Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa
File:                     054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa (raw, json)
Hash identifier:          3INh2VIxlb6HDjK4vpV/d9h7mXgdKX3vQLSFShrplRo=
Subject key identifier:   C8:3D:EC:B2:B3:96:0E:CA:E9:4C:2D:C5:92:31:56:C9:59:EC:89:DD
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285848B35B68813E24A8E402E66F00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     19886
IP address blocks:        171.162.176.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:68:81:3e:24:a8:e4:02:e6:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=338eac4a-6380-4ff9-9cf3-e77c91be339c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:c3:bf:cf:30:50:24:5c:77:ae:8a:1f:ec:
                    bd:29:f0:66:3c:84:00:e8:ac:41:11:62:8e:1a:e7:
                    83:6e:1c:d4:56:ae:cf:f9:6c:db:57:7e:aa:9c:82:
                    69:92:7b:6c:d2:71:23:62:fd:ab:32:3e:e5:5e:80:
                    d9:01:4c:63:2a:c2:82:e2:1d:63:98:27:64:02:81:
                    ad:c6:03:75:90:fb:d9:09:a4:9d:96:b3:1f:6e:b1:
                    61:6c:ba:8a:f1:0c:41:9e:de:a6:b7:26:6e:d0:0a:
                    75:fc:52:11:b8:48:d8:79:8f:4e:cd:33:37:17:1d:
                    b0:b9:ae:0f:7c:84:6a:81:44:35:f7:a0:dd:fe:71:
                    9f:e9:64:e4:da:19:25:53:4b:4a:a5:37:fe:f7:e2:
                    4f:42:3c:67:2a:09:36:36:e7:69:b3:d9:3e:5f:ea:
                    c1:15:59:3e:28:dd:c2:bb:92:69:10:2c:72:6e:82:
                    aa:56:b1:80:5c:55:45:4f:2b:5b:98:ed:f7:94:48:
                    2e:59:19:b9:8c:b3:57:eb:e3:ea:fc:fe:23:74:11:
                    f1:74:53:c0:b9:9f:7f:38:3a:12:fd:13:1d:e2:55:
                    f6:b8:fd:7c:e8:ff:73:09:a8:5e:38:49:c9:22:7b:
                    b1:13:75:63:6b:4c:b5:08:d8:19:2f:b9:2c:a0:e4:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3D:EC:B2:B3:96:0E:CA:E9:4C:2D:C5:92:31:56:C9:59:EC:89:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:d8:00:ae:75:7b:ae:4d:19:b1:5c:e0:d9:f4:a3:c5:51:
         42:d0:9a:9d:de:14:d8:86:fc:d6:5f:70:8a:45:c0:c7:6c:db:
         03:96:63:1a:cb:d4:d4:f5:7b:f7:a2:be:d7:2b:1c:9e:a8:85:
         5b:1d:ab:c7:a9:b2:17:43:64:22:23:57:7b:d1:97:fe:8f:42:
         64:67:06:53:cd:69:ef:d9:ee:41:1c:03:06:b1:3b:a4:fd:ee:
         7d:17:47:09:ff:73:5b:fd:bf:7b:61:45:dd:ff:83:52:e8:58:
         8d:1d:ae:0d:15:be:e1:ac:66:26:c5:eb:71:75:e3:3e:f9:a3:
         2f:f6:13:86:c4:37:e4:f6:36:a7:b2:b2:88:8d:2d:f0:34:6a:
         9f:96:28:f8:88:18:59:6d:05:a0:02:d6:7c:41:df:5a:0b:64:
         61:a0:8d:42:f0:ac:52:a0:09:e8:41:c1:13:0f:4e:31:c3:55:
         4e:05:1e:4e:7d:01:80:92:93:81:b3:94:c2:e7:f2:bc:8e:3c:
         3d:24:9b:c1:71:ce:4a:6f:db:69:58:f3:03:50:b2:eb:57:84:
         b4:4a:bc:5b:f4:13:b5:72:a8:9f:84:a8:76:a9:ba:a1:ca:07:
         10:a1:6a:8f:c6:53:93:ea:32:85:4d:c9:53:da:e3:a1:1e:86:
         7b:62:ce:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2iBPiSo5ALmbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
MzM4ZWFjNGEtNjM4MC00ZmY5LTljZjMtZTc3YzkxYmUzMzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1zDv88wUCRcd66KH+y9KfBmPIQA6KxBEWKO
GueDbhzUVq7P+WzbV36qnIJpknts0nEjYv2rMj7lXoDZAUxjKsKC4h1jmCdkAoGt
xgN1kPvZCaSdlrMfbrFhbLqK8QxBnt6mtyZu0Ap1/FIRuEjYeY9OzTM3Fx2wua4P
fIRqgUQ196Dd/nGf6WTk2hklU0tKpTf+9+JPQjxnKgk2Nudps9k+X+rBFVk+KN3C
u5JpECxyboKqVrGAXFVFTytbmO33lEguWRm5jLNX6+Pq/P4jdBHxdFPAuZ9/ODoS
/RMd4lX2uP186P9zCaheOEnJInuxE3Vja0y1CNgZL7ksoOR37QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMg97LKzlg7K6UwtxZIxVslZ7IndMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMDU0Njg2YjAtMmJkOC0z
ZTQ3LTlkM2YtNWU2YjA0MWU4OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6KwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzo2ACudXuuTRmxXODZ9KPFUULQmp3eFNiG/NZfcIpFwMds2wOWYxrL
1NT1e/eivtcrHJ6ohVsdq8epshdDZCIjV3vRl/6PQmRnBlPNae/Z7kEcAwaxO6T9
7n0XRwn/c1v9v3thRd3/g1LoWI0drg0VvuGsZibF63F14z75oy/2E4bEN+T2Nqey
soiNLfA0ap+WKPiIGFltBaAC1nxB31oLZGGgjULwrFKgCehBwRMPTjHDVU4FHk59
AYCSk4GzlMLn8ryOPD0km8Fxzkpv22lY8wNQsutXhLRKvFv0E7VyqJ+EqHapuqHK
BxChao/GU5PqMoVNyVPa46Eehntizv4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:25 2025 by rpki-client