Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8bfed627-bbb9-38ca-889a-50c818628a40.roa
File:                     8bfed627-bbb9-38ca-889a-50c818628a40.roa (raw, json)
Hash identifier:          f7G3kAUdMAoGN63BtC0muZh7YS/uNxtFGg+6s56ZdoY=
Subject key identifier:   E3:79:77:5C:94:AA:88:3D:0B:9E:8A:20:74:63:28:87:83:DB:BA:93
Certificate issuer:       /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial:       010D0C9F43285848DD3BA6FDC232EF353D0CF5A0
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8bfed627-bbb9-38ca-889a-50c818628a40.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     395807
IP address blocks:        199.60.144.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:a6:fd:c2:32:ef:35:3d:0c:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=8d229cf6-73a1-4605-9d2f-d03f6397d87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8d:93:2f:5a:31:e0:03:c5:75:e2:52:26:91:
                    98:77:8c:a6:13:cc:1d:c2:10:57:f0:ef:b9:3b:7f:
                    7a:2a:54:bf:1f:aa:73:66:93:ec:b5:5b:1c:ae:e6:
                    8a:06:9e:51:68:e4:54:05:33:84:a6:be:7f:2d:4c:
                    ff:c0:67:a6:ac:d9:15:b6:8a:d4:06:f4:e4:50:fe:
                    50:11:be:aa:32:21:25:96:d4:49:7a:9d:82:f7:75:
                    3d:91:b5:19:a7:e1:e6:38:05:46:98:11:b2:a4:b0:
                    c3:a5:29:71:dd:31:f4:46:3d:1c:e5:48:a4:62:35:
                    51:0b:6b:40:5c:99:4c:fa:c0:88:73:94:29:e0:47:
                    16:4a:61:71:25:ef:9d:d5:92:8d:7c:a3:a9:e7:81:
                    7b:27:7e:eb:94:8f:94:cc:f7:51:d1:e5:ac:46:aa:
                    b6:9a:46:b5:9f:9a:36:0a:fe:f4:aa:19:3d:7f:82:
                    e9:58:48:b6:27:0a:03:2b:2b:9a:94:dd:b4:88:f8:
                    8b:07:0b:a7:63:0a:5c:d8:cd:29:1e:46:33:7f:c4:
                    e2:8d:54:0f:f8:c5:b3:92:ed:54:74:3c:0e:76:24:
                    f7:60:73:1c:c5:bd:39:31:03:4f:38:ee:2b:28:5f:
                    43:7f:b9:f3:72:fb:26:10:60:9b:e2:29:f6:dd:9f:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:79:77:5C:94:AA:88:3D:0B:9E:8A:20:74:63:28:87:83:DB:BA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8bfed627-bbb9-38ca-889a-50c818628a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl

            X509v3 Authority Key Identifier:
                keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:40:1a:b6:4f:cb:3d:76:f6:05:ea:e9:03:ab:f4:62:7d:09:
         37:34:5c:21:b2:ac:bf:e9:25:9a:b5:7a:a3:e4:ee:c2:1c:9b:
         ea:59:4d:8f:e1:30:68:19:5f:4f:c0:cd:a6:5b:cc:f7:14:0d:
         9c:ae:46:82:e2:22:c4:4b:f4:35:75:55:65:32:fa:0f:a6:65:
         d2:ed:3d:bf:1e:e7:10:30:61:7b:0c:12:ac:dc:cd:e5:1e:82:
         55:40:5c:8f:d1:6c:4c:d3:66:d5:67:9b:3c:98:dc:0a:86:8d:
         a1:63:02:83:e8:04:51:8d:54:8f:82:3f:44:62:be:4c:7f:d9:
         11:b9:de:d7:c0:55:5b:ee:a5:2c:43:31:08:cb:0d:8b:14:16:
         9d:02:cc:45:86:c6:d6:e6:1b:23:e8:bc:ee:38:b0:35:0c:86:
         89:0f:f6:d2:9f:34:3f:ee:b2:f8:58:ae:fa:45:64:d3:9a:ec:
         a7:33:36:ac:89:4f:6d:96:f3:a6:02:78:b0:c5:89:fa:98:78:
         4d:e3:ea:91:90:b4:b3:ee:d8:d3:cb:c7:82:db:97:a3:7e:16:
         72:18:95:9c:03:f1:48:9c:6f:6b:db:ae:78:9c:ae:49:d9:10:
         12:e5:5f:3c:c7:3d:56:e4:40:8b:0b:f2:4e:81:26:0b:1b:69:
         a0:c8:c3:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO6b9wjLvNT0M9aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2
MzkzMB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk
OGQyMjljZjYtNzNhMS00NjA1LTlkMmYtZDAzZjYzOTdkODdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o2TL1ox4APFdeJSJpGYd4ymE8wdwhBX8O+5
O396KlS/H6pzZpPstVscruaKBp5RaORUBTOEpr5/LUz/wGemrNkVtorUBvTkUP5Q
Eb6qMiElltRJep2C93U9kbUZp+HmOAVGmBGypLDDpSlx3TH0Rj0c5UikYjVRC2tA
XJlM+sCIc5Qp4EcWSmFxJe+d1ZKNfKOp54F7J37rlI+UzPdR0eWsRqq2mka1n5o2
Cv70qhk9f4LpWEi2JwoDKyualN20iPiLBwunYwpc2M0pHkYzf8TijVQP+MWzku1U
dDwOdiT3YHMcxb05MQNPOO4rKF9Df7nzcvsmEGCb4in23Z+IxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFON5d1yUqog9C56KIHRjKIeD27qTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0
ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvOGJmZWQ2MjctYmJiOS0z
OGNhLTg4OWEtNTBjODE4NjI4YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3
NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz
NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy
OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxzyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRAGrZPyz129gXq6QOr9GJ9CTc0XCGyrL/pJZq1eqPk7sIcm+pZTY/h
MGgZX0/AzaZbzPcUDZyuRoLiIsRL9DV1VWUy+g+mZdLtPb8e5xAwYXsMEqzczeUe
glVAXI/RbEzTZtVnmzyY3AqGjaFjAoPoBFGNVI+CP0Rivkx/2RG53tfAVVvupSxD
MQjLDYsUFp0CzEWGxtbmGyPovO44sDUMhokP9tKfND/usvhYrvpFZNOa7KczNqyJ
T22W86YCeLDFifqYeE3j6pGQtLPu2NPLx4Lbl6N+FnIYlZwD8Uicb2vbrnicrknZ
EBLlXzzHPVbkQIsL8k6BJgsbaaDIw7w=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:27:06 2025 by rpki-client