Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa
File:                     dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa (raw, json)
Hash identifier:          /hUbVQ6KP0tEx8InaJQfsSARYouIkPqT1UP/dnFVwjw=
Subject key identifier:   48:F5:D7:EE:BA:9E:D1:AB:DD:D6:50:FC:45:C5:41:DD:19:9B:E9:90
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584917DC33CE589F86ABC4DF86B7
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     30238
IP address blocks:        216.71.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:33:ce:58:9f:86:ab:c4:df:86:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=b57806e7-504d-4e1c-9ae7-60d6112b3c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:e9:9e:74:2a:6f:e1:fa:dd:38:3c:f8:1c:
                    7d:80:86:59:2d:e9:bd:f8:86:1b:db:b9:0a:94:6c:
                    7a:b7:bb:ba:a1:0d:8f:d9:30:92:ef:05:0e:30:ab:
                    b8:0d:1b:33:6c:b1:f7:29:ff:d4:f4:1a:2b:bf:76:
                    87:2c:c1:05:da:f6:f4:e4:a8:10:7f:80:75:ab:4f:
                    12:d7:97:33:df:4d:bf:ec:9d:fa:c8:da:37:9c:9e:
                    f8:2c:81:0a:2a:2f:b5:fb:69:13:93:85:8a:59:37:
                    98:fc:e7:dd:cf:68:4f:a7:a4:72:ae:f3:91:f0:58:
                    59:d1:a1:78:e2:15:15:2f:dc:84:a3:19:ea:ee:97:
                    62:1c:df:aa:c5:1a:08:23:d5:6c:db:34:a0:08:bf:
                    7a:2d:be:ad:94:e3:7c:22:a6:dc:ad:7c:92:dd:45:
                    62:97:af:91:d9:a3:56:83:d0:d3:82:fd:67:dd:6d:
                    38:ce:fb:36:08:4a:b2:7a:3f:0b:db:75:d0:f8:1d:
                    be:8f:47:8c:32:ee:97:e8:9b:df:99:28:59:40:e0:
                    d1:50:88:75:0b:81:d2:50:67:46:02:57:0d:2f:34:
                    36:0a:0e:5a:bd:9e:ac:bb:07:64:89:43:39:50:9f:
                    21:d7:fb:89:57:de:f8:09:93:3b:8a:2d:4c:64:bd:
                    90:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F5:D7:EE:BA:9E:D1:AB:DD:D6:50:FC:45:C5:41:DD:19:9B:E9:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/dffcd44b-76e4-39da-b1bf-a8310cbafaba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6d:81:70:96:6f:a2:28:73:3e:f0:bc:30:d6:f6:d1:d7:dd:
         a3:ee:4d:d7:9b:92:15:7e:aa:63:68:f1:0b:bf:27:7a:51:ad:
         03:09:73:8b:3d:7f:eb:af:2f:5d:73:39:49:39:9d:78:0f:15:
         3c:9f:08:73:4f:a0:a8:47:f5:74:1c:31:ce:7c:55:37:4b:38:
         9d:dc:f1:35:62:07:ea:fe:4c:5c:b1:89:ca:c0:e7:26:7e:e2:
         99:d0:fe:b6:24:9a:55:0b:e2:24:c4:4d:35:a2:35:a0:ce:81:
         2f:14:d4:be:5d:c0:f5:6c:e4:57:c2:e3:59:6d:25:e4:21:45:
         58:c8:2e:69:53:dd:95:b1:f7:a2:fc:59:1b:2b:d7:2a:a0:96:
         c6:be:99:79:8d:38:c0:c4:c9:7f:a5:1f:50:8f:c8:e1:0d:82:
         7c:81:26:47:57:18:12:f7:83:b4:67:0e:6e:23:9c:4d:a5:0c:
         03:06:4d:23:47:66:1a:7f:d5:44:62:ae:b2:b7:d3:cb:ee:9e:
         27:82:0a:8d:b0:01:af:78:27:81:89:3b:e7:62:50:e3:83:20:
         9c:47:44:4e:1b:17:bb:19:a1:6f:68:cb:f5:55:75:4b:fc:d7:
         47:40:31:51:fe:e9:ad:90:ae:81:bc:bf:97:f8:8f:38:1e:46:
         2e:b3:16:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DPOWJ+Gq8TfhrcwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjU3ODA2ZTctNTA0ZC00ZTFjLTlhZTctNjBkNjExMmIzYzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07bpnnQqb+H63Tg8+Bx9gIZZLem9+IYb27kK
lGx6t7u6oQ2P2TCS7wUOMKu4DRszbLH3Kf/U9Borv3aHLMEF2vb05KgQf4B1q08S
15cz302/7J36yNo3nJ74LIEKKi+1+2kTk4WKWTeY/Ofdz2hPp6RyrvOR8FhZ0aF4
4hUVL9yEoxnq7pdiHN+qxRoII9Vs2zSgCL96Lb6tlON8IqbcrXyS3UVil6+R2aNW
g9DTgv1n3W04zvs2CEqyej8L23XQ+B2+j0eMMu6X6JvfmShZQODRUIh1C4HSUGdG
AlcNLzQ2Cg5avZ6suwdkiUM5UJ8h1/uJV974CZM7ii1MZL2QpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEj11+66ntGr3dZQ/EXFQd0Zm+mQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGZmY2Q0NGItNzZlNC0z
OWRhLWIxYmYtYTgzMTBjYmFmYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9tgXCWb6Iocz7wvDDW9tHX3aPuTdebkhV+qmNo8Qu/J3pRrQMJc4s9
f+uvL11zOUk5nXgPFTyfCHNPoKhH9XQcMc58VTdLOJ3c8TViB+r+TFyxicrA5yZ+
4pnQ/rYkmlUL4iTETTWiNaDOgS8U1L5dwPVs5FfC41ltJeQhRVjILmlT3ZWx96L8
WRsr1yqglsa+mXmNOMDEyX+lH1CPyOENgnyBJkdXGBL3g7RnDm4jnE2lDAMGTSNH
Zhp/1URirrK308vunieCCo2wAa94J4GJO+diUOODIJxHRE4bF7sZoW9oy/VVdUv8
10dAMVH+6a2QroG8v5f4jzgeRi6zFg8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:32 2025 by rpki-client