Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa
File:                     817a7de8-0b60-3ec9-824f-449112c81345.roa (raw, json)
Hash identifier:          MGkc7fBXuVxdASMJQr6GFXuNnYDb4g3zFbxnE3AQAuU=
Subject key identifier:   A2:71:3C:89:A2:D8:90:7D:90:59:5B:07:4F:57:9E:9D:B1:84:A2:71
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BE93980796CBCF60E4B80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     7203
IP address blocks:        23.19.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e9:39:80:79:6c:bc:f6:0e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=8448fa14-a9ce-4485-8bb3-023d0158938d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:b8:5d:77:f8:87:0c:3e:8a:82:f4:9e:26:
                    04:4d:c5:78:60:9f:f1:35:15:cc:c1:e1:f5:47:c7:
                    35:b5:90:96:73:70:fa:08:9a:6d:d2:55:fe:c7:b3:
                    53:e3:1b:65:69:f8:83:07:ec:42:ce:3d:dd:d7:9b:
                    a2:a8:d4:3d:ca:3b:49:40:0f:c4:73:8d:72:59:58:
                    80:3f:33:4c:94:75:a5:8a:1f:a4:69:b2:b5:8b:b6:
                    6e:0e:11:f1:b8:e4:bb:2f:08:b5:f8:04:c5:1f:e2:
                    69:59:e0:03:c5:54:0d:28:52:77:3d:d8:57:5f:39:
                    e4:19:99:25:b6:66:b0:21:15:54:08:57:6a:e9:97:
                    99:2f:a5:0f:28:a0:bc:3a:e9:10:9c:a5:07:6c:a6:
                    bc:83:c9:42:46:08:56:c5:31:ad:87:bc:76:32:27:
                    3c:81:81:06:9e:7b:a3:3e:5c:78:98:c0:a4:f4:36:
                    86:b2:d1:7c:27:8c:a4:1c:83:fa:49:23:76:6a:c6:
                    39:9b:8d:a4:e4:65:6d:d8:90:70:b0:1f:4f:a7:67:
                    3f:15:e2:1f:d5:d7:a3:cd:c8:f0:c7:25:1a:7a:f8:
                    e6:cb:25:92:5c:fa:1e:96:0e:64:4f:e6:46:35:67:
                    08:a1:17:15:63:e0:84:9f:35:9e:be:6d:3b:31:d6:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:71:3C:89:A2:D8:90:7D:90:59:5B:07:4F:57:9E:9D:B1:84:A2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:37:7f:db:95:5d:c7:01:03:26:ef:c1:c8:4d:21:4e:d8:
         8e:f0:62:75:79:b5:9a:4b:0e:19:9f:d3:12:28:74:96:88:26:
         15:e4:18:bb:d3:28:7e:8e:ab:95:82:26:fa:78:d9:b2:33:38:
         8d:e4:12:0b:3a:b5:f1:e1:9c:7c:59:40:fe:12:ce:42:d2:c4:
         a0:76:88:57:ae:e7:27:96:02:9e:4a:28:f9:38:ec:ac:81:6c:
         5f:47:2a:30:d5:98:21:51:5d:2a:29:a2:0a:4c:6d:84:d8:46:
         11:f9:dd:b9:38:14:38:ed:8f:44:d6:96:96:83:24:0f:45:1f:
         47:8d:26:12:e7:09:5b:f0:ac:1a:80:fe:75:48:2f:3e:bd:be:
         12:0d:96:c7:1e:54:eb:7f:14:2b:8b:16:3f:8d:25:e2:0f:d3:
         d2:d9:76:80:a9:99:fd:7a:13:0a:36:74:71:76:2a:01:99:3f:
         69:1f:f3:ca:4a:f3:bf:d1:b0:f0:fd:13:e0:1f:fe:ea:f4:59:
         cf:ff:cf:42:38:5c:da:cb:85:75:b2:45:f6:f9:47:1e:1b:f6:
         7d:cb:1a:06:74:59:86:9a:31:65:b4:a2:5f:00:ea:fb:f3:a6:
         66:78:df:a3:b7:4a:15:d6:99:12:54:d6:d1:82:74:ed:44:8c:
         4a:1a:11:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+k5gHlsvPYOS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
ODQ0OGZhMTQtYTljZS00NDg1LThiYjMtMDIzZDAxNTg5MzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNq4XXf4hww+ioL0niYETcV4YJ/xNRXMweH1
R8c1tZCWc3D6CJpt0lX+x7NT4xtlafiDB+xCzj3d15uiqNQ9yjtJQA/Ec41yWViA
PzNMlHWlih+kabK1i7ZuDhHxuOS7Lwi1+ATFH+JpWeADxVQNKFJ3PdhXXznkGZkl
tmawIRVUCFdq6ZeZL6UPKKC8OukQnKUHbKa8g8lCRghWxTGth7x2Mic8gYEGnnuj
Plx4mMCk9DaGstF8J4ykHIP6SSN2asY5m42k5GVt2JBwsB9Pp2c/FeIf1dejzcjw
xyUaevjmyyWSXPoelg5kT+ZGNWcIoRcVY+CEnzWevm07Mdb82QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJxPImi2JB9kFlbB09Xnp2xhKJxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODE3YTdkZTgtMGI2MC0z
ZWM5LTgyNGYtNDQ5MTEyYzgxMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtQN3/blV3HAQMm78HITSFO2I7wYnV5tZpLDhmf0xIodJaIJhXkGLvT
KH6Oq5WCJvp42bIzOI3kEgs6tfHhnHxZQP4SzkLSxKB2iFeu5yeWAp5KKPk47KyB
bF9HKjDVmCFRXSopogpMbYTYRhH53bk4FDjtj0TWlpaDJA9FH0eNJhLnCVvwrBqA
/nVILz69vhINlsceVOt/FCuLFj+NJeIP09LZdoCpmf16Ewo2dHF2KgGZP2kf88pK
87/RsPD9E+Af/ur0Wc//z0I4XNrLhXWyRfb5Rx4b9n3LGgZ0WYaaMWW0ol8A6vvz
pmZ436O3ShXWmRJU1tGCdO1EjEoaEco=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:41 2025 by rpki-client