Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa
File:                     299bcb5b-09bf-3065-927b-7c024222515a.roa (raw, json)
Hash identifier:          4/yL70UAQPpEVfTMr4q2/pxgeK1JW67HAQefqOR+7tc=
Subject key identifier:   B2:C2:CE:A9:EC:20:A8:D7:ED:68:99:81:BC:5A:1C:E6:4B:1E:57:A7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318B1FF4095D5A276A65C80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa
Signing time:             Thu 23 Jan 2025 06:13:24 +0000
ROA not before:           Thu 23 Jan 2025 06:13:24 +0000
ROA not after:            Wed 23 Apr 2025 05:13:24 +0000
asID:                     16591
IP address blocks:        136.53.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:b1:ff:40:95:d5:a2:76:a6:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:24 2025 GMT
            Not After : Apr 23 05:13:24 2025 GMT
        Subject: CN=037a4808-d9ac-42f6-8a59-3750480eb182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:03:d1:0a:f4:31:f2:74:e8:c8:b5:5c:f1:
                    bb:a4:98:50:ef:a3:d6:c7:5e:b9:8d:ac:40:01:8c:
                    cf:b4:de:67:8b:a5:5a:d9:a4:09:8e:fe:19:a7:2b:
                    b1:99:7c:e2:07:5a:b5:e1:36:c9:7e:78:c6:f1:b5:
                    c3:ec:7a:ac:ad:ba:29:6f:d3:a6:1a:5a:c9:d4:3c:
                    32:00:a7:54:b3:9d:5f:39:e6:f8:c7:9d:7d:ed:aa:
                    83:a6:7c:a3:f8:5f:5d:8b:c4:43:72:c2:e5:ec:75:
                    d7:f2:d5:93:8a:d4:7c:29:be:37:a3:6c:e0:a2:61:
                    1e:90:69:1f:5a:37:52:0e:12:a3:f2:00:07:43:df:
                    a0:e3:cf:4c:98:33:ed:6d:b3:01:fd:c9:cf:c1:66:
                    f6:eb:d8:21:bb:37:1b:d7:ce:ea:3c:a4:74:66:93:
                    8a:81:1e:fc:76:f4:1a:a4:4c:80:f9:51:ab:34:b9:
                    d7:59:68:60:b9:d9:7d:85:77:1b:31:5b:d3:74:1b:
                    07:0f:2e:ab:4b:5f:f7:ec:49:70:d7:1a:37:8c:dd:
                    ff:86:2b:bc:5d:62:cd:7e:14:de:27:3c:05:bf:84:
                    8a:82:c2:51:e5:6e:b3:a2:3c:90:67:cb:f3:96:33:
                    08:db:07:fc:4a:9e:e0:36:a5:4f:fe:97:ca:8b:d7:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C2:CE:A9:EC:20:A8:D7:ED:68:99:81:BC:5A:1C:E6:4B:1E:57:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2c:a4:54:36:da:61:14:75:35:af:3a:13:bd:a5:45:a2:67:
         48:df:04:98:36:0a:cf:08:2e:50:88:82:7d:be:78:88:2c:2e:
         65:f0:96:74:70:0c:7a:f9:e4:28:b4:46:c9:0d:d4:2a:92:e6:
         1a:f4:dc:9c:52:ae:76:d3:6c:bc:c0:0a:0f:d3:39:18:7b:63:
         19:e2:96:2f:2e:f3:ba:f7:b4:48:6b:27:c1:0a:45:4e:02:3e:
         a9:cd:a9:55:a6:b4:07:db:59:d5:88:0f:f2:5c:66:0a:cd:72:
         17:05:13:9c:83:76:69:65:9a:b7:31:ef:c4:42:e8:8c:40:ce:
         7a:4d:27:31:c8:cc:30:a0:97:6d:4d:f4:cd:4a:9d:20:b8:74:
         98:04:3f:ac:f1:f7:43:e7:f5:60:c3:0a:1a:92:d7:16:cf:96:
         ec:bd:3a:3b:47:fe:83:49:23:4d:67:b6:96:26:7f:bb:97:5b:
         7e:69:67:c2:0f:a8:51:04:dd:8e:fa:0c:db:6d:90:00:a4:ff:
         80:03:a0:64:58:c0:00:27:23:12:63:e8:24:2c:69:95:4f:01:
         41:24:10:90:a7:29:2c:19:37:0c:6b:69:06:ec:25:8b:b7:57:
         69:f0:ef:39:7f:89:00:6a:37:19:ad:4e:5f:49:54:ce:0d:2c:
         08:f8:0e:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGLH/QJXVonamXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyNFoXDTI1MDQyMzA1MTMyNFowLzEtMCsGA1UEAxMk
MDM3YTQ4MDgtZDlhYy00MmY2LThhNTktMzc1MDQ4MGViMTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHID0Qr0MfJ06Mi1XPG7pJhQ76PWx165jaxA
AYzPtN5ni6Va2aQJjv4ZpyuxmXziB1q14TbJfnjG8bXD7Hqsrbopb9OmGlrJ1Dwy
AKdUs51fOeb4x5197aqDpnyj+F9di8RDcsLl7HXX8tWTitR8Kb43o2zgomEekGkf
WjdSDhKj8gAHQ9+g489MmDPtbbMB/cnPwWb269ghuzcb187qPKR0ZpOKgR78dvQa
pEyA+VGrNLnXWWhgudl9hXcbMVvTdBsHDy6rS1/37Elw1xo3jN3/hiu8XWLNfhTe
JzwFv4SKgsJR5W6zojyQZ8vzljMI2wf8Sp7gNqVP/pfKi9eYXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLLCzqnsIKjX7WiZgbxaHOZLHlenMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjk5YmNiNWItMDliZi0z
MDY1LTkyN2ItN2MwMjQyMjI1MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUspFQ22mEUdTWvOhO9pUWiZ0jfBJg2Cs8ILlCIgn2+eIgsLmXwlnRw
DHr55Ci0RskN1CqS5hr03JxSrnbTbLzACg/TORh7Yxnili8u87r3tEhrJ8EKRU4C
PqnNqVWmtAfbWdWID/JcZgrNchcFE5yDdmllmrcx78RC6IxAznpNJzHIzDCgl21N
9M1KnSC4dJgEP6zx90Pn9WDDChqS1xbPluy9OjtH/oNJI01ntpYmf7uXW35pZ8IP
qFEE3Y76DNttkACk/4ADoGRYwAAnIxJj6CQsaZVPAUEkEJCnKSwZNwxraQbsJYu3
V2nw7zl/iQBqNxmtTl9JVM4NLAj4Dk0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:03 2025 by rpki-client