Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/cd44e6d8-aa45-3838-b2e5-df53c184fd1d.roa
File:                     cd44e6d8-aa45-3838-b2e5-df53c184fd1d.roa (raw, json)
Hash identifier:          KzxfBdqbXnM4Lz2+ZjGdQi0HB843L5+WBVqRIBsnV/8=
Subject key identifier:   0A:8A:C9:88:A7:D7:64:65:15:33:D0:C4:63:0E:D4:10:37:89:02:2E
Certificate issuer:       /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial:       010D0C9F432858499435855DA695C5BAC65F4380
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/cd44e6d8-aa45-3838-b2e5-df53c184fd1d.roa
Signing time:             Sat 19 Apr 2025 15:01:18 +0000
ROA not before:           Sat 19 Apr 2025 15:01:18 +0000
ROA not after:            Fri 18 Jul 2025 15:01:18 +0000
asID:                     215071
IP address blocks:        212.115.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:94:35:85:5d:a6:95:c5:ba:c6:5f:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
        Validity
            Not Before: Apr 19 15:01:18 2025 GMT
            Not After : Jul 18 15:01:18 2025 GMT
        Subject: CN=9fae5539-5d88-4add-b32a-e65e07c91320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:a9:5d:10:76:bf:b7:fd:05:54:1f:0d:63:
                    fb:ac:88:80:85:35:76:d0:cb:2e:70:d0:42:11:b5:
                    2d:83:ad:ad:03:01:cd:55:6e:6d:76:cd:0a:06:e0:
                    e6:b9:f4:fb:53:da:35:3d:80:08:19:20:41:58:0d:
                    64:74:07:94:55:e6:67:f3:e4:e9:c0:6d:d2:6d:6c:
                    f4:59:59:9f:99:97:bc:29:1f:7d:ce:1b:22:97:78:
                    0c:6c:16:5c:78:ba:b4:24:e4:0a:3e:1b:d7:f7:b7:
                    96:77:f9:66:99:07:9f:3d:6b:8d:59:fd:86:d4:a7:
                    89:22:4d:ce:50:21:7b:86:cd:a0:5d:0e:d7:7a:2b:
                    3b:48:3c:12:39:6b:fa:c5:5a:c1:bc:18:6a:26:68:
                    a7:07:4e:e5:93:ae:13:3e:af:07:b7:0b:10:f7:4d:
                    8b:e6:7e:89:63:b8:f1:7f:8c:b2:b3:96:7f:99:54:
                    3d:8e:e4:86:68:ff:47:b3:0d:0e:4a:e1:09:f3:bd:
                    f6:84:69:58:0b:b5:d7:ce:51:cd:f5:33:6d:d6:04:
                    a4:cc:a0:48:da:63:40:2f:42:22:f2:01:2b:52:79:
                    0a:7a:1b:c2:51:ec:5f:58:a4:d8:3f:28:dc:da:71:
                    16:e6:09:80:b0:d9:cb:f7:41:fc:c0:2a:da:71:7a:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8A:C9:88:A7:D7:64:65:15:33:D0:C4:63:0E:D4:10:37:89:02:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/cd44e6d8-aa45-3838-b2e5-df53c184fd1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl

            X509v3 Authority Key Identifier:
                keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:74:69:7f:41:9d:9f:34:4c:44:c5:3a:36:07:f2:ce:44:1b:
         4e:2f:ab:c8:95:cf:b9:b5:66:bb:fe:65:0b:c1:8e:2e:dc:cf:
         ac:fe:fa:fa:f0:5a:49:bb:36:4b:3e:f7:f2:85:0f:25:69:1a:
         97:59:b5:37:80:f5:18:f3:35:10:81:c7:aa:79:bf:53:9f:10:
         76:99:a0:55:61:c0:4c:fa:97:b3:68:73:ef:ad:30:52:26:87:
         65:d8:d7:ed:b7:ed:2b:2c:25:28:66:06:a7:82:2e:4a:e8:4d:
         66:f6:7d:07:a1:80:96:bb:e5:47:b5:9e:8f:82:e0:4d:da:af:
         73:79:75:6b:12:43:1d:07:de:df:d8:f8:08:3a:a3:a9:35:43:
         de:e6:ea:6f:54:a2:0a:20:de:0b:04:8d:d4:f4:14:7d:e5:2a:
         ac:9a:d2:64:32:37:f7:8b:43:04:a6:9f:31:1f:78:de:2c:fd:
         73:c6:07:e0:c7:4d:41:01:b4:84:2c:1d:eb:5a:7d:c4:be:81:
         41:3d:fd:73:f8:04:4f:d4:24:78:f2:4d:96:6e:ad:b2:24:d9:
         87:ae:a9:15:d5:5e:02:af:e1:fd:ca:24:51:73:f8:c1:39:7d:
         39:75:eb:6a:91:e0:3c:4f:6e:3f:b2:47:05:3f:7b:54:b1:5a:
         73:92:e3:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmUNYVdppXFusZfQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNjMTRkYzQtNjc2OC00M2MxLTlkOTUtYzg5YTU1MjAy
MGMxMB4XDTI1MDQxOTE1MDExOFoXDTI1MDcxODE1MDExOFowLzEtMCsGA1UEAxMk
OWZhZTU1MzktNWQ4OC00YWRkLWIzMmEtZTY1ZTA3YzkxMzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwupXRB2v7f9BVQfDWP7rIiAhTV20MsucNBC
EbUtg62tAwHNVW5tds0KBuDmufT7U9o1PYAIGSBBWA1kdAeUVeZn8+TpwG3SbWz0
WVmfmZe8KR99zhsil3gMbBZceLq0JOQKPhvX97eWd/lmmQefPWuNWf2G1KeJIk3O
UCF7hs2gXQ7Xeis7SDwSOWv6xVrBvBhqJminB07lk64TPq8HtwsQ902L5n6JY7jx
f4yys5Z/mVQ9juSGaP9Hsw0OSuEJ8732hGlYC7XXzlHN9TNt1gSkzKBI2mNAL0Ii
8gErUnkKehvCUexfWKTYPyjc2nEW5gmAsNnL90H8wCracXqzWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAqKyYin12RlFTPQxGMO1BA3iQIuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hY2Mx
NGRjNC02NzY4LTQzYzEtOWQ5NS1jODlhNTUyMDIwYzEvY2Q0NGU2ZDgtYWE0NS0z
ODM4LWIyZTUtZGY1M2MxODRmZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWNjMTRkYzQtNjc2OC00M2MxLTlk
OTUtYzg5YTU1MjAyMGMxL2FjYzE0ZGM0LTY3NjgtNDNjMS05ZDk1LWM4OWE1NTIw
MjBjMS5jcmwwHwYDVR0jBBgwFoAUIuC90W13RbxlN/JAwkXcP6qjhiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hY2MxNGRjNC02NzY4LTQzYzEtOWQ5NS1jODlh
NTUyMDIwYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HN9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK90aX9BnZ80TETFOjYH8s5EG04vq8iVz7m1Zrv+ZQvBji7cz6z++vrw
Wkm7Nks+9/KFDyVpGpdZtTeA9RjzNRCBx6p5v1OfEHaZoFVhwEz6l7Noc++tMFIm
h2XY1+237SssJShmBqeCLkroTWb2fQehgJa75Ue1no+C4E3ar3N5dWsSQx0H3t/Y
+Ag6o6k1Q97m6m9Uogog3gsEjdT0FH3lKqya0mQyN/eLQwSmnzEfeN4s/XPGB+DH
TUEBtIQsHetafcS+gUE9/XP4BE/UJHjyTZZurbIk2YeuqRXVXgKv4f3KJFFz+ME5
fTl162qR4DxPbj+yRwU/e1SxWnOS4/0=
-----END CERTIFICATE-----
Generated at Sun May 11 23:22:09 2025 by rpki-client