Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa
File:                     5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa (raw, json)
Hash identifier:          UsRSKREEz1HBOc29/Ll2HxHsihmd9Hk4ok7Iy9JHSQ8=
Subject key identifier:   87:C0:B6:E3:C3:B1:05:FE:57:02:87:27:9B:E0:78:EA:26:4D:EC:36
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285848F92690DB94C78A0D96AFC140
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        143.223.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:90:db:94:c7:8a:0d:96:af:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=51d51960-36d3-44c3-a377-cb85aefc7439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:61:2c:93:c4:93:2f:e9:c0:5a:15:b8:94:
                    bb:89:1b:c2:94:90:09:d6:e1:0d:42:37:1f:86:f3:
                    44:3f:23:44:4d:a9:4c:31:f8:56:8f:25:09:08:77:
                    e8:4c:95:0f:6d:58:fe:d9:05:b2:8f:4c:8f:29:47:
                    36:41:4a:78:e0:0f:73:d7:7a:8d:7b:f1:cc:36:72:
                    57:e2:8b:e1:68:e4:5d:5a:15:be:34:f3:17:b3:cc:
                    28:7f:3d:07:63:bc:04:ca:bb:07:e9:fd:45:dd:6b:
                    59:3b:d2:f6:53:57:d2:2a:16:c4:24:aa:b9:e0:f1:
                    f3:9b:18:41:c7:2c:81:0c:46:0b:e4:42:ea:05:7d:
                    eb:8d:dd:6f:12:61:5d:8f:b0:00:56:f5:cc:ca:18:
                    06:58:7b:24:4d:75:6f:78:ed:5d:27:55:a3:8d:7b:
                    a7:c7:ff:10:7f:e8:00:f2:44:71:79:b6:03:87:4e:
                    94:ed:9b:e7:75:46:69:c0:0c:6e:fc:97:d3:70:74:
                    a1:3a:dd:1b:f7:ca:d3:01:61:9c:6d:f5:09:b1:07:
                    fa:e9:d1:62:1d:c0:f7:a0:eb:31:ad:98:0b:f0:76:
                    0c:66:5a:8b:96:43:82:63:3a:74:32:3d:23:6e:17:
                    01:f3:44:51:79:33:01:d1:da:22:3a:7d:71:43:0e:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C0:B6:E3:C3:B1:05:FE:57:02:87:27:9B:E0:78:EA:26:4D:EC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:34:38:14:36:8c:fc:21:35:6c:3f:2d:75:ec:92:ac:e2:91:
         79:8b:8a:48:0c:c7:62:03:a9:9c:f1:a2:fd:f1:7e:c9:c7:a7:
         3d:50:a0:d7:57:21:80:18:6d:76:3a:09:2d:e2:06:68:c2:4e:
         a1:7a:0a:4b:f8:bf:f6:f0:fd:e6:24:95:eb:b4:08:1f:f7:24:
         3b:f5:d1:b3:1e:ed:45:67:c5:8d:46:ab:ba:da:40:2f:f5:b2:
         aa:c7:cc:f7:b8:bb:21:93:df:47:cd:a6:03:73:6a:a4:1e:d4:
         be:93:d4:ad:d6:f1:ca:d9:21:3c:98:00:61:08:be:6e:26:41:
         e1:0f:5e:5d:1a:ec:b3:e0:05:19:4e:38:a5:5a:75:09:21:ed:
         88:8e:c4:26:db:7f:29:53:f1:cd:68:cb:39:50:53:5f:29:90:
         90:10:bf:2b:29:ef:79:aa:b7:92:a8:e6:a7:89:75:68:e8:64:
         3d:6d:4b:8f:03:09:33:23:00:1d:61:ce:c4:56:58:c2:24:79:
         1a:4e:61:44:54:38:66:11:ad:7a:5b:26:5d:88:37:e9:56:01:
         ce:0e:b3:57:53:4e:5f:4a:e5:42:f1:22:b4:16:39:01:c7:d7:
         1d:88:ea:6d:76:b1:87:5a:3b:64:3e:89:40:fd:32:8a:bf:07:
         77:c8:40:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpDblMeKDZavwUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NTFkNTE5NjAtMzZkMy00NGMzLWEzNzctY2I4NWFlZmM3NDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsFhLJPEky/pwFoVuJS7iRvClJAJ1uENQjcf
hvNEPyNETalMMfhWjyUJCHfoTJUPbVj+2QWyj0yPKUc2QUp44A9z13qNe/HMNnJX
4ovhaORdWhW+NPMXs8wofz0HY7wEyrsH6f1F3WtZO9L2U1fSKhbEJKq54PHzmxhB
xyyBDEYL5ELqBX3rjd1vEmFdj7AAVvXMyhgGWHskTXVveO1dJ1WjjXunx/8Qf+gA
8kRxebYDh06U7ZvndUZpwAxu/JfTcHShOt0b98rTAWGcbfUJsQf66dFiHcD3oOsx
rZgL8HYMZlqLlkOCYzp0Mj0jbhcB80RReTMB0doiOn1xQw4IpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfAtuPDsQX+VwKHJ5vgeOomTew2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvNWRjYWRiOWItODZjMi0z
ZmRkLWI5ZmEtYmExNTVmYjNiZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACg0OBQ2jPwhNWw/LXXskqzikXmLikgMx2IDqZzxov3xfsnHpz1QoNdX
IYAYbXY6CS3iBmjCTqF6Ckv4v/bw/eYkleu0CB/3JDv10bMe7UVnxY1Gq7raQC/1
sqrHzPe4uyGT30fNpgNzaqQe1L6T1K3W8crZITyYAGEIvm4mQeEPXl0a7LPgBRlO
OKVadQkh7YiOxCbbfylT8c1oyzlQU18pkJAQvysp73mqt5Ko5qeJdWjoZD1tS48D
CTMjAB1hzsRWWMIkeRpOYURUOGYRrXpbJl2IN+lWAc4Os1dTTl9K5ULxIrQWOQHH
1x2I6m12sYdaO2Q+iUD9Moq/B3fIQLA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:21 2025 by rpki-client