Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a05eae2f-ae84-33df-94a2-c5b84374f523.roa
File:                     a05eae2f-ae84-33df-94a2-c5b84374f523.roa (raw, json)
Hash identifier:          lmDZhULyi4ftM3OscK8faferoI1UnRLJyKI4WPkZjEg=
Subject key identifier:   E3:48:6A:76:9D:81:92:F0:B4:65:D2:EB:1B:D2:88:0E:7F:4E:C8:B3
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F43285848FBF12A0943411BF6D9320800
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a05eae2f-ae84-33df-94a2-c5b84374f523.roa
Signing time:             Mon 24 Feb 2025 02:00:38 +0000
ROA not before:           Mon 24 Feb 2025 02:00:38 +0000
ROA not after:            Sun 25 May 2025 01:00:38 +0000
asID:                     54004
IP address blocks:        134.202.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:f1:2a:09:43:41:1b:f6:d9:32:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Feb 24 02:00:38 2025 GMT
            Not After : May 25 01:00:38 2025 GMT
        Subject: CN=caa8cc86-171b-4f29-af58-e57ff7dda8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:9d:03:01:df:40:43:34:ef:10:c9:25:fe:
                    ba:57:97:fb:1a:68:ba:ef:71:01:a9:b8:9f:ef:f9:
                    e3:1e:14:29:04:f6:b0:d7:0c:cc:db:a6:a6:fd:09:
                    ac:5e:ba:f8:95:cb:c9:0e:a0:37:0a:df:8d:fa:bd:
                    a5:7e:93:fb:3a:f1:f4:49:cf:71:07:ad:5e:e2:8d:
                    ce:3f:f5:57:ab:0e:26:e9:19:38:fd:3c:c5:76:22:
                    4f:5e:2d:ed:78:80:dd:61:3d:40:94:26:12:7f:be:
                    7d:6f:2e:f8:b0:83:71:80:45:8f:d6:f7:ab:1c:b5:
                    02:4c:dc:17:3f:ee:7c:1c:de:f2:75:7f:c2:e9:52:
                    49:08:25:d4:14:f7:08:62:b6:d2:13:d5:1d:72:ff:
                    14:78:69:d2:2a:16:fb:43:40:2c:70:8d:43:a0:95:
                    3a:2a:d3:8a:b8:45:f9:dc:b7:79:ca:65:79:a6:c9:
                    4b:59:f8:8f:33:21:54:f6:99:00:94:34:56:5e:db:
                    19:09:d2:c0:e4:48:70:3a:04:5d:9c:24:43:e0:89:
                    e0:e0:ec:46:91:4c:e4:c9:c4:aa:dc:9a:e4:b5:e0:
                    2f:c7:54:18:7c:07:7f:1b:04:64:2a:88:84:c9:c2:
                    09:e4:43:86:38:d6:8b:9a:f7:df:1a:b7:67:df:05:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:48:6A:76:9D:81:92:F0:B4:65:D2:EB:1B:D2:88:0E:7F:4E:C8:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a05eae2f-ae84-33df-94a2-c5b84374f523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:13:a9:81:d2:85:e7:20:fa:80:ce:4a:55:29:b6:bf:68:
         12:c2:e0:2f:3d:06:83:53:46:0d:09:01:60:6a:86:3c:a0:2e:
         e3:e5:7d:12:37:69:bb:0f:91:0a:24:9e:81:80:4a:9b:f3:93:
         3d:79:8c:e5:d9:8c:7f:d5:60:84:4c:67:17:07:00:5e:a0:5a:
         d4:8d:04:99:ef:67:bd:a6:ae:ed:b1:24:48:2d:67:d6:5c:35:
         19:b2:04:6e:6e:39:ed:a2:48:0b:c0:18:27:db:11:12:e1:7a:
         3a:f3:fb:ef:c5:37:9c:e7:5b:79:65:a6:40:4c:49:c2:32:cb:
         08:75:5d:26:44:33:6f:24:fb:d2:90:46:ed:26:37:90:53:8e:
         7e:19:71:a1:80:9d:47:24:74:20:30:de:7c:3e:8c:9b:6e:1a:
         05:15:5c:f7:6a:c1:d7:60:46:3c:8a:9b:ec:12:48:54:26:f9:
         47:3d:1c:c8:d0:d4:ad:66:41:9b:42:f2:9b:1e:29:52:32:18:
         7e:0a:23:56:f1:82:36:ce:8a:c8:b6:81:d6:7d:72:26:d9:06:
         e7:d5:55:9f:6e:cc:34:aa:0f:84:08:98:93:91:62:7a:06:e5:
         d8:d4:2f:ed:1b:17:09:3a:34:00:3e:7e:71:e0:f4:79:c3:c5:
         31:8d:5c:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78SoJQ0Eb9tkyCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk
Y2FhOGNjODYtMTcxYi00ZjI5LWFmNTgtZTU3ZmY3ZGRhOGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye6dAwHfQEM07xDJJf66V5f7Gmi673EBqbif
7/njHhQpBPaw1wzM26am/QmsXrr4lcvJDqA3Ct+N+r2lfpP7OvH0Sc9xB61e4o3O
P/VXqw4m6Rk4/TzFdiJPXi3teIDdYT1AlCYSf759by74sINxgEWP1verHLUCTNwX
P+58HN7ydX/C6VJJCCXUFPcIYrbSE9Udcv8UeGnSKhb7Q0AscI1DoJU6KtOKuEX5
3Ld5ymV5pslLWfiPMyFU9pkAlDRWXtsZCdLA5EhwOgRdnCRD4Ing4OxGkUzkycSq
3JrkteAvx1QYfAd/GwRkKoiEycIJ5EOGONaLmvffGrdn3wUeCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFONIanadgZLwtGXS6xvSiA5/TsizMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvYTA1ZWFlMmYtYWU4NC0z
M2RmLTk0YTItYzViODQzNzRmNTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsofMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1sE6mB0oXnIPqAzkpVKba/aBLC4C89BoNTRg0JAWBqhjygLuPlfRI3
absPkQoknoGASpvzkz15jOXZjH/VYIRMZxcHAF6gWtSNBJnvZ72mru2xJEgtZ9Zc
NRmyBG5uOe2iSAvAGCfbERLhejrz++/FN5znW3llpkBMScIyywh1XSZEM28k+9KQ
Ru0mN5BTjn4ZcaGAnUckdCAw3nw+jJtuGgUVXPdqwddgRjyKm+wSSFQm+Uc9HMjQ
1K1mQZtC8pseKVIyGH4KI1bxgjbOisi2gdZ9cibZBufVVZ9uzDSqD4QImJORYnoG
5djUL+0bFwk6NAA+fnHg9HnDxTGNXCo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:13 2025 by rpki-client