Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ceb25f6-8048-3ac3-aef5-7143c487d1e3.roa
File:                     2ceb25f6-8048-3ac3-aef5-7143c487d1e3.roa (raw, json)
Hash identifier:          KZrszR87FPFNX2QzDIcAdhR5q8ocYKek3067ogXYjx8=
Subject key identifier:   F3:10:6E:AB:8B:44:B7:9A:64:41:6A:52:83:69:8D:01:92:17:AF:6C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C436AB517C459B4905BAC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ceb25f6-8048-3ac3-aef5-7143c487d1e3.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:36:ab:51:7c:45:9b:49:05:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=6be1ddf4-278b-4dc9-826a-ea00d94b8a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:84:63:ba:b8:1a:ac:69:4a:0f:97:54:8b:
                    79:ec:91:2a:19:3b:78:29:a0:8e:da:13:c5:e3:d0:
                    55:72:3f:42:ec:11:db:cb:a2:da:23:7b:d9:ca:25:
                    c1:a8:17:34:35:de:76:f5:79:89:0a:7f:c2:ca:9b:
                    36:f3:ed:6f:08:63:61:a2:fc:cc:63:31:15:65:4e:
                    58:1c:8a:73:87:f6:71:95:2e:de:d1:66:df:9a:61:
                    b2:b0:26:28:80:ab:62:c7:31:61:0b:c0:ac:4e:d5:
                    52:f9:05:f2:ae:20:80:c4:40:d2:a4:b6:ac:ab:ca:
                    9b:4f:ad:14:fc:72:a9:02:0a:88:31:36:56:c3:8e:
                    a7:71:b2:c9:2f:0d:c4:11:68:ce:1a:d7:06:9e:22:
                    3b:af:5f:63:aa:54:1b:d3:2f:c7:98:72:a3:22:49:
                    74:48:89:a0:c3:23:a8:2e:25:be:61:18:99:68:bf:
                    c3:5c:1e:e1:b1:17:20:17:2f:43:f3:00:18:8e:80:
                    69:cc:03:70:77:96:4c:d5:e2:eb:7d:df:04:79:71:
                    54:c5:16:48:56:88:d4:06:e1:dc:55:1d:4b:96:62:
                    48:38:36:5b:e3:de:bc:fe:2f:d7:a7:b3:37:36:98:
                    78:c0:cf:12:5c:69:94:ba:50:4e:dc:b8:10:7c:96:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:10:6E:AB:8B:44:B7:9A:64:41:6A:52:83:69:8D:01:92:17:AF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ceb25f6-8048-3ac3-aef5-7143c487d1e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:93:36:73:e7:8e:ce:94:62:d5:db:95:7a:a2:fa:2f:86:
         79:22:6c:7c:65:af:10:89:51:84:71:c7:db:29:a5:ed:5a:fd:
         52:be:ef:b4:70:eb:ec:38:73:83:47:c2:24:56:9d:bf:87:8f:
         bf:da:98:a0:ad:97:72:10:66:67:f9:88:e6:35:6d:cd:c6:5e:
         93:a8:f0:44:76:0c:7c:77:5a:d9:c0:d4:08:f9:c4:1e:59:00:
         95:d9:ad:b5:6a:20:41:13:93:a6:f1:15:05:91:e7:3f:fe:eb:
         82:b7:eb:21:c2:4b:29:7b:f2:ef:95:42:a8:9b:af:43:c3:7d:
         2a:43:65:e5:04:a4:fe:11:7d:88:8e:70:3d:0d:fa:cb:e0:b9:
         5e:e7:d1:a6:e7:db:be:1a:5b:81:83:bd:55:08:34:67:96:3f:
         91:61:68:02:5a:53:14:6f:96:c6:ca:24:46:56:a2:98:e7:a1:
         d9:8d:f6:1a:ed:a4:e5:87:6d:02:17:16:29:74:b2:89:8e:bb:
         1e:43:cb:fb:7b:ad:56:96:38:39:95:9a:b3:bb:ee:d7:06:7f:
         82:a4:8e:ae:2a:5f:d3:6f:bf:a7:c5:38:32:35:4a:3b:99:cb:
         d7:d1:3b:12:aa:72:93:4a:1d:27:9c:d9:44:bf:d5:57:a8:05:
         3b:76:bd:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDarUXxFm0kFusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmJlMWRkZjQtMjc4Yi00ZGM5LTgyNmEtZWEwMGQ5NGI4YTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP2EY7q4GqxpSg+XVIt57JEqGTt4KaCO2hPF
49BVcj9C7BHby6LaI3vZyiXBqBc0Nd529XmJCn/Cyps28+1vCGNhovzMYzEVZU5Y
HIpzh/ZxlS7e0WbfmmGysCYogKtixzFhC8CsTtVS+QXyriCAxEDSpLasq8qbT60U
/HKpAgqIMTZWw46ncbLJLw3EEWjOGtcGniI7r19jqlQb0y/HmHKjIkl0SImgwyOo
LiW+YRiZaL/DXB7hsRcgFy9D8wAYjoBpzANwd5ZM1eLrfd8EeXFUxRZIVojUBuHc
VR1LlmJIODZb4968/i/Xp7M3Nph4wM8SXGmUulBO3LgQfJag/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMQbquLRLeaZEFqUoNpjQGSF69sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMmNlYjI1ZjYtODA0OC0z
YWMzLWFlZjUtNzE0M2M0ODdkMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPjHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGy5kzZz547OlGLV25V6ovovhnkibHxlrxCJUYRxx9sppe1a/VK+77Rw
6+w4c4NHwiRWnb+Hj7/amKCtl3IQZmf5iOY1bc3GXpOo8ER2DHx3WtnA1Aj5xB5Z
AJXZrbVqIEETk6bxFQWR5z/+64K36yHCSyl78u+VQqibr0PDfSpDZeUEpP4RfYiO
cD0N+svguV7n0abn274aW4GDvVUINGeWP5FhaAJaUxRvlsbKJEZWopjnodmN9hrt
pOWHbQIXFil0somOux5Dy/t7rVaWODmVmrO77tcGf4Kkjq4qX9Nvv6fFODI1SjuZ
y9fROxKqcpNKHSec2US/1VeoBTt2vf0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:09 2025 by rpki-client