Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa
File:                     7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa (raw, json)
Hash identifier:          keYvbJCX2OJSHgeWLq56MVasOU2E7bGjrFhWQBf5wMA=
Subject key identifier:   64:DF:7F:29:04:19:E5:68:BC:EF:65:C4:24:A8:35:9B:11:FA:CF:92
Certificate issuer:       /CN=4eb5326f-ee03-4174-b355-9916b3e826aa
Certificate serial:       010D0C9F43285848BE86280E84A245397B703500
Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     400380
IP address blocks:        81.199.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:28:0e:84:a2:45:39:7b:70:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=128d9cdb-d75a-4f56-977a-fbd40edeb4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:2c:95:c2:e5:ac:63:b9:8b:cd:00:34:23:
                    aa:38:7a:fd:93:ca:ca:95:27:f6:31:a7:4c:ea:5c:
                    d3:20:e3:61:5b:a0:e8:f0:51:b0:b8:e7:61:f0:a2:
                    f7:39:d7:f4:99:d9:36:b4:db:85:e1:f4:22:f1:34:
                    49:9f:d5:c7:3f:79:56:32:ac:d8:03:2e:e0:a7:4e:
                    9d:52:23:0c:0e:1d:1e:0a:bf:2b:74:78:4f:7e:8c:
                    41:01:09:76:f0:60:a2:6b:5d:85:07:58:0e:dd:2f:
                    80:ff:d5:34:92:93:24:70:b9:b1:97:76:11:ae:e2:
                    93:f5:ce:b8:40:83:5f:9f:e6:00:ea:6f:2a:69:74:
                    1a:fd:ca:1c:c7:a4:d2:f6:f4:4e:10:34:46:7a:04:
                    66:4f:09:41:c4:a1:52:34:9b:05:f6:59:a0:78:08:
                    7c:ea:bc:1d:ee:ea:cd:e5:64:db:f7:25:0f:34:27:
                    07:c7:29:64:ba:fa:1d:fa:50:61:95:97:80:83:cf:
                    f7:ec:5e:2b:2c:5e:dc:d1:f5:b1:3c:fa:c0:0a:d0:
                    0a:31:3a:a7:d2:67:ac:75:40:dc:a0:c1:05:2f:29:
                    e0:3f:4c:a6:1a:85:94:3a:31:7b:37:6a:d3:14:85:
                    2b:5c:ed:1d:fb:b7:a4:a7:f4:ad:39:fb:ef:59:10:
                    5e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DF:7F:29:04:19:E5:68:BC:EF:65:C4:24:A8:35:9B:11:FA:CF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl

            X509v3 Authority Key Identifier:
                keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:99:cb:f4:9a:9f:25:9a:63:d4:25:83:67:56:24:60:6b:
         2b:87:f6:f6:f0:6a:de:ec:04:43:ab:9e:af:d9:58:62:aa:65:
         99:b2:f8:a8:13:24:86:d0:a2:c4:10:b1:b6:bc:d9:f0:db:a0:
         e3:51:ba:56:4f:b9:8e:f2:6b:a2:e6:dc:9c:54:09:6c:eb:ef:
         3d:f8:2f:17:e6:a4:9f:9c:a2:07:0c:6b:ac:f7:48:37:e4:84:
         3f:90:72:3b:a1:34:95:21:d5:e1:4f:7d:b2:77:e1:36:d1:b7:
         9c:e5:b1:a1:4e:c0:bb:5b:e6:95:e5:ad:9b:d1:78:9e:c5:61:
         c3:97:30:f3:8a:4b:85:15:fa:ef:95:af:4a:11:d0:07:ba:4f:
         32:c7:34:65:40:84:50:e0:9e:2b:62:ff:a8:9f:20:11:c3:f7:
         c6:2c:99:1d:87:67:2d:bf:6e:db:8c:6b:7c:62:7f:28:34:cb:
         ca:6c:41:25:07:39:88:e1:7d:f4:91:ad:94:8b:c8:ba:40:d8:
         6c:55:e4:12:6b:a3:54:95:5b:23:c7:a8:dc:bd:36:39:0a:9f:
         d0:43:d9:5d:c5:8b:74:f9:c1:31:e8:cb:93:b0:98:fe:24:e4:
         5d:88:93:a3:30:09:8e:3c:5c:0c:d7:5c:09:84:f0:21:3f:3b:
         6b:b7:61:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+higOhKJFOXtwNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGViNTMyNmYtZWUwMy00MTc0LWIzNTUtOTkxNmIzZTgy
NmFhMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
MTI4ZDljZGItZDc1YS00ZjU2LTk3N2EtZmJkNDBlZGViNGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE4slcLlrGO5i80ANCOqOHr9k8rKlSf2MadM
6lzTIONhW6Do8FGwuOdh8KL3Odf0mdk2tNuF4fQi8TRJn9XHP3lWMqzYAy7gp06d
UiMMDh0eCr8rdHhPfoxBAQl28GCia12FB1gO3S+A/9U0kpMkcLmxl3YRruKT9c64
QINfn+YA6m8qaXQa/cocx6TS9vROEDRGegRmTwlBxKFSNJsF9lmgeAh86rwd7urN
5WTb9yUPNCcHxylkuvod+lBhlZeAg8/37F4rLF7c0fWxPPrACtAKMTqn0mesdUDc
oMEFLyngP0ymGoWUOjF7N2rTFIUrXO0d+7ekp/StOfvvWRBeswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTffykEGeVovO9lxCSoNZsR+s+SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1
MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2YjNlODI2YWEvN2VhMTYxNGItOGEyZC0z
NWYwLWE5YTYtMWQ3MWZmZDM5NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGViNTMyNmYtZWUwMy00MTc0LWIz
NTUtOTkxNmIzZTgyNmFhLzRlYjUzMjZmLWVlMDMtNDE3NC1iMzU1LTk5MTZiM2U4
MjZhYS5jcmwwHwYDVR0jBBgwFoAUTU4uJJShwss4I21uaEckHdJB3B8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2
YjNlODI2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUccnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHS1mcv0mp8lmmPUJYNnViRgayuH9vbwat7sBEOrnq/ZWGKqZZmy+KgT
JIbQosQQsba82fDboONRulZPuY7ya6Lm3JxUCWzr7z34LxfmpJ+cogcMa6z3SDfk
hD+QcjuhNJUh1eFPfbJ34TbRt5zlsaFOwLtb5pXlrZvReJ7FYcOXMPOKS4UV+u+V
r0oR0Ae6TzLHNGVAhFDgniti/6ifIBHD98YsmR2HZy2/btuMa3xifyg0y8psQSUH
OYjhffSRrZSLyLpA2GxV5BJro1SVWyPHqNy9NjkKn9BD2V3Fi3T5wTHoy5OwmP4k
5F2Ik6MwCY48XAzXXAmE8CE/O2u3YfU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:24 2025 by rpki-client