Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/dd451fba-8aad-32cf-bd7d-cae4fc857936.roa
File:                     dd451fba-8aad-32cf-bd7d-cae4fc857936.roa (raw, json)
Hash identifier:          /dvrtVx7OMdXETMrwZz8weTC2SkqxQEt+69LPE2+MlU=
Subject key identifier:   2A:E1:40:1D:D6:F1:54:2C:60:F4:09:D4:60:1A:F1:74:44:C9:5C:40
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285848116FBA497477EEF6B60B8FC0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/dd451fba-8aad-32cf-bd7d-cae4fc857936.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     137922
IP address blocks:        163.120.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:ba:49:74:77:ee:f6:b6:0b:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=47ba85a4-ed29-4d57-b373-b5ac0e7c7d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:fb:48:1e:0e:1b:8b:02:56:96:74:d0:36:
                    00:8b:5e:e9:18:ba:30:c2:d5:e3:01:20:99:01:e3:
                    73:71:f7:72:81:97:85:a8:a7:c0:e6:2e:b7:b3:1a:
                    05:ff:0c:87:2f:39:31:4a:be:71:0d:23:29:dd:70:
                    2f:53:6a:8f:c2:d6:63:dd:25:df:ed:bb:42:d3:91:
                    5b:e3:e4:b1:f1:a0:05:54:b9:2d:db:07:61:b5:76:
                    dc:ad:a3:c7:24:9b:d9:0a:9f:99:15:db:7f:cb:8b:
                    e9:ba:bb:a7:ef:2b:1c:70:e7:a9:fc:eb:77:f4:6f:
                    d0:fb:ab:5f:b1:a0:65:01:65:cf:13:2e:7a:ec:db:
                    ab:69:e2:1a:51:94:e5:de:9d:a0:18:5c:6f:c7:53:
                    2d:ac:d3:4e:b7:e6:01:63:2a:79:62:59:e1:6c:c0:
                    01:fe:de:4f:ef:dd:12:3c:f0:a4:ac:fb:ed:d8:6e:
                    a6:0d:35:19:41:8a:7c:f3:02:02:3e:89:ef:eb:a6:
                    65:7b:20:ba:8f:63:cb:05:d7:ed:87:be:99:6c:9e:
                    3d:9b:fd:45:ff:ed:e0:d0:71:ef:df:da:bd:44:58:
                    0c:de:b1:21:d2:dc:8e:a1:45:86:c5:d8:32:69:7e:
                    97:95:63:9d:9d:10:e6:03:c2:0c:74:7b:48:11:8d:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E1:40:1D:D6:F1:54:2C:60:F4:09:D4:60:1A:F1:74:44:C9:5C:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/dd451fba-8aad-32cf-bd7d-cae4fc857936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:cd:3f:85:8b:75:62:62:d2:1e:69:cc:90:be:e3:bd:a8:
         e6:65:d9:19:a9:e8:d5:36:17:d0:8c:33:8e:e6:44:87:9f:b2:
         e3:8f:7a:55:d8:bd:04:17:12:d3:49:6a:01:46:44:92:8f:1c:
         39:f7:e2:af:76:bd:eb:f6:32:a6:d4:31:ae:d7:77:3c:51:bc:
         7a:cc:75:47:59:72:c6:2d:3d:1a:2b:0f:20:e2:de:92:8c:f1:
         48:ce:e8:62:e1:d1:5d:8b:02:e4:49:e4:42:0c:54:0e:f5:14:
         df:36:75:df:e7:9a:06:9b:0b:1a:21:cf:47:71:b4:f0:b1:1e:
         2f:2e:92:03:d9:52:0e:36:01:b4:e6:98:56:12:93:dd:03:fc:
         43:c0:5f:40:c8:20:9b:d7:fa:61:ee:f9:62:c8:24:44:52:e2:
         e8:de:cc:7f:eb:97:bf:56:e3:4d:56:ea:65:f7:b7:1b:39:85:
         f6:de:1e:62:1f:e1:06:45:84:e6:95:8b:25:1f:86:00:24:6d:
         1e:23:38:20:2e:94:1c:3d:6e:b0:a0:2f:2b:ce:96:c1:6f:4f:
         1f:ff:6b:51:fc:c3:14:fd:6b:18:26:49:e8:16:c8:f9:d1:43:
         26:8b:bf:c4:30:59:bc:93:6e:a8:be:07:41:0d:08:c3:82:0d:
         6d:34:e2:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7pJdHfu9rYLj8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
NDdiYTg1YTQtZWQyOS00ZDU3LWIzNzMtYjVhYzBlN2M3ZDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaT7SB4OG4sCVpZ00DYAi17pGLowwtXjASCZ
AeNzcfdygZeFqKfA5i63sxoF/wyHLzkxSr5xDSMp3XAvU2qPwtZj3SXf7btC05Fb
4+Sx8aAFVLkt2wdhtXbcraPHJJvZCp+ZFdt/y4vpurun7ysccOep/Ot39G/Q+6tf
saBlAWXPEy567NuraeIaUZTl3p2gGFxvx1MtrNNOt+YBYyp5YlnhbMAB/t5P790S
PPCkrPvt2G6mDTUZQYp88wICPonv66ZleyC6j2PLBdfth76ZbJ49m/1F/+3g0HHv
39q9RFgM3rEh0tyOoUWGxdgyaX6XlWOdnRDmA8IMdHtIEY0ziQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrhQB3W8VQsYPQJ1GAa8XREyVxAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZGQ0NTFmYmEtOGFhZC0z
MmNmLWJkN2QtY2FlNGZjODU3OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+9zT+Fi3ViYtIeacyQvuO9qOZl2Rmp6NU2F9CMM47mRIefsuOPelXY
vQQXEtNJagFGRJKPHDn34q92vev2MqbUMa7XdzxRvHrMdUdZcsYtPRorDyDi3pKM
8UjO6GLh0V2LAuRJ5EIMVA71FN82dd/nmgabCxohz0dxtPCxHi8ukgPZUg42AbTm
mFYSk90D/EPAX0DIIJvX+mHu+WLIJERS4ujezH/rl79W401W6mX3txs5hfbeHmIf
4QZFhOaViyUfhgAkbR4jOCAulBw9brCgLyvOlsFvTx//a1H8wxT9axgmSegWyPnR
QyaLv8QwWbyTbqi+B0ENCMOCDW004io=
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:35 2025 by rpki-client