Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4d7f2a3-1e62-3fa0-a227-e97031d07942.roa
File:                     c4d7f2a3-1e62-3fa0-a227-e97031d07942.roa (raw, json)
Hash identifier:          pNkIzcYWoX155H88fF2GEG/G640fw02d+o4NAdS0vlc=
Subject key identifier:   94:92:9F:3B:72:70:17:9F:F0:B9:E8:94:D6:42:46:48:64:36:A3:8C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C581774B6474E1608606C4C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4d7f2a3-1e62-3fa0-a227-e97031d07942.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        146.148.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:77:4b:64:74:e1:60:86:06:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=428ff55b-0761-4526-925d-a7aadbf5ef5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dc:73:5a:dc:af:59:9d:c8:a3:18:25:bb:58:
                    7c:88:0d:c6:02:e5:c6:3d:f7:b7:eb:03:a1:a7:a5:
                    58:5e:99:ef:cb:cd:8e:63:f0:d7:17:34:92:23:2b:
                    bb:98:48:ed:e0:d5:10:fd:86:2a:c7:79:98:f0:b3:
                    73:42:a1:ea:60:b9:30:ba:79:90:fc:5e:dc:93:dc:
                    69:16:07:66:d0:6f:63:82:b5:96:d8:ff:b6:52:d8:
                    42:6a:eb:d7:e7:b9:ef:ab:47:e0:9c:a3:63:7a:b3:
                    c2:9d:0a:aa:93:38:10:bf:9d:27:9c:93:8c:70:bd:
                    a3:88:e1:51:12:99:b8:d9:98:8d:a4:ae:ec:0b:92:
                    4c:47:d8:1e:62:39:04:74:82:fa:8a:46:62:0a:27:
                    ce:e6:59:88:c6:45:08:6c:d2:46:32:b2:82:c4:bf:
                    dd:00:d0:97:da:5b:aa:ab:e3:6a:28:a2:a3:3f:48:
                    ce:70:cb:de:f9:49:ad:d1:80:07:d2:c9:3c:82:90:
                    56:1b:4f:26:ca:5c:65:d5:aa:f9:87:99:f3:ee:76:
                    00:d9:75:f9:34:2a:fc:8a:f9:9f:ca:39:ac:78:06:
                    69:90:ad:92:ac:be:10:57:30:ce:01:46:4b:4a:2e:
                    45:b6:b3:30:a9:13:4e:47:7b:73:fa:54:3e:bc:a4:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:92:9F:3B:72:70:17:9F:F0:B9:E8:94:D6:42:46:48:64:36:A3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4d7f2a3-1e62-3fa0-a227-e97031d07942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:c8:93:43:5e:78:5b:da:18:bd:17:a3:93:16:df:b6:d3:
         c3:0c:c5:bd:e6:03:0f:e2:ab:0e:e5:a1:9c:31:81:9c:b4:91:
         af:cd:5e:be:a3:33:81:52:b1:ae:b1:48:93:de:d7:66:52:57:
         ca:19:b1:cc:e8:3b:76:52:ce:6b:01:0e:1d:c8:5f:d5:7a:90:
         9b:4a:03:9b:36:0a:f9:e0:26:92:c9:6b:dc:67:39:a0:2d:2a:
         65:b5:a4:0f:a4:ec:38:87:d9:a0:b5:26:67:5f:80:47:d1:dd:
         43:83:5a:68:58:cf:59:48:24:8a:7c:9f:57:58:e9:22:b1:46:
         4f:10:04:ac:26:52:3d:b5:3d:90:e2:a4:a4:1a:f9:85:b5:51:
         85:70:1d:d0:7f:53:af:04:3a:f6:66:23:ff:1c:ca:ec:65:a0:
         8c:f6:b2:65:14:68:f2:7d:d4:8f:6d:fc:ed:90:73:4a:68:ec:
         6f:97:04:2c:aa:74:7f:99:1d:7d:cc:ce:36:4e:e9:3c:52:eb:
         53:5a:fb:7e:1a:69:a0:3d:34:27:53:c7:ef:17:a9:2f:e4:7f:
         19:68:99:e4:58:fe:39:1c:6b:19:8e:ac:19:3c:be:99:47:aa:
         04:2a:ed:53:97:33:0e:7f:8a:f8:95:20:14:6a:12:64:e7:c3:
         48:53:6b:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXdLZHThYIYGxMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NDI4ZmY1NWItMDc2MS00NTI2LTkyNWQtYTdhYWRiZjVlZjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdxzWtyvWZ3Ioxglu1h8iA3GAuXGPfe36wOh
p6VYXpnvy82OY/DXFzSSIyu7mEjt4NUQ/YYqx3mY8LNzQqHqYLkwunmQ/F7ck9xp
Fgdm0G9jgrWW2P+2UthCauvX57nvq0fgnKNjerPCnQqqkzgQv50nnJOMcL2jiOFR
Epm42ZiNpK7sC5JMR9geYjkEdIL6ikZiCifO5lmIxkUIbNJGMrKCxL/dANCX2luq
q+NqKKKjP0jOcMve+Umt0YAH0sk8gpBWG08mylxl1ar5h5nz7nYA2XX5NCr8ivmf
yjmseAZpkK2SrL4QVzDOAUZLSi5FtrMwqRNOR3tz+lQ+vKRWmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJSSnztycBef8LnolNZCRkhkNqOMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzRkN2YyYTMtMWU2Mi0z
ZmEwLWEyMjctZTk3MDMxZDA3OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkpQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEywyJNDXnhb2hi9F6OTFt+208MMxb3mAw/iqw7loZwxgZy0ka/NXr6j
M4FSsa6xSJPe12ZSV8oZsczoO3ZSzmsBDh3IX9V6kJtKA5s2CvngJpLJa9xnOaAt
KmW1pA+k7DiH2aC1JmdfgEfR3UODWmhYz1lIJIp8n1dY6SKxRk8QBKwmUj21PZDi
pKQa+YW1UYVwHdB/U68EOvZmI/8cyuxloIz2smUUaPJ91I9t/O2Qc0po7G+XBCyq
dH+ZHX3MzjZO6TxS61Na+34aaaA9NCdTx+8XqS/kfxlomeRY/jkcaxmOrBk8vplH
qgQq7VOXMw5/iviVIBRqEmTnw0hTa1A=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:46:50 2025 by rpki-client