Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa
File:                     78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa (raw, json)
Hash identifier:          vHU3TTU/Asy4SuPTfN+YB9U6b+kSwSLsoKuxzWh2AIY=
Subject key identifier:   68:E8:B8:76:C2:6F:EF:30:61:46:AB:93:9A:07:68:FC:23:1E:0D:A4
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584944692F40B530E96677C726C0
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     40249
IP address blocks:        23.137.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:2f:40:b5:30:e9:66:77:c7:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=f7e32a78-0f6e-40ad-8cb0-35eba3810e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:aa:a1:9d:2e:c8:74:d7:34:4c:09:28:34:
                    7f:5f:bb:f0:9c:66:d7:a7:8b:67:77:43:46:ae:53:
                    21:6e:86:64:30:99:dd:1f:97:8c:bf:ec:e3:d9:90:
                    13:71:77:9c:0b:a8:be:9c:76:16:46:96:64:81:30:
                    16:8e:58:b1:e7:a8:b0:f7:5a:63:59:3f:6e:46:66:
                    d9:22:78:ac:c6:fd:b6:8d:72:18:09:04:34:fe:64:
                    51:c2:a7:d5:67:7e:1e:08:41:26:a8:c4:8f:5f:ad:
                    d0:6f:cc:1e:1d:88:42:bb:f0:ba:0e:b7:1e:fe:f8:
                    bf:77:d0:3e:20:ae:e4:b5:dc:a1:26:c2:ca:3e:88:
                    73:ca:02:d2:d2:c9:c2:bc:ad:d9:3d:50:9c:b4:40:
                    f7:92:20:2e:a2:4c:a3:f4:b6:22:98:d7:ba:a4:98:
                    e0:c6:f1:a0:ae:cb:3c:35:8b:05:fc:74:d8:ed:43:
                    c1:13:ba:4b:9f:3b:0e:f2:34:5f:5e:2b:af:ec:b8:
                    3f:0d:e6:c2:89:b4:72:36:a7:e7:69:e1:cf:6c:a1:
                    7a:21:f0:06:b8:2c:b9:31:65:e5:75:33:90:23:62:
                    d6:59:7c:db:4e:b5:80:26:6f:51:4b:47:cb:9f:5b:
                    55:7d:9d:da:01:51:eb:ed:38:cb:29:27:29:43:ab:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E8:B8:76:C2:6F:EF:30:61:46:AB:93:9A:07:68:FC:23:1E:0D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e5:99:43:a2:2c:2d:2b:a2:d6:72:4d:a3:93:28:d7:fb:4f:
         19:11:80:48:7a:01:a7:9d:a6:5f:16:06:d9:d8:02:c7:ac:1b:
         fe:6a:6b:60:19:b1:24:dc:ae:15:2c:41:17:45:53:e7:b2:58:
         a1:1f:7a:a0:8a:dd:00:ef:9b:30:fb:d3:19:d6:5f:09:21:99:
         7b:f0:c2:62:36:c3:48:5b:c0:fd:13:6f:d7:9a:4c:89:f0:d8:
         1e:5d:95:80:cc:d0:60:20:6f:12:e7:eb:64:3b:b1:14:e8:1a:
         cd:b1:0a:37:93:8d:99:8d:b3:58:99:9f:41:6b:9e:0a:d0:50:
         8b:be:a7:af:e3:93:19:68:b1:c9:9a:63:78:92:08:3a:07:fe:
         1f:51:9a:de:35:d9:7b:42:df:39:f9:a4:48:d2:b1:55:e2:67:
         5c:65:98:60:85:48:d9:17:7c:4c:d0:df:9a:10:9c:d2:91:6a:
         35:79:93:9b:5c:b8:1a:c9:38:d8:68:91:bd:ba:9b:dc:b1:96:
         0a:6c:10:5c:bd:c1:02:2b:a5:fe:3d:70:b2:45:ec:06:c2:4c:
         b2:4e:d6:8a:2c:e6:a4:0a:54:f0:1d:b2:27:9b:07:d2:07:35:
         8c:94:1b:c7:d4:74:59:ec:1f:bb:af:57:da:f6:9a:dc:2f:56:
         91:dd:84:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaS9AtTDpZnfHJsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3
YTEzMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZjdlMzJhNzgtMGY2ZS00MGFkLThjYjAtMzVlYmEzODEwZTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC6qoZ0uyHTXNEwJKDR/X7vwnGbXp4tnd0NG
rlMhboZkMJndH5eMv+zj2ZATcXecC6i+nHYWRpZkgTAWjlix56iw91pjWT9uRmbZ
Inisxv22jXIYCQQ0/mRRwqfVZ34eCEEmqMSPX63Qb8weHYhCu/C6Drce/vi/d9A+
IK7ktdyhJsLKPohzygLS0snCvK3ZPVCctED3kiAuokyj9LYimNe6pJjgxvGgrss8
NYsF/HTY7UPBE7pLnzsO8jRfXiuv7Lg/DebCibRyNqfnaeHPbKF6IfAGuCy5MWXl
dTOQI2LWWXzbTrWAJm9RS0fLn1tVfZ3aAVHr7TjLKScpQ6uykwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjouHbCb+8wYUark5oHaPwjHg2kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3
MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvNzhiYzAwYTgtODg3MS0z
NmZiLTljOWItYWQ4YTNkN2MwM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll
NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi
N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw
MWY1YjdhMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4koMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnlmUOiLC0rotZyTaOTKNf7TxkRgEh6Aaedpl8WBtnYAsesG/5qa2AZ
sSTcrhUsQRdFU+eyWKEfeqCK3QDvmzD70xnWXwkhmXvwwmI2w0hbwP0Tb9eaTInw
2B5dlYDM0GAgbxLn62Q7sRToGs2xCjeTjZmNs1iZn0FrngrQUIu+p6/jkxloscma
Y3iSCDoH/h9Rmt412XtC3zn5pEjSsVXiZ1xlmGCFSNkXfEzQ35oQnNKRajV5k5tc
uBrJONhokb26m9yxlgpsEFy9wQIrpf49cLJF7AbCTLJO1oos5qQKVPAdsiebB9IH
NYyUG8fUdFnsH7uvV9r2mtwvVpHdhHY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:50 2025 by rpki-client