Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa
File:                     91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa (raw, json)
Hash identifier:          59BJd475twr52sdibPEOKP2DyfoyOOdF38LlVetT2y4=
Subject key identifier:   5D:8F:EC:F0:F4:E4:8F:49:38:8A:8D:02:DC:9B:A2:32:F5:A6:6A:C3
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F43285848EF614318D13F74BFB8BC5F80
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     19471
IP address blocks:        199.68.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:43:18:d1:3f:74:bf:b8:bc:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=dbcdd8e9-371f-4957-a219-26491bbbfb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:e8:e3:de:36:36:ac:09:6a:d4:f6:4a:a1:
                    a7:03:6f:b1:3a:d3:a8:a8:6a:84:5e:b8:91:a8:8d:
                    88:f5:fe:6b:92:fe:6f:a6:23:73:c7:e3:7a:0b:8d:
                    43:06:2f:ab:18:f9:7c:fe:96:1c:86:88:cd:ff:c1:
                    7e:cf:db:00:0f:28:45:ad:d8:9d:d7:1d:b6:4e:98:
                    30:2c:aa:01:85:5d:b7:12:26:49:13:e0:8b:a4:b2:
                    c8:ea:28:99:f0:de:7e:06:79:b0:11:2b:06:ad:63:
                    4c:52:f9:88:52:7e:14:a7:db:70:0c:7f:9b:07:56:
                    1b:fe:44:68:cd:6b:07:b3:46:48:28:95:a9:5b:a4:
                    31:c3:6e:94:ac:a6:17:2b:84:5c:03:cd:fa:c9:53:
                    a2:b9:5a:74:bf:94:15:8b:e6:39:92:96:75:e9:5d:
                    41:ba:4d:89:1a:fe:04:00:66:22:af:25:51:84:5c:
                    0a:0a:9f:c3:ba:a7:11:7c:a1:d3:e5:ec:f1:11:ed:
                    23:45:88:76:2b:9f:fb:66:3b:8f:bb:f4:e3:96:ca:
                    59:d7:60:db:bd:11:c9:2f:3d:1d:25:4d:ea:36:c2:
                    b2:20:cf:6a:d2:27:94:72:4e:fc:c5:cc:bc:8e:51:
                    be:ae:3d:76:77:46:f2:0b:f7:07:62:9f:17:46:6e:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8F:EC:F0:F4:E4:8F:49:38:8A:8D:02:DC:9B:A2:32:F5:A6:6A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:cd:7e:12:0a:3c:24:6b:78:9f:f6:76:df:05:a0:ba:84:
         c7:80:14:b2:b2:60:64:08:5b:63:23:35:87:32:9e:c8:8e:93:
         f1:12:ef:79:6b:b2:39:ff:82:d2:14:8d:f7:45:99:cb:ae:bc:
         ca:3c:be:a6:89:d1:2c:9a:21:5b:81:d9:45:04:66:c7:57:10:
         2c:31:6c:65:71:5c:45:db:83:5c:0f:76:47:ba:58:d3:4a:cb:
         8d:cc:26:9d:e0:8c:6b:b5:c7:67:1f:1d:58:50:43:a0:e1:48:
         14:92:96:b6:72:2f:04:ab:0d:c8:21:23:d5:0f:2f:5d:56:31:
         b4:36:70:9c:e8:e0:fb:c5:fd:8b:34:d0:ca:66:31:57:7b:79:
         aa:3d:9e:e8:35:c9:9f:be:15:dc:03:34:64:4e:05:95:8d:b4:
         50:49:b8:b8:bd:c6:eb:d2:35:e0:38:39:ad:3a:09:e5:d0:21:
         dd:24:36:b8:a0:40:67:44:d5:3e:e3:6f:92:52:ce:a9:f7:43:
         fa:9b:33:9e:a5:68:a4:10:37:bb:83:04:8d:7a:18:22:ad:35:
         bc:8b:88:63:5c:5c:84:20:01:32:b9:bf:cf:67:a2:42:aa:4b:
         51:3e:db:f3:4b:86:d8:08:de:c9:e0:63:c4:cd:c7:84:ac:b3:
         68:21:75:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUMY0T90v7i8X4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj
NWIwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZGJjZGQ4ZTktMzcxZi00OTU3LWEyMTktMjY0OTFiYmJmYjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/To4942NqwJatT2SqGnA2+xOtOoqGqEXriR
qI2I9f5rkv5vpiNzx+N6C41DBi+rGPl8/pYchojN/8F+z9sADyhFrdid1x22Tpgw
LKoBhV23EiZJE+CLpLLI6iiZ8N5+BnmwESsGrWNMUvmIUn4Up9twDH+bB1Yb/kRo
zWsHs0ZIKJWpW6Qxw26UrKYXK4RcA836yVOiuVp0v5QVi+Y5kpZ16V1Buk2JGv4E
AGYiryVRhFwKCp/DuqcRfKHT5ezxEe0jRYh2K5/7ZjuPu/TjlspZ12DbvRHJLz0d
JU3qNsKyIM9q0ieUck78xcy8jlG+rj12d0byC/cHYp8XRm4zYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2P7PD05I9JOIqNAtybojL1pmrDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll
YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvOTFhNjJlMDAtZDcyMC0z
YTgzLWExNGQtYmU1YzViNGNlMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5
YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2
YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk
NDEwNmM1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwLzX4SCjwka3if9nbfBaC6hMeAFLKyYGQIW2MjNYcynsiOk/ES73lr
sjn/gtIUjfdFmcuuvMo8vqaJ0SyaIVuB2UUEZsdXECwxbGVxXEXbg1wPdke6WNNK
y43MJp3gjGu1x2cfHVhQQ6DhSBSSlrZyLwSrDcghI9UPL11WMbQ2cJzo4PvF/Ys0
0MpmMVd7eao9nug1yZ++FdwDNGROBZWNtFBJuLi9xuvSNeA4Oa06CeXQId0kNrig
QGdE1T7jb5JSzqn3Q/qbM56laKQQN7uDBI16GCKtNbyLiGNcXIQgATK5v89nokKq
S1E+2/NLhtgI3sngY8TNx4Sss2ghdVw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:55 2025 by rpki-client