Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/844da407-f39a-370d-81ac-4ac4bd4a5b38.roa
File:                     844da407-f39a-370d-81ac-4ac4bd4a5b38.roa (raw, json)
Hash identifier:          KDjkdDorx5IfkhBriwjtLpwOHXvFixrvqcRlVTvnSAg=
Subject key identifier:   18:6A:C8:86:14:5B:59:20:8E:B1:C9:7B:A4:87:E0:1A:42:D4:BC:E9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1CE662ACF0204044A5800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/844da407-f39a-370d-81ac-4ac4bd4a5b38.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        142.129.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ce:66:2a:cf:02:04:04:4a:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=e201b463-5cb3-4164-ace8-09f6fbf66578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:a4:f1:fc:a4:72:d8:65:8d:07:c0:d3:ea:
                    d6:49:1f:ea:f9:3e:56:e3:d4:ce:0d:e9:ce:27:10:
                    de:1f:b6:20:21:9e:1a:64:54:dc:de:87:1e:1a:a2:
                    48:0f:9d:c4:48:f8:ca:49:c2:d0:2f:ee:d4:53:4c:
                    e2:52:2e:3f:8f:bc:72:a5:d9:15:40:73:17:26:5d:
                    69:60:15:5a:85:ed:70:25:c2:d6:3f:34:8c:a7:eb:
                    8a:c7:67:80:f9:9c:60:6f:41:4e:b0:8d:c0:31:95:
                    d3:95:d9:69:13:78:81:d3:af:91:59:89:ae:f7:4f:
                    e4:f3:a8:88:28:c9:1d:05:61:0e:9a:3c:6e:73:64:
                    c0:8c:43:ee:38:ab:b4:3e:66:ac:72:72:73:c6:d6:
                    35:a5:9c:e9:82:e6:29:91:38:b6:8e:92:40:30:1a:
                    d3:67:65:c9:43:c6:4e:f9:42:59:15:2e:0b:1a:fc:
                    0f:13:29:55:c0:c9:b4:f8:ba:05:5f:d7:06:28:ed:
                    7d:6a:f0:54:48:c4:14:31:3e:60:b1:4e:a2:a4:b6:
                    a8:ba:65:eb:51:60:b2:3e:df:5c:a8:84:41:26:9f:
                    fb:77:63:87:39:41:32:a2:95:fc:11:58:4c:1d:e8:
                    d2:7f:12:1d:08:8b:f2:87:3c:12:21:1f:d4:20:ad:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6A:C8:86:14:5B:59:20:8E:B1:C9:7B:A4:87:E0:1A:42:D4:BC:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/844da407-f39a-370d-81ac-4ac4bd4a5b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:80:59:2d:f4:f4:ed:68:88:22:87:3a:87:ae:f4:08:dc:12:
         d7:7c:8c:e1:49:85:7e:b0:b7:58:0d:c3:c6:0a:85:ad:c5:95:
         f8:76:1c:06:b1:f9:1d:e2:8e:98:74:45:3c:fc:11:68:5c:82:
         d9:2b:81:06:4c:83:45:9d:44:fb:18:64:1e:50:2c:11:36:e5:
         05:6d:c9:2a:9e:20:d5:a4:71:5b:2d:51:43:10:b4:20:e6:92:
         80:6d:2e:23:95:10:01:44:44:6e:d6:e2:79:73:53:be:58:e2:
         bb:da:a5:dd:35:ae:69:7b:bb:89:1c:ee:e9:dd:4f:dd:03:62:
         18:1b:d2:92:02:d5:70:e7:78:a5:c3:a9:15:21:c6:1c:43:1a:
         90:41:81:db:03:36:38:40:13:ec:0b:2a:54:fc:d5:57:29:b6:
         17:7c:b1:ff:b6:9b:99:c5:82:2d:d6:3a:ee:9f:a9:56:18:ce:
         d0:39:4f:e5:9b:25:0b:a7:19:aa:cc:42:24:a6:89:6e:dd:0d:
         d9:f3:96:46:98:4c:0e:30:d2:c6:d4:12:34:5a:01:fb:cd:59:
         70:a1:28:c4:af:05:28:32:8e:a3:90:a5:ba:bf:47:81:8d:99:
         57:4d:c2:1b:21:a2:b5:f0:8a:f6:73:54:b5:75:2c:dd:36:44:
         8e:48:c4:6c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEji0c5mKs8CBARKWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZTIwMWI0NjMtNWNiMy00MTY0LWFjZTgtMDlmNmZiZjY2NTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh06k8fykcthljQfA0+rWSR/q+T5W49TODenO
JxDeH7YgIZ4aZFTc3oceGqJID53ESPjKScLQL+7UU0ziUi4/j7xypdkVQHMXJl1p
YBVahe1wJcLWPzSMp+uKx2eA+Zxgb0FOsI3AMZXTldlpE3iB06+RWYmu90/k86iI
KMkdBWEOmjxuc2TAjEPuOKu0PmascnJzxtY1pZzpguYpkTi2jpJAMBrTZ2XJQ8ZO
+UJZFS4LGvwPEylVwMm0+LoFX9cGKO19avBUSMQUMT5gsU6ipLaoumXrUWCyPt9c
qIRBJp/7d2OHOUEyopX8EVhMHejSfxIdCIvyhzwSIR/UIK1rUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBhqyIYUW1kgjrHJe6SH4BpC1LzpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODQ0ZGE0MDctZjM5YS0z
NzBkLTgxYWMtNGFjNGJkNGE1YjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjoEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaYBZLfT07WiIIoc6h670CNwS13yM4UmFfrC3WA3DxgqFrcWV+HYcBrH5
HeKOmHRFPPwRaFyC2SuBBkyDRZ1E+xhkHlAsETblBW3JKp4g1aRxWy1RQxC0IOaS
gG0uI5UQAUREbtbieXNTvljiu9ql3TWuaXu7iRzu6d1P3QNiGBvSkgLVcOd4pcOp
FSHGHEMakEGB2wM2OEAT7AsqVPzVVym2F3yx/7abmcWCLdY67p+pVhjO0DlP5Zsl
C6cZqsxCJKaJbt0N2fOWRphMDjDSxtQSNFoB+81ZcKEoxK8FKDKOo5Clur9HgY2Z
V03CGyGitfCK9nNUtXUs3TZEjkjEbA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:17:44 2025 by rpki-client