Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa
File:                     4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa (raw, json)
Hash identifier:          8b4ZjUdnFwBj/2Z5wu6j7BSumnNp6+iL0uoMmFFU6wE=
Subject key identifier:   F8:66:29:C9:E8:7E:C1:63:CD:23:5A:34:C3:04:5B:3B:52:A0:4C:30
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848BFEBCB166E54F92CF8478A80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:cb:16:6e:54:f9:2c:f8:47:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=483206c8-e2ee-42ec-8f08-c1d8cecf42f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:e9:4a:28:35:4e:d0:86:dc:63:db:b2:68:
                    13:70:9b:f9:fb:eb:e2:4c:d3:f0:fe:40:e0:38:07:
                    4c:02:73:af:97:8c:63:db:2b:76:a0:7d:38:ec:f7:
                    58:2f:15:55:b8:4f:dd:79:83:74:67:b3:57:b2:29:
                    81:f5:e2:2d:9c:48:3c:51:18:10:44:bf:9a:84:fc:
                    77:59:ca:e9:bd:15:56:98:bb:a4:03:34:02:67:62:
                    06:39:32:e4:9a:e3:96:9c:fc:68:89:5e:15:72:d3:
                    f5:4e:aa:c8:f8:15:90:ce:c3:2d:e6:0d:e9:09:90:
                    c5:f5:6c:c2:b0:01:6a:c7:a1:97:a7:28:c4:7c:4f:
                    80:c1:5c:17:4b:8f:ef:7c:07:e1:19:3f:d1:b5:8b:
                    d2:3b:f7:d7:a6:d5:ea:fc:ef:7f:69:c9:cb:f1:17:
                    5d:9a:ee:00:23:00:8c:9d:e7:ff:73:b4:32:2f:57:
                    43:1e:33:c0:ad:07:79:50:4b:8d:38:ca:9e:2f:30:
                    69:da:6c:4a:36:a0:40:92:36:c2:28:55:97:3f:24:
                    7a:98:19:d9:05:e8:f6:91:2b:ac:46:04:e6:1b:8b:
                    da:ab:8e:bd:fc:a8:8b:ae:bc:83:d1:07:dd:96:7c:
                    2c:55:f5:99:c3:bc:b2:62:2d:75:02:03:85:9c:3c:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:66:29:C9:E8:7E:C1:63:CD:23:5A:34:C3:04:5B:3B:52:A0:4C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:74:ce:78:75:3c:10:d4:c7:48:b9:b0:d4:bf:ca:28:02:69:
         89:cc:7b:17:ab:13:b2:f2:21:2c:48:9f:b2:74:2a:65:85:12:
         e1:f4:7b:50:2b:c4:b0:89:eb:a1:ba:3d:75:03:94:fb:b9:a2:
         34:c6:7f:20:e3:d5:91:35:b4:cc:69:4f:8d:17:d2:e8:9d:4f:
         dc:46:db:8f:12:0b:ba:4f:48:9f:0f:71:ab:96:df:a5:b1:7f:
         5c:55:95:1f:8b:ae:9c:73:6e:1a:1c:a8:ca:c8:f4:78:fc:a6:
         cf:33:d7:87:53:0f:9a:0d:d9:d1:b3:43:38:f2:d8:5d:8f:8e:
         cd:6b:33:b8:aa:ee:48:65:ae:3b:66:d6:f6:ea:6c:da:63:fa:
         77:62:44:c7:64:a3:99:71:9b:0b:b9:5e:7a:e9:c4:6e:e3:9d:
         4d:21:7f:f7:04:ec:d5:82:66:1f:ac:9a:6c:aa:f0:23:51:d3:
         dc:da:3f:bd:27:c3:cc:33:95:67:55:e0:6b:7a:3a:fe:91:f5:
         fd:51:2d:3f:ba:2b:d6:6b:03:7b:39:e5:33:0e:3e:be:31:99:
         d1:32:b7:43:66:f8:2c:46:89:83:dd:5f:26:2d:0c:78:a7:f2:
         3b:ce:8c:84:af:9f:b8:55:98:40:37:d6:3e:88:98:d7:67:f6:
         e0:d9:83:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68sWblT5LPhHioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NDgzMjA2YzgtZTJlZS00MmVjLThmMDgtYzFkOGNlY2Y0MmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuanpSig1TtCG3GPbsmgTcJv5++viTNPw/kDg
OAdMAnOvl4xj2yt2oH047PdYLxVVuE/deYN0Z7NXsimB9eItnEg8URgQRL+ahPx3
WcrpvRVWmLukAzQCZ2IGOTLkmuOWnPxoiV4VctP1TqrI+BWQzsMt5g3pCZDF9WzC
sAFqx6GXpyjEfE+AwVwXS4/vfAfhGT/RtYvSO/fXptXq/O9/acnL8Rddmu4AIwCM
nef/c7QyL1dDHjPArQd5UEuNOMqeLzBp2mxKNqBAkjbCKFWXPyR6mBnZBej2kSus
RgTmG4vaq469/KiLrryD0QfdlnwsVfWZw7yyYi11AgOFnDxToQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhmKcnofsFjzSNaNMMEWztSoEwwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNGUzNWE5MjEtNGJjYy0z
MmM1LTgwYmYtYmI4MjBhMTBlOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJt0znh1PBDUx0i5sNS/yigCaYnMexerE7LyISxIn7J0KmWFEuH0e1Ar
xLCJ66G6PXUDlPu5ojTGfyDj1ZE1tMxpT40X0uidT9xG248SC7pPSJ8PcauW36Wx
f1xVlR+LrpxzbhocqMrI9Hj8ps8z14dTD5oN2dGzQzjy2F2Pjs1rM7iq7khlrjtm
1vbqbNpj+ndiRMdko5lxmwu5XnrpxG7jnU0hf/cE7NWCZh+smmyq8CNR09zaP70n
w8wzlWdV4Gt6Ov6R9f1RLT+6K9ZrA3s55TMOPr4xmdEyt0Nm+CxGiYPdXyYtDHin
8jvOjISvn7hVmEA31j6ImNdn9uDZgzY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:23:37 2025 by rpki-client