Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4259511e-4305-3d39-bd36-38f167b17109.roa
File:                     4259511e-4305-3d39-bd36-38f167b17109.roa (raw, json)
Hash identifier:          Xz3EmFRhZrQK5tNK11Y02196rRKJyW1MnF3PM8m3das=
Subject key identifier:   4A:9E:FB:F7:B3:83:C2:54:E7:9C:33:97:6B:F1:0D:96:FB:26:A7:D3
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858489340AD81B0102547DEC25F80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4259511e-4305-3d39-bd36-38f167b17109.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     17984
IP address blocks:        63.222.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:ad:81:b0:10:25:47:de:c2:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=f63e2243-1723-4edf-9b0e-8d7499b773e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:ba:d6:bb:b0:e5:b1:be:40:37:8e:b4:b0:
                    84:06:e8:5f:48:50:f2:d0:a7:a2:4a:49:53:c4:c6:
                    35:8e:43:68:02:89:41:89:c8:37:e6:ca:fa:6a:97:
                    47:fe:d7:9d:be:b8:c4:52:67:2f:78:89:71:14:40:
                    26:80:ea:13:55:91:fd:7f:54:9a:92:c1:cf:35:1b:
                    23:7c:c1:0a:39:d6:e7:8a:85:af:d0:1b:52:e8:33:
                    25:70:e5:40:40:c7:c8:98:88:0e:58:42:da:1e:3d:
                    25:0a:ab:b2:19:67:49:6a:40:4d:b1:85:35:32:d1:
                    5f:8f:4c:64:53:23:ea:4b:9f:a9:76:93:af:91:42:
                    55:f2:cf:4f:f0:b6:97:f6:83:b8:79:19:09:10:77:
                    ff:a9:ac:d7:24:55:2a:69:2b:5b:8a:21:59:6e:4f:
                    57:b9:8f:cb:d8:fc:f6:30:df:67:ea:4a:9a:52:83:
                    77:df:79:2e:e0:5e:3c:0b:24:02:03:a1:b8:c3:42:
                    21:a5:76:a5:b2:2b:29:15:d5:a9:83:56:d0:da:b1:
                    95:9d:0b:3b:63:1f:1f:e0:e6:e3:d2:df:3e:ec:16:
                    c0:f5:13:d8:46:e4:0d:56:67:84:93:03:98:24:35:
                    86:81:73:62:41:cf:59:3d:a1:c4:ae:c3:34:ad:a4:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9E:FB:F7:B3:83:C2:54:E7:9C:33:97:6B:F1:0D:96:FB:26:A7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4259511e-4305-3d39-bd36-38f167b17109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.222.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:b2:75:a9:1e:83:29:dc:72:16:94:b7:ad:73:68:d3:53:8e:
         9f:b5:e3:7e:36:1d:1a:51:47:d5:01:e6:14:1c:0d:76:15:81:
         c7:43:e9:80:16:1c:a1:b9:f3:ad:d7:a0:6b:55:5a:01:85:a6:
         af:d8:a4:b6:2a:dc:ed:4c:4b:62:6e:94:9a:42:0d:dd:a9:dc:
         0a:25:56:67:04:2b:8d:cd:f3:ab:6a:95:5c:37:17:d3:76:b5:
         8b:ed:a1:f9:f3:c5:46:74:40:98:18:8b:3f:a5:8e:9f:df:6e:
         f5:3f:2c:84:55:19:7b:67:2f:b6:32:2f:b8:43:e7:b6:88:56:
         62:b9:83:5b:2d:5f:a8:08:a7:1c:ee:24:e7:ff:ba:74:69:d9:
         66:44:0b:32:95:8b:54:e2:ea:9c:01:19:2c:9b:c0:07:25:d6:
         e8:25:cf:8d:b9:d0:b6:ba:fd:25:9c:b4:d4:4b:73:83:a5:65:
         6b:0f:73:59:1f:b0:31:6a:cc:7b:77:87:a0:a5:85:9b:0e:f3:
         d6:38:4b:73:82:6a:62:d4:35:88:56:76:fe:bb:18:5d:17:2f:
         ce:ee:c6:f1:af:43:44:04:16:64:47:b3:c2:90:3c:9c:e3:b5:
         6e:04:fc:ad:19:7b:f8:67:b7:15:cc:6c:a0:69:b9:19:18:43:
         71:39:94:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQK2BsBAlR97CX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
ZjYzZTIyNDMtMTcyMy00ZWRmLTliMGUtOGQ3NDk5Yjc3M2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ai61ruw5bG+QDeOtLCEBuhfSFDy0KeiSklT
xMY1jkNoAolBicg35sr6apdH/tedvrjEUmcveIlxFEAmgOoTVZH9f1SaksHPNRsj
fMEKOdbnioWv0BtS6DMlcOVAQMfImIgOWELaHj0lCquyGWdJakBNsYU1MtFfj0xk
UyPqS5+pdpOvkUJV8s9P8LaX9oO4eRkJEHf/qazXJFUqaStbiiFZbk9XuY/L2Pz2
MN9n6kqaUoN333ku4F48CyQCA6G4w0IhpXalsispFdWpg1bQ2rGVnQs7Yx8f4Obj
0t8+7BbA9RPYRuQNVmeEkwOYJDWGgXNiQc9ZPaHErsM0raSNHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqe+/ezg8JU55wzl2vxDZb7JqfTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNDI1OTUxMWUtNDMwNS0z
ZDM5LWJkMzYtMzhmMTY3YjE3MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDP96QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKyydakegyncchaUt61zaNNTjp+14342HRpRR9UB5hQcDXYVgcdD6YAW
HKG5863XoGtVWgGFpq/YpLYq3O1MS2JulJpCDd2p3AolVmcEK43N86tqlVw3F9N2
tYvtofnzxUZ0QJgYiz+ljp/fbvU/LIRVGXtnL7YyL7hD57aIVmK5g1stX6gIpxzu
JOf/unRp2WZECzKVi1Ti6pwBGSybwAcl1uglz4250La6/SWctNRLc4OlZWsPc1kf
sDFqzHt3h6ClhZsO89Y4S3OCamLUNYhWdv67GF0XL87uxvGvQ0QEFmRHs8KQPJzj
tW4E/K0Ze/hntxXMbKBpuRkYQ3E5lI8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:46:01 2025 by rpki-client