Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5f45f22-cdc2-3a41-8771-55420fe3b413.roa
File:                     a5f45f22-cdc2-3a41-8771-55420fe3b413.roa (raw, json)
Hash identifier:          zWa2pyomIBQmLW48jWeCSc324FZl0mN6RTc4ADepp/Y=
Subject key identifier:   7A:5C:53:FD:64:92:03:03:58:0C:B0:FD:44:A2:A4:61:73:6D:C2:78
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584869605F317E9E6C0162E00D60
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5f45f22-cdc2-3a41-8771-55420fe3b413.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     998
IP address blocks:        184.174.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:5f:31:7e:9e:6c:01:62:e0:0d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=19b74393-86ff-4ddb-a40e-b94c21fac1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:17:17:66:fe:fc:d0:8c:89:91:18:67:3b:
                    bd:71:13:2c:50:e7:e0:4f:ea:d8:61:d2:b7:a3:d2:
                    ef:d3:47:d6:12:36:73:8d:3b:26:11:8c:15:1c:5f:
                    d5:44:80:45:17:d3:ef:ce:95:20:4a:3a:c8:79:ed:
                    e5:f5:d8:3b:08:c3:1e:e9:90:3d:1c:0e:06:da:4f:
                    0e:1e:35:0d:52:f4:97:c6:71:2f:8f:f4:6e:2e:c8:
                    41:5e:25:b5:a3:ff:62:90:04:e9:88:dd:74:67:7a:
                    3c:67:3d:3f:fe:10:69:cc:25:e8:cd:8a:de:66:98:
                    58:7e:44:79:ed:7f:30:ee:62:38:af:64:d7:6c:cf:
                    13:6b:ee:7f:5f:d9:57:d5:26:05:30:d2:32:37:64:
                    62:52:93:fc:2e:3c:36:7f:a1:79:41:17:2d:b1:ed:
                    49:c7:d9:6a:c3:62:e1:30:02:2a:87:3a:1d:ce:76:
                    ee:b3:2e:30:44:25:74:df:d3:73:53:c7:36:d0:c9:
                    95:c1:4a:3e:7e:a2:f1:d8:84:bc:f4:7d:fd:3c:df:
                    c2:a1:c0:4f:f2:3e:a8:51:af:e1:b4:48:fd:84:0d:
                    2c:b2:f4:52:f7:93:4b:b9:d9:26:97:84:d2:c3:7a:
                    7e:e1:9c:47:60:d3:e7:2a:7d:3e:cc:c8:40:89:9f:
                    2d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5C:53:FD:64:92:03:03:58:0C:B0:FD:44:A2:A4:61:73:6D:C2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5f45f22-cdc2-3a41-8771-55420fe3b413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:eb:cd:7a:cd:99:46:6c:1c:eb:47:6e:0d:8d:04:8a:da:1a:
         76:6c:5b:a7:bd:da:71:a1:ce:7e:0c:27:95:2d:3c:df:7c:50:
         77:e4:25:59:43:86:0d:65:04:e6:1a:09:3a:ee:64:da:4f:20:
         69:ba:18:ab:8d:eb:04:c0:05:00:c5:be:59:f5:95:56:7d:a7:
         00:77:f2:ce:29:2b:c9:46:ef:a2:4c:f5:2b:de:3d:53:21:6c:
         0d:8b:11:b4:dd:fb:c2:52:d1:07:ea:ea:f2:71:00:cc:67:8a:
         90:b2:74:23:38:fb:36:93:bf:1d:87:5f:1b:3f:a5:fe:d0:e8:
         20:ad:7f:30:55:a5:a3:9f:18:b5:fb:d5:79:67:17:52:ae:f5:
         68:4a:31:e6:68:87:54:53:cc:b3:7d:73:f1:f8:e5:bd:a8:e7:
         99:93:45:90:e1:de:0e:ba:60:4c:1d:9f:02:15:74:75:9e:a4:
         3e:00:98:f3:37:70:01:3e:72:07:79:9b:f1:4a:9d:07:dc:bc:
         1b:8f:57:1b:c7:56:e8:a0:c5:91:ee:83:d7:81:1e:8c:08:af:
         a9:ac:57:a6:69:0c:fd:ea:17:3f:92:4c:4a:cc:9d:c4:3d:32:
         08:0e:97:dd:55:28:e7:2d:9f:47:9c:7d:28:86:0c:6f:80:58:
         70:89:0d:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYF8xfp5sAWLgDWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
MTliNzQzOTMtODZmZi00ZGRiLWE0MGUtYjk0YzIxZmFjMWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3QXF2b+/NCMiZEYZzu9cRMsUOfgT+rYYdK3
o9Lv00fWEjZzjTsmEYwVHF/VRIBFF9PvzpUgSjrIee3l9dg7CMMe6ZA9HA4G2k8O
HjUNUvSXxnEvj/RuLshBXiW1o/9ikATpiN10Z3o8Zz0//hBpzCXozYreZphYfkR5
7X8w7mI4r2TXbM8Ta+5/X9lX1SYFMNIyN2RiUpP8Ljw2f6F5QRctse1Jx9lqw2Lh
MAIqhzodznbusy4wRCV039NzU8c20MmVwUo+fqLx2IS89H39PN/CocBP8j6oUa/h
tEj9hA0ssvRS95NLudkml4TSw3p+4ZxHYNPnKn0+zMhAiZ8tpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpcU/1kkgMDWAyw/USipGFzbcJ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYTVmNDVmMjItY2RjMi0z
YTQxLTg3NzEtNTU0MjBmZTNiNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuK4SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOTrzXrNmUZsHOtHbg2NBIraGnZsW6e92nGhzn4MJ5UtPN98UHfkJVlD
hg1lBOYaCTruZNpPIGm6GKuN6wTABQDFvln1lVZ9pwB38s4pK8lG76JM9SvePVMh
bA2LEbTd+8JS0Qfq6vJxAMxnipCydCM4+zaTvx2HXxs/pf7Q6CCtfzBVpaOfGLX7
1XlnF1Ku9WhKMeZoh1RTzLN9c/H45b2o55mTRZDh3g66YEwdnwIVdHWepD4AmPM3
cAE+cgd5m/FKnQfcvBuPVxvHVuigxZHug9eBHowIr6msV6ZpDP3qFz+STErMncQ9
MggOl91VKOctn0ecfSiGDG+AWHCJDU0=
-----END CERTIFICATE-----
Generated at Tue Feb 11 08:55:50 2025 by rpki-client