoXDTI1MDUxOTAxMDAzOFowLzEtMCsGA1UEAxMk
YmFjZjFkMTEtZDU4Zi00MDg1LTk3MGYtNWRlYzFlODMxOTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmFiMJuQJsvBiDw2HnkrjhLPZd0bAtCBSiOv
FxSwG/J+fSOcG1MOXNrmZY5VRql8eB5j/if9FzKgIFLgP7jAOnKi4EoI8qL+cLEZ
uefnKFr8qX7G267rjtGCI13IfaK/dSOObWJui3WuEpVRIWpZwDOGuCyV0BXwZByq
JsyFQdJ7/WL7uQsB101euZsO1OWH/7W9iYRgVWhKDdCCXG8NTm3qRAnimkSXkt9j
BmrJPrsdGSdpa6CnZRV13s4DDSmzNrPH5CUxTtmrp6Gj/HhXw9y0w5N9OEVdP+c6
b4j1Ha6yHjQLBVvbYTUdRueCpSswFCVfmAKXS2WSbgKOiwNljQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA1Hu1qGbf6prEf16DjvKFPUZd8QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODlmODQyZmEtODg4OC0z
Y2E3LWE4MjUtZmJiNWU0ZjI4MmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHh3QUyDggcHrJ3OHHbTSPvQsdwb7niLv68NTbIlXjYqLz1+gQGLLQXj
V4PwDw6gr7CYsSyWAUC4kkewXQk6K1f+Sb+d2IQI8TKEiJVe/VT4pqTC5N7vjjsH
GlpCvSK5wSt4Ng7qecXlPC8lbVbBchXvm0AvfJoHGyavcV/Opo8Uh0DEhoZtsIAG
VTRbSzyQbBsdlWNSJ9z3TjwZN5Zt7xlntDQkQRm+YcFe+/YdlG5um55T+Be0ZBMA
eC0hGkrObPDN6LyevMD23HZfW4gDygFHC5XEHzbhfEYhlN11K/nPuUAN7EBoDoAY
1HzG3yKbXTXXgbltLVEXcGwVDgJRZFI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:19 2025 by rpki-client