Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
File:                     a470d1cc-8d3f-3e49-813f-a96c3c389107.roa (raw, json)
Hash identifier:          6GoeHjNZ9mRwSMYbnHdY1S1rkUDg/WDyIyET8MjwUOs=
Subject key identifier:   85:1B:A3:C7:65:1B:F4:E4:A2:C6:1F:DC:62:8D:5A:D8:BC:87:3F:6D
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F43285848C6E63AB57E4042A234326600
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     397606
IP address blocks:        147.160.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:3a:b5:7e:40:42:a2:34:32:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=7bcf0f01-7b75-4171-9af0-10473f4f3fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:d1:1d:46:44:d6:c0:7f:2d:92:10:35:2e:
                    27:fc:cc:e4:58:ae:d9:3c:0e:7d:ec:5a:64:81:10:
                    0a:6d:18:22:84:b9:cb:74:03:d6:7f:fd:09:5d:c5:
                    6b:c7:5d:1e:eb:9b:a1:4e:f5:f9:71:24:80:cb:7b:
                    81:58:cc:62:6c:07:72:1e:fc:31:95:28:5f:06:62:
                    62:09:e7:2b:a5:22:23:aa:eb:0e:3c:dc:d1:11:45:
                    cc:4b:18:44:ad:c5:fe:c3:e4:61:5d:40:f6:73:a3:
                    a6:4c:42:06:88:d5:e2:4e:28:2f:95:3a:42:9b:1c:
                    0a:8c:d7:11:28:a7:10:d7:71:ac:3c:60:9d:2a:08:
                    76:f7:9c:c7:81:0a:19:93:bd:b8:dc:e6:cf:04:13:
                    13:cf:a7:ca:85:4c:45:8d:63:a5:fb:c5:a0:97:91:
                    63:dd:25:01:ea:4c:3f:69:fb:1b:a9:a0:f7:81:75:
                    0f:ac:38:8f:24:00:bd:7c:90:39:08:ef:44:a8:48:
                    97:05:75:52:b4:e9:3e:e2:39:1b:01:37:ac:87:0c:
                    94:6a:75:2d:6c:61:23:d9:da:92:5f:ed:57:ed:17:
                    51:c8:d0:b2:6a:c2:62:0c:83:54:23:19:c8:b9:8b:
                    35:4d:06:39:f7:61:5c:c3:1f:03:ba:5b:d5:53:d5:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1B:A3:C7:65:1B:F4:E4:A2:C6:1F:DC:62:8D:5A:D8:BC:87:3F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:84:01:9f:ef:4b:16:09:ff:d6:d3:ee:db:3b:26:4b:3f:ab:
         be:ed:68:91:39:fc:b2:d3:d5:8d:30:68:c8:46:8d:32:06:b6:
         d4:ae:a3:35:ad:1b:8d:e2:ef:5e:d2:9d:97:21:e8:f8:65:e8:
         8e:bf:63:a5:0b:08:8e:04:02:07:b5:4b:70:2b:38:7d:1c:2c:
         ea:56:d0:78:32:29:a9:59:89:8a:8e:66:31:6f:39:32:c1:38:
         3d:04:98:70:76:af:d2:46:31:91:6d:76:89:b8:00:65:80:9b:
         72:f0:65:66:f0:f7:c4:a9:b9:f8:30:1e:2a:9f:2e:4e:d3:f9:
         dc:2d:a8:da:49:ad:c9:2f:20:84:97:be:bf:a1:1f:c8:a1:b8:
         8d:8c:e2:f0:63:9d:3b:39:45:fe:e4:81:83:77:3f:0a:6b:03:
         c0:50:9d:f1:25:f2:34:d7:e3:02:0c:23:c1:26:4d:d2:df:b6:
         e3:12:05:b5:92:69:04:4d:22:84:2f:8c:82:6f:ae:4f:7a:bc:
         e0:06:41:3c:6c:db:1c:a7:4e:f4:9c:66:8b:88:ae:b0:40:1f:
         8f:8d:19:c0:57:6f:b5:fb:8b:f2:24:54:9c:fe:9e:a2:48:87:
         9c:d0:cc:71:09:03:09:8b:72:a1:c0:50:3f:ef:8f:ff:94:bb:
         9e:04:f4:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jq1fkBCojQyZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBmZGU3ZWMtYTM2OS00OTdhLWE0OTMtODdiM2UyZTA4
MTQzMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
N2JjZjBmMDEtN2I3NS00MTcxLTlhZjAtMTA0NzNmNGYzZmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9PRHUZE1sB/LZIQNS4n/MzkWK7ZPA597Fpk
gRAKbRgihLnLdAPWf/0JXcVrx10e65uhTvX5cSSAy3uBWMxibAdyHvwxlShfBmJi
CecrpSIjqusOPNzREUXMSxhErcX+w+RhXUD2c6OmTEIGiNXiTigvlTpCmxwKjNcR
KKcQ13GsPGCdKgh295zHgQoZk7243ObPBBMTz6fKhUxFjWOl+8Wgl5Fj3SUB6kw/
afsbqaD3gXUPrDiPJAC9fJA5CO9EqEiXBXVStOk+4jkbATeshwyUanUtbGEj2dqS
X+1X7RdRyNCyasJiDINUIxnIuYs1TQY592Fcwx8DulvVU9UKtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIUbo8dlG/TkosYf3GKNWti8hz9tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMGZk
ZTdlYy1hMzY5LTQ5N2EtYTQ5My04N2IzZTJlMDgxNDMvYTQ3MGQxY2MtOGQzZi0z
ZTQ5LTgxM2YtYTk2YzNjMzg5MTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTBmZGU3ZWMtYTM2OS00OTdhLWE0
OTMtODdiM2UyZTA4MTQzLzEwZmRlN2VjLWEzNjktNDk3YS1hNDkzLTg3YjNlMmUw
ODE0My5jcmwwHwYDVR0jBBgwFoAUPexB37hn1p9jivfrHah4kZhKpJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xMGZkZTdlYy1hMzY5LTQ5N2EtYTQ5My04N2Iz
ZTJlMDgxNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6AzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmEAZ/vSxYJ/9bT7ts7Jks/q77taJE5/LLT1Y0waMhGjTIGttSuozWt
G43i717SnZch6Phl6I6/Y6ULCI4EAge1S3ArOH0cLOpW0HgyKalZiYqOZjFvOTLB
OD0EmHB2r9JGMZFtdom4AGWAm3LwZWbw98SpufgwHiqfLk7T+dwtqNpJrckvIISX
vr+hH8ihuI2M4vBjnTs5Rf7kgYN3PwprA8BQnfEl8jTX4wIMI8EmTdLftuMSBbWS
aQRNIoQvjIJvrk96vOAGQTxs2xynTvScZouIrrBAH4+NGcBXb7X7i/IkVJz+nqJI
h5zQzHEJAwmLcqHAUD/vj/+Uu54E9II=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:21 2025 by rpki-client