Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/23a674f3-565b-3c6e-aaae-fe6d9c565ff9.roa
File:                     23a674f3-565b-3c6e-aaae-fe6d9c565ff9.roa (raw, json)
Hash identifier:          iJ+e0BZenQsnXb/waURX7sBVypgWDRXSIIkdQNHDOG8=
Subject key identifier:   A5:D2:A6:02:62:4E:DF:A6:C8:A6:D1:58:8F:A8:D1:4F:03:28:44:37
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584833DD00023BF931135B4F0F80
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/23a674f3-565b-3c6e-aaae-fe6d9c565ff9.roa
Signing time:             Sat 14 Dec 2024 09:58:24 +0000
ROA not before:           Sat 14 Dec 2024 09:58:24 +0000
ROA not after:            Fri 14 Mar 2025 08:58:24 +0000
asID:                     54535
IP address blocks:        156.37.200.0/24 maxlen: 24
                          156.37.201.0/24 maxlen: 24
                          156.37.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:33:dd:00:02:3b:f9:31:13:5b:4f:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Dec 14 09:58:24 2024 GMT
            Not After : Mar 14 08:58:24 2025 GMT
        Subject: CN=b25e3cf2-7445-4480-ab4b-ed5620acd3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cc:40:c1:94:71:68:fe:c8:ed:c2:fc:1b:f4:
                    98:58:0a:e6:8e:0b:6f:2b:e0:19:e2:77:45:57:4e:
                    bb:23:35:80:d8:6f:25:e6:e9:05:0b:8f:78:0f:b6:
                    03:78:2d:40:52:a2:55:5e:68:10:31:b3:2e:19:ef:
                    7a:cc:b2:6d:fe:a1:40:f8:2f:68:a8:ad:3c:25:d2:
                    db:fa:33:d3:c1:66:75:c4:f6:e2:47:08:d4:33:44:
                    bf:74:39:08:e0:d2:98:3e:b8:9d:c7:da:72:0d:f5:
                    1c:09:1b:9b:fa:5f:73:f5:40:17:76:79:ab:5a:3a:
                    50:68:80:fc:9a:ef:93:e4:e2:40:2f:ff:ef:20:cb:
                    68:d0:65:58:59:9c:d6:5a:c9:6e:fc:ba:06:08:43:
                    ac:c5:96:9d:a3:59:60:88:16:f2:7a:b8:46:a2:ad:
                    9f:92:89:a8:28:66:57:9d:6b:9f:82:21:26:4b:ae:
                    f8:af:9d:05:0a:aa:27:c0:0d:00:de:8d:b7:71:73:
                    4e:64:a5:68:8f:75:2e:62:04:45:87:d0:4f:5c:af:
                    e7:e7:78:58:3e:9c:08:a2:6d:ad:0e:07:0b:7b:2b:
                    c0:3a:da:87:1c:67:c0:e8:42:b9:e2:a7:0b:96:f9:
                    f3:75:34:45:fa:60:7d:7e:1d:c6:2c:64:e7:16:45:
                    3a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D2:A6:02:62:4E:DF:A6:C8:A6:D1:58:8F:A8:D1:4F:03:28:44:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/23a674f3-565b-3c6e-aaae-fe6d9c565ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.37.200.0/23
                  156.37.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:ee:e3:f4:13:f1:d4:8f:0b:1c:1c:cc:38:c8:35:1c:54:
         53:16:38:76:ce:01:d3:7b:ca:e0:d7:bb:fd:7c:cf:ee:bc:96:
         31:2e:b7:09:18:50:d3:69:cb:7b:6c:46:4f:a9:c2:c8:19:0c:
         2d:a2:41:24:a4:70:e1:89:1f:d2:71:1f:f8:a9:df:9a:79:3a:
         92:c3:90:a7:89:99:53:21:bf:23:f5:0e:90:96:4f:97:c8:17:
         de:11:f8:b6:d6:05:6b:ae:ab:b7:89:39:2c:a5:b0:57:b1:61:
         04:19:db:38:c8:39:9f:0c:f0:ee:37:b8:98:c4:0f:64:97:93:
         3d:72:92:91:b2:00:49:ae:30:51:0a:bb:6f:07:c7:74:39:1e:
         1f:8d:1f:c6:b7:a0:2a:9b:a1:43:7c:34:0e:07:8d:9f:8c:5f:
         a6:9f:7e:84:77:cd:d6:41:0c:41:03:43:04:7a:e6:a5:e6:b4:
         d3:81:33:49:dd:ee:5a:2c:15:11:c0:f0:5c:70:e7:94:69:f3:
         7a:f5:02:8f:67:e2:6b:32:2f:a1:92:c0:f2:59:10:44:39:52:
         e2:aa:4b:44:e0:38:dc:aa:a2:93:ea:21:e0:a8:85:d8:78:fd:
         0f:6e:15:68:a3:6e:22:b9:95:2a:55:e1:66:12:47:15:47:2e:
         f6:dc:e0:c2
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgz3QACO/kxE1tPD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1
NmM5MB4XDTI0MTIxNDA5NTgyNFoXDTI1MDMxNDA4NTgyNFowLzEtMCsGA1UEAxMk
YjI1ZTNjZjItNzQ0NS00NDgwLWFiNGItZWQ1NjIwYWNkM2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcxAwZRxaP7I7cL8G/SYWArmjgtvK+AZ4ndF
V067IzWA2G8l5ukFC494D7YDeC1AUqJVXmgQMbMuGe96zLJt/qFA+C9oqK08JdLb
+jPTwWZ1xPbiRwjUM0S/dDkI4NKYPridx9pyDfUcCRub+l9z9UAXdnmrWjpQaID8
mu+T5OJAL//vIMto0GVYWZzWWslu/LoGCEOsxZado1lgiBbyerhGoq2fkomoKGZX
nWufgiEmS674r50FCqonwA0A3o23cXNOZKVoj3UuYgRFh9BPXK/n53hYPpwIom2t
DgcLeyvAOtqHHGfA6EK54qcLlvnzdTRF+mB9fh3GLGTnFkU6MwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKXSpgJiTt+myKbRWI+o0U8DKEQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz
MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvMjNhNjc0ZjMtNTY1Yi0z
YzZlLWFhYWUtZmU2ZDljNTY1ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy
MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy
NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0
ZTFjMjU2YzkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnCXIAwQB
nCXoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAG3W7uP0E/HUjwscHMw4yDUcVFMWOHbOAdN7yuDXu/18z+68
ljEutwkYUNNpy3tsRk+pwsgZDC2iQSSkcOGJH9JxH/ip35p5OpLDkKeJmVMhvyP1
DpCWT5fIF94R+LbWBWuuq7eJOSylsFexYQQZ2zjIOZ8M8O43uJjED2SXkz1ykpGy
AEmuMFEKu28Hx3Q5Hh+NH8a3oCqboUN8NA4HjZ+MX6affoR3zdZBDEEDQwR65qXm
tNOBM0nd7losFRHA8Fxw55Rp83r1Ao9n4msyL6GSwPJZEEQ5UuKqS0TgONyqopPq
IeCohdh4/Q9uFWijbiK5lSpV4WYSRxVHLvbc4MI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:39:03 2025 by rpki-client