Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa
File:                     bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa (raw, json)
Hash identifier:          QIUJH/LDdw5XR+4qF8f7NdXTaHo4McQQsR6zeHLiVT0=
Subject key identifier:   6E:DA:1A:DD:36:17:7E:2A:0B:DB:60:6E:02:27:5A:42:E5:BB:34:CD
Certificate issuer:       /CN=feb36888-683d-42bf-9c19-4ceaf1748703
Certificate serial:       010D0C9F43285848A830A7CC088DC9A31D558300
Authority key identifier: E6:AB:48:39:D2:04:15:A7:B8:17:F0:B3:04:EF:9A:4C:08:C4:59:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     6939
IP address blocks:        158.222.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a7:cc:08:8d:c9:a3:1d:55:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb36888-683d-42bf-9c19-4ceaf1748703
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=6312a7f5-558c-44fe-b9bb-256b342ca08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:b0:6b:59:44:99:05:5f:5a:06:7e:db:7b:
                    7d:d2:39:53:05:40:3b:c0:98:76:f9:be:8f:2e:23:
                    7d:ee:bf:f7:3e:da:91:13:74:00:31:52:51:0e:62:
                    d2:8d:cd:db:a8:39:b5:a9:e5:f8:2f:e8:d4:3a:93:
                    f2:4e:0c:31:69:79:cf:b3:42:e7:57:8f:4d:6d:41:
                    cb:93:a7:b6:24:bf:70:f8:54:3d:00:78:74:e9:4c:
                    a1:e2:d5:54:e3:44:90:c7:6c:ae:1e:dd:08:f7:d3:
                    9d:a1:18:c4:3a:e1:c6:05:9f:ff:2e:4d:81:03:ae:
                    d5:5b:79:ca:7b:f6:85:fb:40:ec:ab:e4:c7:13:93:
                    fe:0c:14:78:05:1a:dc:21:78:ab:3e:a7:13:80:d8:
                    1b:1c:be:4f:ad:a7:3e:57:f2:12:8f:e6:77:6e:0c:
                    fc:35:4f:aa:df:9e:99:db:78:05:ea:23:bb:8c:10:
                    e7:93:c3:cd:8f:b7:72:44:c4:a2:54:6d:14:9e:59:
                    00:9f:85:51:d0:8f:2e:9c:d2:04:ef:38:b8:63:b8:
                    35:6d:69:a3:7c:79:79:3d:22:db:65:a4:d8:a4:26:
                    c0:74:89:e7:21:83:be:f2:42:87:85:ff:8f:a0:83:
                    22:a9:87:33:f3:cf:7e:c1:03:28:0f:dd:e1:b0:96:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DA:1A:DD:36:17:7E:2A:0B:DB:60:6E:02:27:5A:42:E5:BB:34:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/feb36888-683d-42bf-9c19-4ceaf1748703.crl

            X509v3 Authority Key Identifier:
                keyid:E6:AB:48:39:D2:04:15:A7:B8:17:F0:B3:04:EF:9A:4C:08:C4:59:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:7e:c1:25:d5:47:8a:20:06:26:fd:6a:1b:21:57:8f:f1:
         2f:1d:e6:70:02:d2:3b:e0:76:b8:49:22:36:ae:3a:4a:04:c6:
         02:0a:0c:64:89:30:64:a5:a4:20:0e:02:47:15:0d:eb:6b:e6:
         ed:49:04:43:ed:5b:3f:64:72:e5:d4:a4:7f:46:fa:25:81:4b:
         e6:31:fd:98:6b:1b:4e:4c:44:ed:1f:80:9b:af:1e:d3:6d:74:
         c2:38:ad:12:bb:1e:7b:f7:35:38:f6:20:f8:df:11:68:b3:c9:
         16:30:d9:5a:8e:4e:9c:db:99:44:ad:ce:56:f8:27:ab:79:99:
         8d:be:83:ca:d0:41:41:bd:52:c7:34:a5:e7:cd:60:06:be:17:
         bc:ee:61:3c:a2:34:a6:c8:6c:c8:34:53:b2:40:2b:63:af:9f:
         f4:af:7e:35:34:f3:b0:40:2b:ea:82:8e:ec:19:76:3e:6b:68:
         d4:50:5b:1e:b5:c2:84:35:c1:ef:2c:45:4c:fd:2b:d8:a5:59:
         91:ff:40:45:56:7f:0d:e8:65:5a:68:5b:69:90:67:2d:1f:1d:
         af:8e:00:7c:29:7a:25:35:4a:6f:cc:42:d6:1d:a9:f1:d6:e3:
         e9:3e:75:fb:cf:f6:2b:30:2b:d8:76:e3:de:e6:49:38:20:bb:
         b3:f8:d2:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKfMCI3Jox1VgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmViMzY4ODgtNjgzZC00MmJmLTljMTktNGNlYWYxNzQ4
NzAzMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
NjMxMmE3ZjUtNTU4Yy00NGZlLWI5YmItMjU2YjM0MmNhMDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQWwa1lEmQVfWgZ+23t90jlTBUA7wJh2+b6P
LiN97r/3PtqRE3QAMVJRDmLSjc3bqDm1qeX4L+jUOpPyTgwxaXnPs0LnV49NbUHL
k6e2JL9w+FQ9AHh06Uyh4tVU40SQx2yuHt0I99OdoRjEOuHGBZ//Lk2BA67VW3nK
e/aF+0Dsq+THE5P+DBR4BRrcIXirPqcTgNgbHL5Prac+V/ISj+Z3bgz8NU+q356Z
23gF6iO7jBDnk8PNj7dyRMSiVG0UnlkAn4VR0I8unNIE7zi4Y7g1bWmjfHl5PSLb
ZaTYpCbAdInnIYO+8kKHhf+PoIMiqYcz889+wQMoD93hsJabGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7aGt02F34qC9tgbgInWkLluzTNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZWIz
Njg4OC02ODNkLTQyYmYtOWMxOS00Y2VhZjE3NDg3MDMvYmQ0ZDRmOWEtZmRlYy0z
MmI2LWEwNzUtZmM0MjhjNjAxZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmViMzY4ODgtNjgzZC00MmJmLTlj
MTktNGNlYWYxNzQ4NzAzL2ZlYjM2ODg4LTY4M2QtNDJiZi05YzE5LTRjZWFmMTc0
ODcwMy5jcmwwHwYDVR0jBBgwFoAU5qtIOdIEFae4F/CzBO+aTAjEWSIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZWIzNjg4OC02ODNkLTQyYmYtOWMxOS00Y2Vh
ZjE3NDg3MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnt4XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACI6fsEl1UeKIAYm/WobIVeP8S8d5nAC0jvgdrhJIjauOkoExgIKDGSJ
MGSlpCAOAkcVDetr5u1JBEPtWz9kcuXUpH9G+iWBS+Yx/ZhrG05MRO0fgJuvHtNt
dMI4rRK7Hnv3NTj2IPjfEWizyRYw2VqOTpzbmUStzlb4J6t5mY2+g8rQQUG9Usc0
pefNYAa+F7zuYTyiNKbIbMg0U7JAK2Ovn/SvfjU087BAK+qCjuwZdj5raNRQWx61
woQ1we8sRUz9K9ilWZH/QEVWfw3oZVpoW2mQZy0fHa+OAHwpeiU1Sm/MQtYdqfHW
4+k+dfvP9iswK9h2497mSTggu7P40qg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:46 2025 by rpki-client