Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/a3452e96-aa7e-39b8-91c7-6e11ab0e9c93.roa
File:                     a3452e96-aa7e-39b8-91c7-6e11ab0e9c93.roa (raw, json)
Hash identifier:          TC5JuToRDcZ05YtTwqtwjuPO4wKhgO04ATy+n4nnNrc=
Subject key identifier:   32:F3:25:31:5B:DE:38:29:92:E9:C7:71:98:E2:94:58:35:C6:0A:94
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F43285849393E7C959E9941B1867C2480
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/a3452e96-aa7e-39b8-91c7-6e11ab0e9c93.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     53983
IP address blocks:        199.180.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7c:95:9e:99:41:b1:86:7c:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=df2f76fb-0097-4abc-9799-d18483479611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:03:4e:bb:fc:29:90:3a:58:71:56:28:7a:1d:
                    c1:bf:a3:ea:1d:2a:77:9d:20:15:50:b9:f0:54:0c:
                    2f:83:af:db:36:8a:5a:62:b2:ba:5f:a7:bc:d1:21:
                    f4:e9:11:6a:00:1a:ba:4d:61:e9:f4:6a:ee:3d:4a:
                    95:6a:8b:bf:d5:bc:c5:75:1c:44:a2:ba:dd:f5:36:
                    81:0c:4f:7e:eb:f5:d2:d5:14:18:03:2c:63:80:8f:
                    1d:6a:8f:32:5e:1b:11:e3:f5:a0:f9:99:3a:47:26:
                    d8:67:3a:8e:dd:c0:66:98:ca:0b:7f:30:12:59:bc:
                    6b:7c:84:de:3f:4e:58:c9:6c:6e:fc:11:d3:b0:54:
                    61:71:d3:ee:a2:99:42:42:0e:7d:1e:81:8e:05:06:
                    c6:a7:a8:71:0b:a5:ee:1a:d6:5f:94:c1:0a:71:ca:
                    01:a6:a5:bf:42:50:83:90:8c:32:e9:c6:5d:05:ac:
                    ed:a9:6c:0d:69:f2:4c:e2:c4:53:33:1a:7c:a2:a6:
                    8b:9a:dc:01:e4:67:ce:6e:8a:12:1d:d5:66:65:b3:
                    e7:34:58:16:19:5b:89:ca:af:bb:87:1f:87:29:87:
                    c1:16:57:25:44:a6:16:84:52:08:e6:92:bb:8a:dc:
                    b0:2c:7c:7b:87:bb:63:f5:7b:b2:07:e9:05:43:bf:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F3:25:31:5B:DE:38:29:92:E9:C7:71:98:E2:94:58:35:C6:0A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/a3452e96-aa7e-39b8-91c7-6e11ab0e9c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:5a:16:a4:fa:2a:c2:07:8d:e6:ea:02:e5:82:8b:33:56:
         bd:df:e0:11:e8:57:7b:e7:ad:41:fc:90:32:75:45:48:67:b1:
         53:7d:e9:c8:8b:03:da:57:a8:72:7e:46:77:f8:29:49:0f:ff:
         73:aa:c2:f9:d2:08:a7:ab:98:01:f4:39:a9:ae:99:1f:06:0f:
         62:1d:bf:0f:aa:88:14:20:6f:fd:c0:04:d8:c8:03:bc:36:b2:
         81:7b:45:19:70:1a:19:37:39:2d:30:81:f8:bd:c7:40:fa:89:
         e5:cd:a6:e3:9f:bb:53:f0:af:80:8b:3e:13:d1:c5:6f:b9:04:
         9c:ba:f0:5a:6b:bf:63:27:5d:ab:59:19:95:71:ea:70:1c:08:
         3c:b0:07:7b:7a:c5:ea:7e:6b:56:70:1f:7e:38:e0:b6:c6:2d:
         9d:b5:b5:b3:72:74:55:d1:99:6f:68:88:d4:07:5f:e6:f9:31:
         7c:91:fa:b8:df:af:25:88:b0:4c:52:f5:ab:ad:6f:67:85:40:
         0d:ad:75:3d:5f:e6:23:95:7c:3f:69:e3:9f:65:ff:70:73:4b:
         bd:61:e6:56:ba:4d:1a:02:a3:ff:0b:74:d1:1e:91:b1:67:7c:
         45:35:46:19:39:30:69:2d:96:16:db:05:b8:28:48:fa:3a:24:
         e3:de:12:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnyVnplBsYZ8JIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDFmYzE4MTUtMzRlZi00MjRkLTgyNTgtNTA2ZjhiNDg2
ZTM1MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
ZGYyZjc2ZmItMDA5Ny00YWJjLTk3OTktZDE4NDgzNDc5NjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigNOu/wpkDpYcVYoeh3Bv6PqHSp3nSAVULnw
VAwvg6/bNopaYrK6X6e80SH06RFqABq6TWHp9GruPUqVaou/1bzFdRxEorrd9TaB
DE9+6/XS1RQYAyxjgI8dao8yXhsR4/Wg+Zk6RybYZzqO3cBmmMoLfzASWbxrfITe
P05YyWxu/BHTsFRhcdPuoplCQg59HoGOBQbGp6hxC6XuGtZflMEKccoBpqW/QlCD
kIwy6cZdBaztqWwNafJM4sRTMxp8oqaLmtwB5GfObooSHdVmZbPnNFgWGVuJyq+7
hx+HKYfBFlclRKYWhFII5pK7itywLHx7h7tj9XuyB+kFQ7+tJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLzJTFb3jgpkunHcZjilFg1xgqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMWZj
MTgxNS0zNGVmLTQyNGQtODI1OC01MDZmOGI0ODZlMzUvYTM0NTJlOTYtYWE3ZS0z
OWI4LTkxYzctNmUxMWFiMGU5YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDFmYzE4MTUtMzRlZi00MjRkLTgy
NTgtNTA2ZjhiNDg2ZTM1LzAxZmMxODE1LTM0ZWYtNDI0ZC04MjU4LTUwNmY4YjQ4
NmUzNS5jcmwwHwYDVR0jBBgwFoAUUaJ7qddOmwRfZds/wwhmgYTMQJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMWZjMTgxNS0zNGVmLTQyNGQtODI1OC01MDZm
OGI0ODZlMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7RYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXHWhak+irCB43m6gLlgoszVr3f4BHoV3vnrUH8kDJ1RUhnsVN96ciL
A9pXqHJ+Rnf4KUkP/3OqwvnSCKermAH0OamumR8GD2Idvw+qiBQgb/3ABNjIA7w2
soF7RRlwGhk3OS0wgfi9x0D6ieXNpuOfu1Pwr4CLPhPRxW+5BJy68Fprv2MnXatZ
GZVx6nAcCDywB3t6xep+a1ZwH3444LbGLZ21tbNydFXRmW9oiNQHX+b5MXyR+rjf
ryWIsExS9autb2eFQA2tdT1f5iOVfD9p459l/3BzS71h5la6TRoCo/8LdNEekbFn
fEU1Rhk5MGktlhbbBbgoSPo6JOPeEgw=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:34 2025 by rpki-client on console.sobornost.net