Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a1ad304-cefa-344b-8e96-10634b0caf7f.roa
File:                     3a1ad304-cefa-344b-8e96-10634b0caf7f.roa (raw, json)
Hash identifier:          nwKxR+8bW8z/dpuuuCcFIK2x4JGCFWGfRPPxh7Rl+6g=
Subject key identifier:   07:87:73:76:93:A4:AD:30:47:9A:59:28:D1:15:C3:F2:04:16:44:6A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848064504F7A184687F17F299C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a1ad304-cefa-344b-8e96-10634b0caf7f.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     834
IP address blocks:        173.211.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:04:f7:a1:84:68:7f:17:f2:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=15df6262-5d58-4d72-b7bc-f5921125f866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:31:3e:e1:ec:93:eb:62:5e:81:1d:e7:32:
                    55:db:0e:fd:59:33:47:3d:94:60:d6:95:a2:7b:0d:
                    05:41:39:ae:41:da:bd:be:55:ff:55:e5:11:0b:64:
                    a4:ba:5f:13:1f:0a:c7:52:c4:be:c1:31:1e:a2:d3:
                    a1:bc:b5:52:8d:84:4c:71:33:4c:13:9d:11:7e:9b:
                    40:d8:cd:3b:70:af:00:b8:81:9d:7d:02:4c:06:8e:
                    fe:6c:b1:c9:d9:a6:c4:b6:e8:25:6e:d5:be:c3:c4:
                    5e:d6:9b:76:14:11:3b:8b:7f:1a:c2:a7:ae:d1:04:
                    ce:51:f4:f0:2f:e3:5f:40:0e:5e:47:d7:78:78:b2:
                    92:a2:24:5d:5b:54:f0:b9:3d:89:7f:ed:32:56:43:
                    30:e7:f1:ee:b8:cb:24:33:92:a2:8b:e1:0c:ca:2f:
                    d0:72:7c:8c:7d:2d:16:f2:09:f8:b3:d4:b3:16:c1:
                    e3:5c:72:07:bc:38:8e:09:7c:6e:a4:14:4e:cd:02:
                    01:7c:df:aa:82:b2:9e:c2:5c:43:7b:88:b0:ca:1f:
                    88:42:94:4b:99:1e:7b:b1:58:47:f3:0d:00:45:a8:
                    23:75:04:b1:99:6e:6d:d3:80:e8:c9:3b:2d:35:f9:
                    2a:f7:73:0a:14:7f:c2:c9:1c:41:5d:62:b7:44:9c:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:87:73:76:93:A4:AD:30:47:9A:59:28:D1:15:C3:F2:04:16:44:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a1ad304-cefa-344b-8e96-10634b0caf7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c9:9d:c1:0f:65:64:bd:8d:db:00:56:6a:1c:3c:cb:72:b8:
         d9:b6:51:32:a6:ce:ed:46:83:bb:ef:69:c9:ef:82:6a:4c:36:
         6c:d7:8f:0f:3e:c5:07:52:3f:c9:da:30:61:33:51:27:a7:e3:
         e2:b3:8f:d7:a5:19:a8:46:02:3f:db:cc:bc:cf:0a:50:d0:d5:
         f2:6a:ca:6d:f0:d8:4d:f8:15:43:14:2a:3f:77:31:3b:bd:4a:
         0f:61:32:b2:8d:bc:27:d8:f7:fe:4c:34:95:0c:3a:d0:32:ad:
         2d:21:0a:c3:fe:eb:03:a6:12:de:7f:62:b1:41:e5:10:d7:b6:
         a6:62:a8:1a:e0:76:a5:d4:8f:d9:0c:59:c4:12:df:b5:92:88:
         cf:99:c7:3e:c4:d3:d5:d0:31:f2:a0:27:7a:d7:58:58:74:2b:
         ad:2d:97:55:0c:52:2d:ce:af:57:13:28:49:30:52:24:f8:b1:
         23:d6:1d:b4:5e:ae:81:ad:e6:b3:67:b1:0f:ab:9c:ad:12:62:
         72:6b:88:ec:89:c0:83:72:89:7c:f4:8c:c2:81:a9:59:6f:3e:
         a6:3a:00:42:ad:f6:45:80:60:9a:29:c4:2f:68:25:6e:73:d6:
         2c:0b:8e:26:f3:3e:9d:e0:6d:e3:b1:75:e4:bb:71:65:38:e1:
         e8:e4:1e:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRQT3oYRofxfymcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
MTVkZjYyNjItNWQ1OC00ZDcyLWI3YmMtZjU5MjExMjVmODY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZkxPuHsk+tiXoEd5zJV2w79WTNHPZRg1pWi
ew0FQTmuQdq9vlX/VeURC2Skul8THwrHUsS+wTEeotOhvLVSjYRMcTNME50RfptA
2M07cK8AuIGdfQJMBo7+bLHJ2abEtuglbtW+w8Re1pt2FBE7i38awqeu0QTOUfTw
L+NfQA5eR9d4eLKSoiRdW1TwuT2Jf+0yVkMw5/HuuMskM5Kii+EMyi/QcnyMfS0W
8gn4s9SzFsHjXHIHvDiOCXxupBROzQIBfN+qgrKewlxDe4iwyh+IQpRLmR57sVhH
8w0ARagjdQSxmW5t04DoyTstNfkq93MKFH/CyRxBXWK3RJw8vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAeHc3aTpK0wR5pZKNEVw/IEFkRqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvM2ExYWQzMDQtY2VmYS0z
NDRiLThlOTYtMTA2MzRiMGNhZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdMvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJnJncEPZWS9jdsAVmocPMtyuNm2UTKmzu1Gg7vvacnvgmpMNmzXjw8+
xQdSP8naMGEzUSen4+Kzj9elGahGAj/bzLzPClDQ1fJqym3w2E34FUMUKj93MTu9
Sg9hMrKNvCfY9/5MNJUMOtAyrS0hCsP+6wOmEt5/YrFB5RDXtqZiqBrgdqXUj9kM
WcQS37WSiM+Zxz7E09XQMfKgJ3rXWFh0K60tl1UMUi3Or1cTKEkwUiT4sSPWHbRe
roGt5rNnsQ+rnK0SYnJriOyJwINyiXz0jMKBqVlvPqY6AEKt9kWAYJopxC9oJW5z
1iwLjibzPp3gbeOxdeS7cWU44ejkHmw=
-----END CERTIFICATE-----
Generated at Tue Feb 11 20:55:23 2025 by rpki-client