Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
File:                     65743670-00eb-3d49-bc50-633e73b6f7d1.roa (raw, json)
Hash identifier:          9VFBo3b8GV1NcH4Z4uOVd9OmwIo6LR0FpW+/+Bx7uzE=
Subject key identifier:   1C:A0:09:1D:29:46:5A:4E:6F:6F:30:16:C3:5C:05:67:29:F7:87:20
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F4328584E31CF06776029BEEA0B0CD120
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     12097
IP address blocks:        24.140.16.0/20 maxlen: 20
                          24.140.16.0/21 maxlen: 21
                          24.140.24.0/21 maxlen: 21
                          24.140.32.0/21 maxlen: 21
                          24.140.40.0/21 maxlen: 21
                          24.140.48.0/20 maxlen: 20
                          24.140.64.0/21 maxlen: 21
                          24.140.72.0/21 maxlen: 21
                          24.140.80.0/21 maxlen: 21
                          24.140.88.0/21 maxlen: 21
                          24.140.96.0/21 maxlen: 21
                          24.140.104.0/21 maxlen: 21
                          24.140.112.0/21 maxlen: 21
                          24.140.120.0/21 maxlen: 21
                          24.140.128.0/21 maxlen: 21
                          24.140.136.0/21 maxlen: 21
                          24.140.144.0/21 maxlen: 21
                          24.140.152.0/21 maxlen: 21
                          24.140.160.0/20 maxlen: 20
                          24.140.176.0/20 maxlen: 20
                          24.140.192.0/19 maxlen: 19
                          24.140.192.0/21 maxlen: 21
                          24.140.200.0/21 maxlen: 21
                          24.140.208.0/21 maxlen: 21
                          24.140.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:06:77:60:29:be:ea:0b:0c:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=3dbce6e6-c29c-41c2-8f74-4d8cfe0325a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:b6:af:f9:4b:df:4f:63:4b:3a:9f:81:39:
                    60:23:49:7b:91:2e:40:61:7a:24:30:f1:b5:b7:33:
                    98:12:14:4b:f5:06:0b:f4:1d:56:97:e8:c2:c3:45:
                    73:22:37:75:13:68:41:da:e6:58:22:22:05:9b:0c:
                    74:de:e1:f7:f7:dd:79:1c:62:c0:0d:b8:00:d7:30:
                    13:fa:c9:64:10:3a:72:da:93:da:12:6e:94:7a:97:
                    22:0c:8a:4b:b0:cb:c1:05:73:92:33:ed:3e:ef:b6:
                    18:e3:76:36:b8:52:90:21:82:68:b4:67:0f:d8:4f:
                    6a:59:4f:32:4b:a7:a3:f7:93:82:07:60:7f:c8:18:
                    cb:ec:04:6d:ae:03:30:81:98:c1:08:91:e7:e6:48:
                    66:8c:d2:89:12:e9:de:bf:47:7f:d9:fe:bc:ab:30:
                    72:af:99:c9:51:d1:3b:97:6f:ad:59:03:d1:8c:f2:
                    d4:57:e3:51:a1:60:5c:73:a4:2c:03:62:11:40:a6:
                    94:76:ee:6d:20:07:98:dc:42:03:74:59:1e:d3:fe:
                    46:00:99:07:6b:10:6f:d3:87:90:1d:c3:33:dc:70:
                    29:6c:80:39:2c:fd:ce:c2:82:10:d2:06:e6:6e:40:
                    5b:6b:8c:bb:f8:c5:6d:a7:07:ff:62:87:aa:3b:25:
                    6c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A0:09:1D:29:46:5A:4E:6F:6F:30:16:C3:5C:05:67:29:F7:87:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.16.0-24.140.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e2:b1:5d:d5:31:93:59:04:4a:73:a1:9e:f4:4d:2b:fa:2a:
         e6:00:ad:f7:7f:43:59:54:a9:f5:cf:a5:36:01:77:e0:a4:40:
         51:0d:3b:4e:96:c1:f3:09:0d:f5:31:40:e5:50:3e:10:d8:50:
         dc:cf:2c:7b:a6:32:da:71:98:46:9f:a7:c9:f3:41:dd:ac:7d:
         3d:19:56:aa:57:ca:c0:d7:22:4a:5d:10:8d:59:23:65:6a:7e:
         a3:56:eb:0e:5a:d9:4b:81:48:31:89:60:6a:01:18:36:59:c7:
         e1:bd:6a:67:3e:6c:b7:8b:0b:da:43:c5:32:66:3e:d6:31:6e:
         26:dd:80:bd:84:a2:1d:eb:56:2e:eb:bb:3f:5a:ae:5c:18:f2:
         3b:77:d8:db:97:45:9f:4e:36:90:b9:7d:73:0c:18:84:13:54:
         8d:be:8c:31:97:2c:89:12:d6:ee:11:4b:48:50:31:f3:84:a3:
         90:da:4e:a5:60:17:38:be:12:36:fb:78:27:be:10:01:ca:f2:
         df:7e:5b:7f:22:80:2e:e3:89:1c:7e:b6:96:fb:0f:c0:72:72:
         fa:13:07:87:a5:8c:39:2c:d2:83:a8:4a:f2:67:d3:e5:8a:13:
         ab:2f:95:71:2e:cf:6f:f6:20:bd:c9:43:0c:e5:c1:1e:ea:6c:
         45:4a:d6:10
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4xzwZ3YCm+6gsM0SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJhZDVhNTgtM2FkZi00MWNiLTk1OTgtYjMyNjA1OTEz
OThjMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
M2RiY2U2ZTYtYzI5Yy00MWMyLThmNzQtNGQ4Y2ZlMDMyNWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie+2r/lL309jSzqfgTlgI0l7kS5AYXokMPG1
tzOYEhRL9QYL9B1Wl+jCw0VzIjd1E2hB2uZYIiIFmwx03uH39915HGLADbgA1zAT
+slkEDpy2pPaEm6UepciDIpLsMvBBXOSM+0+77YY43Y2uFKQIYJotGcP2E9qWU8y
S6ej95OCB2B/yBjL7ARtrgMwgZjBCJHn5khmjNKJEunev0d/2f68qzByr5nJUdE7
l2+tWQPRjPLUV+NRoWBcc6QsA2IRQKaUdu5tIAeY3EIDdFke0/5GAJkHaxBv04eQ
HcMz3HApbIA5LP3OwoIQ0gbmbkBba4y7+MVtpwf/YoeqOyVs8wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFBygCR0pRlpOb28wFsNcBWcp94cgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFk
NWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2MDU5MTM5OGMvNjU3NDM2NzAtMDBlYi0z
ZDQ5LWJjNTAtNjMzZTczYjZmN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJhZDVhNTgtM2FkZi00MWNiLTk1
OTgtYjMyNjA1OTEzOThjLzAyYWQ1YTU4LTNhZGYtNDFjYi05NTk4LWIzMjYwNTkx
Mzk4Yy5jcmwwHwYDVR0jBBgwFoAUKNX25nvuh76t7kX/XRlWfFoxRZAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFkNWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2
MDU5MTM5OGMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQYjBAD
BAUYjMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAHOKxXdUxk1kESnOhnvRNK/oq5gCt939DWVSp9c+lNgF3
4KRAUQ07TpbB8wkN9TFA5VA+ENhQ3M8se6Yy2nGYRp+nyfNB3ax9PRlWqlfKwNci
Sl0QjVkjZWp+o1brDlrZS4FIMYlgagEYNlnH4b1qZz5st4sL2kPFMmY+1jFuJt2A
vYSiHetWLuu7P1quXBjyO3fY25dFn042kLl9cwwYhBNUjb6MMZcsiRLW7hFLSFAx
84SjkNpOpWAXOL4SNvt4J74QAcry335bfyKALuOJHH62lvsPwHJy+hMHh6WMOSzS
g6hK8mfT5YoTqy+VcS7Pb/YgvclDDOXBHupsRUrWEA==
-----END CERTIFICATE-----