Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c41dfbc2-20bc-3f38-8f1d-2335d6a92f8a.roa
File:                     c41dfbc2-20bc-3f38-8f1d-2335d6a92f8a.roa (raw, json)
Hash identifier:          VdYu3HajVITYwwqTwz+OGIErf0Q8m/rtYfSudACLXCM=
Subject key identifier:   2A:D3:DD:C0:95:67:6C:5A:40:F0:BE:D8:6F:79:7A:51:BD:F0:09:F7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926D3FC36414E20A7014C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c41dfbc2-20bc-3f38-8f1d-2335d6a92f8a.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     12097
IP address blocks:        184.105.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:d3:fc:36:41:4e:20:a7:01:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=de50b79f-247f-4df6-8025-7aebf4bbc231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:89:a0:9e:c7:75:4c:d7:82:95:67:98:3e:cc:
                    b2:44:55:c1:0a:24:5e:89:d3:4c:9e:9c:24:b3:6b:
                    63:46:f2:d9:ba:77:53:9b:fb:8e:77:d6:97:b1:bb:
                    4a:75:8a:1e:bc:63:b5:f3:d9:f1:54:61:c2:b0:96:
                    2c:f1:cd:a4:b2:17:32:01:96:41:ea:f7:75:a5:64:
                    49:7e:2c:a7:55:93:16:e3:4a:7b:4c:b1:11:5f:31:
                    0f:2f:01:6d:a2:08:fe:6f:3d:b4:6d:4f:ae:e1:15:
                    97:17:56:d0:c6:fd:a6:26:79:0b:d7:d9:00:76:37:
                    16:57:19:f9:13:7e:6d:84:d0:84:7f:d4:b4:6c:6e:
                    86:77:e7:f0:fc:db:a6:28:b1:73:11:0f:ea:10:45:
                    0b:c5:6c:1f:0f:94:35:84:24:b1:2f:40:35:07:f9:
                    29:69:52:b0:81:dd:01:8f:49:f4:fa:30:79:d1:9a:
                    d3:65:35:2c:e1:cc:89:a6:a5:05:82:c6:f8:b4:64:
                    fd:68:7a:24:6b:ac:5c:c8:f6:88:39:0f:28:59:3e:
                    33:f6:71:07:3b:d7:41:17:d2:49:ce:73:05:0e:a5:
                    09:26:55:d4:ab:43:74:80:00:ac:e3:6f:e9:91:5f:
                    1b:2f:f9:f5:46:a4:19:62:55:4f:dd:68:e6:86:52:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D3:DD:C0:95:67:6C:5A:40:F0:BE:D8:6F:79:7A:51:BD:F0:09:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c41dfbc2-20bc-3f38-8f1d-2335d6a92f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0d:d1:38:1c:c4:e1:27:59:32:df:de:6f:38:87:cd:56:90:
         a1:c3:64:58:22:c9:f1:96:c3:1e:a9:d0:03:ec:5a:7d:e4:a2:
         3e:9a:3c:40:84:4a:16:1e:8e:80:f8:7b:d8:d6:dc:d3:17:e1:
         6e:28:3c:2f:5d:79:93:c0:32:be:f9:04:f0:cd:e2:68:29:61:
         9f:a6:30:c0:83:c0:a8:d1:6b:1f:ec:ce:59:f2:d8:64:4d:6a:
         4f:fb:05:41:56:81:81:9a:44:79:1a:95:3c:4b:47:34:e8:30:
         ad:b0:56:38:f1:c5:36:cd:bf:a0:a2:f5:79:db:66:0d:6d:61:
         98:6a:10:2d:22:f0:e2:32:b2:7d:8e:3c:45:8e:e4:5b:72:00:
         d5:49:d6:74:68:88:8a:c3:88:a4:4d:fa:d0:cf:a3:8d:2d:fa:
         95:59:f4:59:ad:df:2f:44:72:c1:ce:29:aa:be:95:0d:ae:4c:
         48:d0:bb:92:2b:66:ab:21:8d:43:f6:91:e5:5d:e1:de:ab:c9:
         df:2e:3b:46:4c:b9:e1:47:dd:89:91:4b:6d:e5:f2:f8:92:26:
         ad:83:cc:f9:47:f3:f4:4e:2b:ed:c9:fa:7f:25:bb:58:b1:a9:
         36:99:21:39:b2:73:dd:cc:fe:f6:dc:d1:8f:3e:f8:7e:b9:b5:
         6e:0c:c0:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JtP8NkFOIKcBTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZGU1MGI3OWYtMjQ3Zi00ZGY2LTgwMjUtN2FlYmY0YmJjMjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Imgnsd1TNeClWeYPsyyRFXBCiReidNMnpwk
s2tjRvLZundTm/uOd9aXsbtKdYoevGO189nxVGHCsJYs8c2kshcyAZZB6vd1pWRJ
fiynVZMW40p7TLERXzEPLwFtogj+bz20bU+u4RWXF1bQxv2mJnkL19kAdjcWVxn5
E35thNCEf9S0bG6Gd+fw/NumKLFzEQ/qEEULxWwfD5Q1hCSxL0A1B/kpaVKwgd0B
j0n0+jB50ZrTZTUs4cyJpqUFgsb4tGT9aHoka6xcyPaIOQ8oWT4z9nEHO9dBF9JJ
znMFDqUJJlXUq0N0gACs42/pkV8bL/n1RqQZYlVP3WjmhlL/0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrT3cCVZ2xaQPC+2G95elG98An3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzQxZGZiYzItMjBiYy0z
ZjM4LThmMWQtMjMzNWQ2YTkyZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGkVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0N0TgcxOEnWTLf3m84h81WkKHDZFgiyfGWwx6p0APsWn3koj6aPECE
ShYejoD4e9jW3NMX4W4oPC9deZPAMr75BPDN4mgpYZ+mMMCDwKjRax/szlny2GRN
ak/7BUFWgYGaRHkalTxLRzToMK2wVjjxxTbNv6Ci9XnbZg1tYZhqEC0i8OIysn2O
PEWO5FtyANVJ1nRoiIrDiKRN+tDPo40t+pVZ9Fmt3y9EcsHOKaq+lQ2uTEjQu5Ir
ZqshjUP2keVd4d6ryd8uO0ZMueFH3YmRS23l8viSJq2DzPlH8/ROK+3J+n8lu1ix
qTaZITmyc93M/vbc0Y8++H65tW4MwBI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:35 2025 by rpki-client