Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2194db8-5ce1-31e7-ad1a-d22881127186.roa
File:                     e2194db8-5ce1-31e7-ad1a-d22881127186.roa (raw, json)
Hash identifier:          LHdD5/vliyxhPDK8Z/U9Ym+bzgshuB6UCrDpgVdvOls=
Subject key identifier:   AB:35:57:7B:34:E6:40:8A:1E:CC:0A:51:81:07:95:F6:CD:76:4E:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150E8C5348A625A43368EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2194db8-5ce1-31e7-ad1a-d22881127186.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.196.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:e8:c5:34:8a:62:5a:43:36:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=c8f1ebc9-35c9-4727-9e5e-0aae680306d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:f5:2d:86:71:3e:ad:92:99:e4:05:8c:b6:
                    ae:65:ca:d0:a0:3d:ab:27:ec:11:2b:12:c2:60:56:
                    26:fa:09:ac:34:72:09:86:83:85:d5:23:ba:4b:d1:
                    0f:a9:82:17:04:cc:3e:77:f7:25:67:99:ab:6a:dd:
                    a0:03:95:64:d5:f4:d0:ec:06:9b:83:c1:93:e2:7c:
                    19:11:db:d9:78:76:aa:4a:92:85:5e:75:87:d7:b9:
                    56:cf:13:31:08:57:e8:89:89:fc:c3:f3:fd:01:10:
                    4d:4c:65:5b:35:b8:0f:43:81:4b:0a:ff:4e:cd:c7:
                    e6:3c:d3:22:e2:3a:07:9b:af:87:c9:64:1d:e1:5e:
                    8c:2b:12:fd:db:be:ce:5e:78:cf:3e:f2:4a:41:5d:
                    dd:18:53:fc:db:d8:c0:2a:26:94:8f:dd:d8:0a:6b:
                    dd:27:13:ec:53:84:47:29:46:0b:50:ba:ee:25:e3:
                    2b:54:4b:69:e8:23:9b:56:56:8f:01:29:35:79:21:
                    a1:9f:8d:d2:85:86:64:fa:b5:c4:e1:b0:fb:c6:91:
                    86:67:af:8a:1e:35:ca:f6:20:d8:25:cd:d3:9e:25:
                    f1:ab:fa:ce:c8:03:02:54:34:38:61:74:62:d5:14:
                    9d:de:7f:49:5b:29:8e:2d:c1:fd:a8:6d:e4:97:3d:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:35:57:7B:34:E6:40:8A:1E:CC:0A:51:81:07:95:F6:CD:76:4E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2194db8-5ce1-31e7-ad1a-d22881127186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:84:e7:03:63:ee:97:e2:ed:35:63:c1:2d:a5:b7:22:89:
         3f:23:01:37:0b:61:05:82:78:3b:f2:7b:ec:00:c7:f7:45:87:
         be:f8:1b:a1:75:30:02:15:5a:12:1b:3a:67:29:47:dd:40:a4:
         dd:de:35:fa:26:f3:07:55:e4:34:d7:68:24:4e:42:dd:61:ba:
         19:1c:1f:2d:f2:68:3e:81:68:3b:91:33:95:07:b7:28:4c:6d:
         a6:ed:95:14:58:d9:3b:62:81:a8:65:b0:71:33:52:42:a9:5d:
         da:28:7a:3c:76:0d:36:ee:b7:8f:10:dd:91:6b:be:66:aa:44:
         b3:4c:fd:fc:b6:dc:b5:d1:09:9d:ec:b1:fc:76:23:47:d8:b7:
         e9:2a:77:ae:21:f9:24:f7:5d:9c:9b:c3:52:58:dd:88:18:da:
         a2:cd:16:c1:cf:cf:ca:eb:62:cd:81:e4:3e:8a:47:9c:31:4b:
         d8:39:69:5e:f0:a8:7c:06:18:1d:67:cd:3d:51:5d:a5:fe:54:
         a0:fb:87:14:7e:93:29:57:8c:e0:00:3a:b8:69:57:84:e2:50:
         2b:b3:53:db:f6:f3:89:7d:93:74:b1:96:5e:0c:18:fe:45:e2:
         ab:63:95:c2:61:4d:46:f9:3e:52:b9:35:50:fb:6b:26:7b:d9:
         2e:c5:4b:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOjFNIpiWkM2jsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YzhmMWViYzktMzVjOS00NzI3LTllNWUtMGFhZTY4MDMwNmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQb1LYZxPq2SmeQFjLauZcrQoD2rJ+wRKxLC
YFYm+gmsNHIJhoOF1SO6S9EPqYIXBMw+d/clZ5mrat2gA5Vk1fTQ7Aabg8GT4nwZ
EdvZeHaqSpKFXnWH17lWzxMxCFfoiYn8w/P9ARBNTGVbNbgPQ4FLCv9OzcfmPNMi
4joHm6+HyWQd4V6MKxL9277OXnjPPvJKQV3dGFP829jAKiaUj93YCmvdJxPsU4RH
KUYLULruJeMrVEtp6CObVlaPASk1eSGhn43ShYZk+rXE4bD7xpGGZ6+KHjXK9iDY
Jc3TniXxq/rOyAMCVDQ4YXRi1RSd3n9JWymOLcH9qG3klz3tFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKs1V3s05kCKHswKUYEHlfbNdk7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTIxOTRkYjgtNWNlMS0z
MWU3LWFkMWEtZDIyODgxMTI3MTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsRwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsYhOcDY+6X4u01Y8EtpbciiT8jATcLYQWCeDvye+wAx/dFh774G6F1
MAIVWhIbOmcpR91ApN3eNfom8wdV5DTXaCROQt1huhkcHy3yaD6BaDuRM5UHtyhM
babtlRRY2TtigahlsHEzUkKpXdooejx2DTbut48Q3ZFrvmaqRLNM/fy23LXRCZ3s
sfx2I0fYt+kqd64h+ST3XZybw1JY3YgY2qLNFsHPz8rrYs2B5D6KR5wxS9g5aV7w
qHwGGB1nzT1RXaX+VKD7hxR+kylXjOAAOrhpV4TiUCuzU9v284l9k3Sxll4MGP5F
4qtjlcJhTUb5PlK5NVD7ayZ72S7FSwI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:42:18 2025 by rpki-client