Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa
File:                     3e196079-8695-30ec-97ad-a014098a62f1.roa (raw, json)
Hash identifier:          WZOd6Ul9YXeI3JsidruZTry7ucaOdHVZ6gny2OKDh/Y=
Subject key identifier:   C4:2C:EC:E8:AC:68:4F:CC:04:C3:34:3B:65:71:6C:47:75:4B:64:68
Certificate issuer:       /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc
Certificate serial:       010D0C9F432858488F107C23984D0A0D7407C820
Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa
Signing time:             Thu 16 Jan 2025 02:00:39 +0000
ROA not before:           Thu 16 Jan 2025 02:00:39 +0000
ROA not after:            Wed 16 Apr 2025 01:00:39 +0000
asID:                     400519
IP address blocks:        198.22.204.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:10:7c:23:98:4d:0a:0d:74:07:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc
        Validity
            Not Before: Jan 16 02:00:39 2025 GMT
            Not After : Apr 16 01:00:39 2025 GMT
        Subject: CN=358184cb-a371-476b-9612-1230d13236fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f9:1e:14:0d:e8:fd:2f:78:0e:ad:29:5a:7f:
                    c9:70:7e:4c:e5:1b:ff:69:63:cb:20:48:76:03:92:
                    dc:23:92:25:8b:f2:6a:a6:b5:27:25:f3:33:05:55:
                    96:08:f5:9f:a3:7b:11:e4:e8:26:0a:c1:8a:3c:c3:
                    ae:56:19:d6:ce:3a:5a:eb:ca:4d:38:30:d1:4e:30:
                    78:f1:0f:54:11:53:b0:81:51:37:86:b7:a5:d3:a3:
                    ce:2a:ff:05:58:d1:3c:02:11:8b:69:e0:08:5e:da:
                    67:64:5e:67:66:1b:30:44:42:d9:ea:1d:70:73:79:
                    23:22:6c:36:70:33:34:d9:6c:af:8d:3c:af:dc:12:
                    27:3e:8c:a1:33:45:56:2a:22:74:ba:a1:15:d7:a4:
                    9c:e6:6a:a6:ba:6b:d6:c6:25:f6:e9:c2:52:80:58:
                    a2:ab:b7:26:d6:22:12:7e:b4:0e:d7:49:85:75:fc:
                    00:f4:a7:79:7c:d0:e2:7d:03:26:34:e7:eb:8a:db:
                    90:0a:91:78:9d:ea:38:3c:33:c0:4a:83:97:b4:de:
                    9a:cf:d0:56:8d:c1:1b:42:a4:fa:3e:68:c8:aa:e4:
                    96:e1:a3:7e:65:d3:01:1f:43:01:a4:2b:7b:95:7a:
                    c1:ec:91:6f:89:e5:b4:ea:59:a3:e2:70:de:a4:07:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2C:EC:E8:AC:68:4F:CC:04:C3:34:3B:65:71:6C:47:75:4B:64:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl

            X509v3 Authority Key Identifier:
                keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.22.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:61:bc:b3:1c:20:7d:52:a7:16:07:c7:ac:20:30:d9:a1:e1:
         51:05:ed:96:91:79:74:3d:74:d7:02:e9:74:6a:c2:0f:f0:6f:
         4f:ef:21:99:71:14:a3:a3:01:09:30:6a:6a:14:e2:af:79:73:
         6a:fe:4e:b3:18:7b:f5:f7:e3:d4:2d:74:11:7a:c4:ae:0f:07:
         eb:e1:dc:ab:bb:2a:d6:dc:07:a1:c9:26:20:f0:5b:65:8a:4f:
         65:b0:10:4a:80:36:db:1d:65:2f:a8:28:a9:89:56:3f:d3:22:
         b2:17:fc:60:b8:0e:c6:8a:6f:11:c1:f9:a4:9d:44:1e:84:e0:
         6c:8d:cc:53:b2:80:b3:7e:71:37:bd:1e:48:3b:94:c0:e2:9a:
         df:b6:2c:d5:07:f1:c0:e7:bd:dc:15:65:9a:ca:ca:a3:43:6a:
         66:8f:09:ca:ec:0f:a1:a8:51:19:a3:8e:90:1e:02:66:12:f8:
         e3:8f:e4:ed:87:bd:9e:c1:74:14:bc:37:8b:e7:f9:fe:7b:79:
         97:a5:fa:b0:6b:37:e8:4c:da:0a:c4:c8:bb:a0:a8:ff:14:b3:
         aa:a6:3f:f4:74:6b:50:60:10:10:3f:d6:93:f0:d6:12:7f:28:
         b9:e5:82:b8:d4:3b:bd:b9:f9:5f:16:18:01:e2:8c:c8:7b:9c:
         82:1d:6e:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEHwjmE0KDXQHyCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz
MmZjMB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MzU4MTg0Y2ItYTM3MS00NzZiLTk2MTItMTIzMGQxMzIzNmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/keFA3o/S94Dq0pWn/JcH5M5Rv/aWPLIEh2
A5LcI5Ili/JqprUnJfMzBVWWCPWfo3sR5OgmCsGKPMOuVhnWzjpa68pNODDRTjB4
8Q9UEVOwgVE3hrel06POKv8FWNE8AhGLaeAIXtpnZF5nZhswRELZ6h1wc3kjImw2
cDM02WyvjTyv3BInPoyhM0VWKiJ0uqEV16Sc5mqmumvWxiX26cJSgFiiq7cm1iIS
frQO10mFdfwA9Kd5fNDifQMmNOfrituQCpF4neo4PDPASoOXtN6az9BWjcEbQqT6
PmjIquSW4aN+ZdMBH0MBpCt7lXrB7JFvieW06lmj4nDepAeJRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQs7OisaE/MBMM0O2VxbEd1S2RoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx
MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvM2UxOTYwNzktODY5NS0z
MGVjLTk3YWQtYTAxNDA5OGE2MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3
ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl
MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy
ZDgzZTMyZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhbMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNhvLMcIH1SpxYHx6wgMNmh4VEF7ZaReXQ9dNcC6XRqwg/wb0/vIZlx
FKOjAQkwamoU4q95c2r+TrMYe/X349QtdBF6xK4PB+vh3Ku7KtbcB6HJJiDwW2WK
T2WwEEqANtsdZS+oKKmJVj/TIrIX/GC4DsaKbxHB+aSdRB6E4GyNzFOygLN+cTe9
Hkg7lMDimt+2LNUH8cDnvdwVZZrKyqNDamaPCcrsD6GoURmjjpAeAmYS+OOP5O2H
vZ7BdBS8N4vn+f57eZel+rBrN+hM2grEyLugqP8Us6qmP/R0a1BgEBA/1pPw1hJ/
KLnlgrjUO725+V8WGAHijMh7nIIdbmY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:25 2025 by rpki-client