Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5aeb754-a939-33de-86fc-861b89527e34.roa
File:                     c5aeb754-a939-33de-86fc-861b89527e34.roa (raw, json)
Hash identifier:          Tx2jZBWoQ+s+3PDn2pTxP34lTiIRw2PW2UGQUSdcIow=
Subject key identifier:   4C:54:44:A1:FB:CB:7E:EF:46:A3:A7:5A:65:45:FE:81:69:7B:71:EB
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848F926AEC3278BA83E5B43CC80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5aeb754-a939-33de-86fc-861b89527e34.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     25899
IP address blocks:        216.110.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ae:c3:27:8b:a8:3e:5b:43:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=8f5734e3-33bd-4776-8823-34eff553f042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:1b:cc:be:d5:ef:c4:f5:80:a5:93:31:9f:
                    2f:4b:07:9f:b3:69:db:fd:5b:4b:23:dd:9b:5f:6a:
                    07:43:8d:6e:d0:d2:f7:5b:ac:4a:33:3b:53:7b:09:
                    bd:68:0d:09:dc:68:5b:00:28:95:6f:58:22:e6:4f:
                    df:43:54:5c:1f:8d:29:3f:b4:57:db:41:54:fe:b5:
                    9f:a1:19:ea:fc:e4:cc:81:b9:56:51:13:b0:e3:23:
                    f4:94:eb:71:df:7d:4e:62:de:09:9d:7f:90:1d:1c:
                    ae:cc:47:73:34:6d:80:5f:5d:08:f2:2d:08:49:d9:
                    c9:c6:ae:96:b4:15:79:60:6a:32:86:1b:27:7c:3f:
                    14:81:6c:b1:2a:21:4a:66:88:7f:54:01:f6:b4:7d:
                    23:ff:4b:4a:45:8b:8b:2c:de:da:75:68:f5:a4:1e:
                    14:e3:ff:ee:21:1d:57:14:37:36:75:45:ac:05:35:
                    7f:cf:dc:24:d0:73:fd:ab:31:77:e3:69:b7:c6:09:
                    41:35:60:95:aa:66:6b:28:3f:4f:ac:f8:e4:4b:ce:
                    9f:af:c9:21:53:16:08:0c:c9:ad:ab:e7:3f:5f:04:
                    54:a2:d2:a3:f7:0c:3e:2a:cd:e1:44:da:3c:79:f2:
                    cb:f3:a9:bd:4f:29:fa:55:49:10:62:19:36:ed:de:
                    0d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:54:44:A1:FB:CB:7E:EF:46:A3:A7:5A:65:45:FE:81:69:7B:71:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5aeb754-a939-33de-86fc-861b89527e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:53:5a:f9:25:ae:fb:66:6c:ca:9d:94:51:19:0b:c8:70:
         01:41:0a:3c:86:0e:42:c8:50:16:9f:63:ee:17:53:80:4d:cb:
         bf:d0:47:30:77:40:1f:12:a1:2a:6d:af:ad:53:55:24:e7:88:
         a8:ed:17:74:c1:37:92:0b:ec:5e:37:58:c4:c7:05:25:7b:a8:
         55:21:74:5f:f5:4c:ab:59:c0:40:e4:7d:76:d9:32:95:c2:1d:
         98:ef:90:c5:87:e5:b5:57:46:2b:a2:72:d7:e6:e2:4c:12:31:
         ce:1b:f5:0e:9c:f8:a1:bf:ca:62:ef:5d:f8:7a:13:9d:f0:4f:
         77:67:33:17:c8:ee:44:dc:ee:a1:b1:6c:9d:92:51:26:10:d6:
         3c:54:ef:ae:bf:4c:07:92:d2:58:c5:30:42:47:03:da:e0:0e:
         a3:7c:58:64:3d:0e:21:36:19:08:7e:83:74:77:47:53:33:d1:
         5e:0c:84:53:81:ba:2b:c0:74:65:fa:11:01:aa:0f:04:0f:04:
         44:c7:b0:50:f8:ee:2c:6f:b7:cf:4e:6e:a8:41:eb:7e:64:c9:
         2f:22:96:d7:6f:88:d2:c5:26:50:7b:a9:64:16:df:87:93:13:
         2e:48:8a:17:84:c7:5e:b2:3b:d2:f5:75:c4:0c:3e:ed:41:8e:
         62:3f:d5:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jq7DJ4uoPltDzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
OGY1NzM0ZTMtMzNiZC00Nzc2LTg4MjMtMzRlZmY1NTNmMDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7UbzL7V78T1gKWTMZ8vSwefs2nb/VtLI92b
X2oHQ41u0NL3W6xKMztTewm9aA0J3GhbACiVb1gi5k/fQ1RcH40pP7RX20FU/rWf
oRnq/OTMgblWUROw4yP0lOtx331OYt4JnX+QHRyuzEdzNG2AX10I8i0ISdnJxq6W
tBV5YGoyhhsnfD8UgWyxKiFKZoh/VAH2tH0j/0tKRYuLLN7adWj1pB4U4//uIR1X
FDc2dUWsBTV/z9wk0HP9qzF342m3xglBNWCVqmZrKD9PrPjkS86fr8khUxYIDMmt
q+c/XwRUotKj9ww+Ks3hRNo8efLL86m9Tyn6VUkQYhk27d4NYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExURKH7y37vRqOnWmVF/oFpe3HrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYzVhZWI3NTQtYTkzOS0z
M2RlLTg2ZmMtODYxYjg5NTI3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G7NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0qU1r5Ja77ZmzKnZRRGQvIcAFBCjyGDkLIUBafY+4XU4BNy7/QRzB3
QB8SoSptr61TVSTniKjtF3TBN5IL7F43WMTHBSV7qFUhdF/1TKtZwEDkfXbZMpXC
HZjvkMWH5bVXRiuictfm4kwSMc4b9Q6c+KG/ymLvXfh6E53wT3dnMxfI7kTc7qGx
bJ2SUSYQ1jxU766/TAeS0ljFMEJHA9rgDqN8WGQ9DiE2GQh+g3R3R1Mz0V4MhFOB
uivAdGX6EQGqDwQPBETHsFD47ixvt89ObqhB635kyS8iltdviNLFJlB7qWQW34eT
Ey5IiheEx16yO9L1dcQMPu1BjmI/1S8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:10:49 2025 by rpki-client