Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/120269e2-65e0-38b1-82ec-292383163359.roa
File:                     120269e2-65e0-38b1-82ec-292383163359.roa (raw, json)
Hash identifier:          TQy1h6C6h58VthP4K2myGz4SsXCKZUM5KO0vu1HqDhc=
Subject key identifier:   26:A2:C3:CD:3B:69:E7:0D:04:6A:4B:65:26:CE:35:55:58:85:4C:BA
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858480644F62B6D31D72D9028DE00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/120269e2-65e0-38b1-82ec-292383163359.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     16509
IP address blocks:        139.180.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f6:2b:6d:31:d7:2d:90:28:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=a2ac8589-f27d-4d0f-bae4-c6a7b71913cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:3b:dc:68:64:6a:61:6d:89:6c:f8:c7:e5:
                    aa:b5:4c:f3:e9:bf:c9:1a:97:98:26:5d:e6:f8:a4:
                    a7:b5:de:f1:67:8b:20:69:e8:42:b8:63:c1:18:a8:
                    73:4d:90:94:17:b8:be:0a:cc:cc:9b:6f:57:36:31:
                    6e:b8:41:d7:e8:56:62:23:da:57:b3:01:f3:16:68:
                    ec:89:8b:1a:a8:9e:09:1d:d6:08:c5:98:3e:14:23:
                    26:76:ef:22:9c:da:e0:fb:7d:3e:df:6c:f5:c0:9b:
                    65:cb:5f:af:9c:ce:57:9d:16:35:a0:4e:25:f1:c6:
                    be:3d:94:c9:b9:fc:ed:9e:4b:ed:0c:bd:94:5f:12:
                    f8:04:ce:56:81:65:d3:94:cc:2e:54:1f:a0:78:0e:
                    71:a0:85:91:03:e4:21:8c:cb:f6:b2:75:9e:29:7c:
                    5a:46:63:79:74:71:49:b8:f7:7d:fb:28:97:38:08:
                    eb:1c:1d:00:88:f4:7e:e2:5f:9b:41:21:3e:08:c6:
                    6e:63:8f:b3:73:36:b3:a0:2d:4d:b8:e6:c1:54:5f:
                    9f:70:6c:35:02:88:2f:0d:36:5d:89:be:91:82:32:
                    3f:ce:1f:4c:70:0a:34:60:e1:6e:b0:29:5d:3e:b2:
                    34:73:85:2a:94:f0:76:d8:79:02:04:80:dd:6c:50:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A2:C3:CD:3B:69:E7:0D:04:6A:4B:65:26:CE:35:55:58:85:4C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/120269e2-65e0-38b1-82ec-292383163359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:03:cc:98:d4:2e:64:4d:cf:12:68:36:43:40:29:bb:31:
         9a:4a:e1:ec:ab:52:1e:7a:c0:5e:e4:e9:40:70:cd:bb:fe:dc:
         bb:a6:db:b7:f5:dd:e1:f4:93:78:61:d5:3e:2b:e1:19:cd:50:
         1a:43:31:67:0e:65:89:f5:4d:d9:eb:fa:f3:1b:3a:4b:30:20:
         62:33:48:18:bd:46:39:03:e1:6d:9e:d6:70:07:ca:de:4e:22:
         d1:30:26:1d:b4:f7:e3:dc:d5:9d:ee:61:5f:35:ce:c7:36:bb:
         0a:8d:bf:cc:bc:40:94:60:77:81:b6:8d:bd:5d:ec:81:4f:24:
         31:02:a8:ee:7b:bd:c8:f8:a8:df:8d:fa:5b:96:30:f8:3f:5f:
         ce:3f:77:41:53:bc:de:57:b0:6d:39:1d:50:e0:9b:03:4c:44:
         08:88:56:b9:62:9d:ce:52:e8:f2:81:b4:8a:34:a9:96:13:e7:
         c0:7e:cc:4b:c2:a2:91:90:3a:c9:fb:4d:ae:1b:dd:b1:1b:07:
         17:b0:35:d5:b1:66:5c:91:10:f4:74:40:5b:ae:04:41:72:46:
         80:80:ac:8c:9d:85:ac:b3:ef:83:37:b1:8e:11:50:56:37:d5:
         35:91:29:96:b0:53:c3:d3:ca:a5:51:b2:43:c1:f4:3a:57:de:
         8a:9e:3f:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRPYrbTHXLZAo3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
YTJhYzg1ODktZjI3ZC00ZDBmLWJhZTQtYzZhN2I3MTkxM2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumI73GhkamFtiWz4x+WqtUzz6b/JGpeYJl3m
+KSntd7xZ4sgaehCuGPBGKhzTZCUF7i+CszMm29XNjFuuEHX6FZiI9pXswHzFmjs
iYsaqJ4JHdYIxZg+FCMmdu8inNrg+30+32z1wJtly1+vnM5XnRY1oE4l8ca+PZTJ
ufztnkvtDL2UXxL4BM5WgWXTlMwuVB+geA5xoIWRA+QhjMv2snWeKXxaRmN5dHFJ
uPd9+yiXOAjrHB0AiPR+4l+bQSE+CMZuY4+zczazoC1NuObBVF+fcGw1AogvDTZd
ib6RgjI/zh9McAo0YOFusCldPrI0c4UqlPB22HkCBIDdbFCNcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaiw807aecNBGpLZSbONVVYhUy6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMTIwMjY5ZTItNjVlMC0z
OGIxLTgyZWMtMjkyMzgzMTYzMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi7TwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6+A8yY1C5kTc8SaDZDQCm7MZpK4eyrUh56wF7k6UBwzbv+3Lum27f1
3eH0k3hh1T4r4RnNUBpDMWcOZYn1Tdnr+vMbOkswIGIzSBi9RjkD4W2e1nAHyt5O
ItEwJh209+Pc1Z3uYV81zsc2uwqNv8y8QJRgd4G2jb1d7IFPJDECqO57vcj4qN+N
+luWMPg/X84/d0FTvN5XsG05HVDgmwNMRAiIVrlinc5S6PKBtIo0qZYT58B+zEvC
opGQOsn7Ta4b3bEbBxewNdWxZlyREPR0QFuuBEFyRoCArIydhayz74M3sY4RUFY3
1TWRKZawU8PTyqVRskPB9DpX3oqePxg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:59 2025 by rpki-client