Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa
File:                     db729622-f239-3542-a3b9-b05be8216524.roa (raw, json)
Hash identifier:          cJIwtF4GUN6jpVL4TzqeQI7Kt0SC/gxJm95W1XSP/xA=
Subject key identifier:   29:EC:E3:0D:F6:EB:11:79:BE:39:DC:37:E9:6B:D1:9E:83:CF:6C:50
Certificate issuer:       /CN=6528c9ac-3735-430d-99f2-7ac01944d688
Certificate serial:       010D0C9F432858493243E2231B255EDC5A0812B0
Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     54696
IP address blocks:        23.148.153.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e2:23:1b:25:5e:dc:5a:08:12:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=dfad738d-513d-494b-b601-8e7321dada42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:b2:cd:ce:fc:04:23:6a:b1:dd:66:ec:27:
                    22:5d:51:f9:6c:bf:e4:73:16:c0:84:4b:3a:b2:bf:
                    14:88:c3:da:3c:a3:6f:ac:fd:d9:09:79:4b:eb:ca:
                    b1:18:32:17:50:b7:5b:34:08:87:b4:37:2a:18:54:
                    a4:44:98:10:8a:dd:28:82:35:fd:a4:f8:07:a6:79:
                    a5:7e:10:d2:9c:07:ce:0f:62:23:6c:f4:8e:41:fc:
                    cb:8e:5c:f6:8a:c7:19:8c:5f:d4:8a:a4:e7:97:26:
                    ae:1d:e4:e5:12:d3:01:fc:07:3f:fe:9a:e3:b7:e6:
                    ac:87:d9:52:5b:74:02:82:6a:2a:bb:91:a1:23:aa:
                    eb:15:22:0f:74:c0:c3:40:15:b4:54:0c:44:89:c5:
                    32:31:6e:cd:ed:bc:c1:8f:90:d8:e6:fb:d5:ad:aa:
                    11:23:49:2e:7f:3b:fd:13:9b:14:42:8b:e7:2d:75:
                    a4:c8:7c:38:74:4c:40:39:79:64:6e:95:a0:fc:3f:
                    d2:76:bf:52:fd:e0:b3:a4:0d:3a:67:9f:58:7a:fd:
                    23:0e:21:45:60:c4:e7:6f:83:a5:b8:d7:15:4b:9d:
                    c4:bb:37:ab:53:8a:56:98:c1:fc:ee:5f:d3:b6:32:
                    f9:86:55:73:3c:d6:92:e3:22:2c:49:93:fa:d0:bb:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EC:E3:0D:F6:EB:11:79:BE:39:DC:37:E9:6B:D1:9E:83:CF:6C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl

            X509v3 Authority Key Identifier:
                keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9d:52:ec:4f:fd:bc:99:ee:d9:20:80:f9:d8:13:c5:fd:0e:
         51:ca:b8:76:44:99:19:12:88:c8:d1:16:8d:2b:49:5e:6c:22:
         b4:ed:f7:60:b8:fe:66:f1:24:ab:25:5d:98:aa:6e:4e:2a:a7:
         f5:27:a5:58:cd:cc:6f:30:fb:99:59:d3:2f:27:02:41:f0:8d:
         5e:a8:2d:b5:2a:8e:75:97:b9:99:19:ca:1e:0e:59:61:47:b1:
         2a:5c:ed:9d:62:05:1d:3e:f8:26:b7:9b:6c:25:da:3e:be:87:
         f2:13:32:9e:09:76:bb:34:76:8d:db:af:e1:78:53:a9:10:5a:
         91:1b:58:99:2d:5f:e2:cd:2e:5e:bf:b3:6a:ac:f7:86:99:69:
         db:ba:2b:78:db:6f:e4:ce:fa:c6:98:2b:1c:7e:b1:84:00:57:
         8c:80:31:7d:ac:4c:2f:30:78:58:b9:23:9d:f3:17:fc:b8:e4:
         d3:8f:14:41:da:77:c5:26:f2:1b:ca:9a:ed:86:9d:95:74:db:
         72:61:b8:7a:a2:a7:32:0f:ae:c4:71:b7:2c:93:4f:08:84:0e:
         29:db:01:4f:50:ce:ab:92:d7:79:86:7a:c8:6b:2d:80:7b:f7:
         74:e3:82:76:b5:7e:8d:bb:7f:75:8f:c6:00:92:98:95:61:77:
         9b:1f:0e:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+IjGyVe3FoIErAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk
Njg4MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZGZhZDczOGQtNTEzZC00OTRiLWI2MDEtOGU3MzIxZGFkYTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhuyzc78BCNqsd1m7CciXVH5bL/kcxbAhEs6
sr8UiMPaPKNvrP3ZCXlL68qxGDIXULdbNAiHtDcqGFSkRJgQit0ogjX9pPgHpnml
fhDSnAfOD2IjbPSOQfzLjlz2iscZjF/UiqTnlyauHeTlEtMB/Ac//prjt+ash9lS
W3QCgmoqu5GhI6rrFSIPdMDDQBW0VAxEicUyMW7N7bzBj5DY5vvVraoRI0kufzv9
E5sUQovnLXWkyHw4dExAOXlkbpWg/D/Sdr9S/eCzpA06Z59Yev0jDiFFYMTnb4Ol
uNcVS53EuzerU4pWmMH87l/TtjL5hlVzPNaS4yIsSZP60Ls1lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCns4w326xF5vjncN+lr0Z6Dz2xQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4
YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvZGI3Mjk2MjItZjIzOS0z
NTQyLWEzYjktYjA1YmU4MjE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5
ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0
ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw
MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmdUuxP/byZ7tkggPnYE8X9DlHKuHZEmRkSiMjRFo0rSV5sIrTt92C4
/mbxJKslXZiqbk4qp/UnpVjNzG8w+5lZ0y8nAkHwjV6oLbUqjnWXuZkZyh4OWWFH
sSpc7Z1iBR0++Ca3m2wl2j6+h/ITMp4Jdrs0do3br+F4U6kQWpEbWJktX+LNLl6/
s2qs94aZadu6K3jbb+TO+saYKxx+sYQAV4yAMX2sTC8weFi5I53zF/y45NOPFEHa
d8Um8hvKmu2GnZV023JhuHqipzIPrsRxtyyTTwiEDinbAU9QzquS13mGeshrLYB7
93Tjgna1fo27f3WPxgCSmJVhd5sfDuk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:49 2025 by rpki-client