Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa
File:                     612ea9aa-fef5-3461-89b7-4f93773ef913.roa (raw, json)
Hash identifier:          iCxAp8XTpSl6MHWF/Th+EAd0qEPpEYZ3Nwq1k/Vm+O0=
Subject key identifier:   75:9F:F0:40:A2:0A:1E:52:70:A8:91:50:4F:C0:5F:C7:0E:25:70:F8
Certificate issuer:       /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
Certificate serial:       010D0C9F432858487F5EBFBA080686250B082D40
Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa
Signing time:             Fri 10 Jan 2025 11:05:27 +0000
ROA not before:           Fri 10 Jan 2025 11:05:27 +0000
ROA not after:            Thu 10 Apr 2025 10:05:27 +0000
asID:                     10103
IP address blocks:        23.187.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:5e:bf:ba:08:06:86:25:0b:08:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
        Validity
            Not Before: Jan 10 11:05:27 2025 GMT
            Not After : Apr 10 10:05:27 2025 GMT
        Subject: CN=1f614b42-1211-4884-9a4c-80a068d8a9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3b:fc:b3:4d:af:50:95:92:a0:84:fa:b8:67:
                    9a:86:a9:85:f1:a6:d3:21:da:e0:7e:a6:fd:78:73:
                    aa:88:66:77:2b:7b:17:f7:a4:cc:f0:71:7f:90:1f:
                    3e:98:c5:7e:07:3f:72:5e:9b:6f:19:10:1a:85:96:
                    b5:10:76:90:5c:ce:70:ae:e0:d3:e8:19:41:6a:bf:
                    67:76:9b:77:69:b3:8f:8b:f5:9a:ea:4b:34:1d:c9:
                    28:92:e0:e6:79:5c:18:bb:bb:33:b9:22:54:95:e9:
                    38:cb:81:5d:c4:71:13:d3:1f:9f:f7:f9:9c:a4:46:
                    6e:0f:e3:70:91:e7:ba:5a:75:0f:9b:c7:66:8c:57:
                    7c:c6:b8:87:60:6a:c9:73:91:27:9a:c3:b2:09:57:
                    73:fd:bd:09:a3:9c:e7:e3:7b:bf:f8:7e:03:5f:cc:
                    86:d7:04:5b:67:fa:da:01:76:5b:67:59:05:a6:a6:
                    6c:fe:b1:8c:08:9e:3d:43:0f:2e:9c:d3:59:56:18:
                    3e:37:ed:b0:59:e1:6e:14:90:0a:29:5e:3f:60:ae:
                    16:22:cc:ba:a6:b1:80:b8:37:f3:12:59:11:fa:bf:
                    b1:6f:75:9a:f0:2b:d0:ca:d4:b6:48:62:91:65:11:
                    fd:6d:05:b8:86:88:44:e3:2e:80:2e:d6:40:fc:fe:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9F:F0:40:A2:0A:1E:52:70:A8:91:50:4F:C0:5F:C7:0E:25:70:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:47:00:fc:f0:dc:82:c1:0f:12:14:6c:cd:3b:be:fb:c3:f8:
         a5:e4:35:e2:c7:b5:e7:81:36:0f:95:85:e9:db:42:de:df:e8:
         72:0b:10:08:23:a8:d7:42:d9:41:57:aa:17:5b:d2:9a:51:6f:
         5b:69:b3:a2:27:6f:74:fc:2a:ad:eb:6d:a2:7b:98:0f:5f:b7:
         fb:1c:40:9d:3d:be:ad:4a:d7:59:92:9c:2c:b5:32:b2:f8:d6:
         47:06:98:20:08:14:89:2f:0f:22:c9:2f:73:b7:ce:53:27:70:
         f6:d6:7f:b2:fd:ae:d0:90:ec:47:e6:0f:90:92:b9:5d:c3:a4:
         8d:80:43:49:32:53:de:69:1d:73:aa:49:83:1f:33:3f:23:9c:
         f2:e8:18:0b:57:a4:9d:3b:73:34:76:ee:58:76:a2:10:ad:f4:
         13:c3:df:a0:75:7d:ad:34:0c:d7:9c:9b:4e:fd:e9:0c:89:7c:
         d4:ec:b6:07:ac:61:d2:85:26:45:88:ff:30:a3:b7:f4:08:49:
         91:13:44:35:24:01:12:d9:0e:f7:f4:5c:c4:61:a0:e3:9d:ef:
         d3:0f:5e:ee:aa:f1:2f:67:43:a9:51:1f:0f:f7:10:7c:13:e3:
         09:d6:22:55:8f:3f:e7:a7:03:d1:63:e3:f8:b2:1a:ea:44:97:
         a3:70:54:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/Xr+6CAaGJQsILUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNzBiMGQtZWUyMi00OWMyLWIzMWQtYTllMGRlNDM3
NGFhMB4XDTI1MDExMDExMDUyN1oXDTI1MDQxMDEwMDUyN1owLzEtMCsGA1UEAxMk
MWY2MTRiNDItMTIxMS00ODg0LTlhNGMtODBhMDY4ZDhhOWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDv8s02vUJWSoIT6uGeahqmF8abTIdrgfqb9
eHOqiGZ3K3sX96TM8HF/kB8+mMV+Bz9yXptvGRAahZa1EHaQXM5wruDT6BlBar9n
dpt3abOPi/Wa6ks0HckokuDmeVwYu7szuSJUlek4y4FdxHET0x+f9/mcpEZuD+Nw
kee6WnUPm8dmjFd8xriHYGrJc5EnmsOyCVdz/b0Jo5zn43u/+H4DX8yG1wRbZ/ra
AXZbZ1kFpqZs/rGMCJ49Qw8unNNZVhg+N+2wWeFuFJAKKV4/YK4WIsy6prGAuDfz
ElkR+r+xb3Wa8CvQytS2SGKRZRH9bQW4hohE4y6ALtZA/P5ElQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHWf8ECiCh5ScKiRUE/AX8cOJXD4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3
MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUwZGU0Mzc0YWEvNjEyZWE5YWEtZmVmNS0z
NDYxLTg5YjctNGY5Mzc3M2VmOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJkNzBiMGQtZWUyMi00OWMyLWIz
MWQtYTllMGRlNDM3NGFhLzIyZDcwYjBkLWVlMjItNDljMi1iMzFkLWE5ZTBkZTQz
NzRhYS5jcmwwHwYDVR0jBBgwFoAUMZKqBz4fp9Q1AmGPEYcxAg86peEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUw
ZGU0Mzc0YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7soMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZHAPzw3ILBDxIUbM07vvvD+KXkNeLHteeBNg+VhenbQt7f6HILEAgj
qNdC2UFXqhdb0ppRb1tps6Inb3T8Kq3rbaJ7mA9ft/scQJ09vq1K11mSnCy1MrL4
1kcGmCAIFIkvDyLJL3O3zlMncPbWf7L9rtCQ7EfmD5CSuV3DpI2AQ0kyU95pHXOq
SYMfMz8jnPLoGAtXpJ07czR27lh2ohCt9BPD36B1fa00DNecm0796QyJfNTstges
YdKFJkWI/zCjt/QISZETRDUkARLZDvf0XMRhoOOd79MPXu6q8S9nQ6lRHw/3EHwT
4wnWIlWPP+enA9Fj4/iyGupEl6NwVDo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:10:02 2025 by rpki-client