Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc21e017-f16c-3a0f-8e19-3cf9daf65384.roa
File:                     dc21e017-f16c-3a0f-8e19-3cf9daf65384.roa (raw, json)
Hash identifier:          vSwtkaviLC/wFdSq8I/fylF7BoRuqk1+Xx+ooQb+M8Q=
Subject key identifier:   A4:52:6D:38:39:E1:EC:81:5A:F4:1B:94:B5:76:C3:17:3A:50:72:F1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AC5C1243BEB7FDC727140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc21e017-f16c-3a0f-8e19-3cf9daf65384.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:c5:c1:24:3b:eb:7f:dc:72:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b1049278-a8bd-4ccb-808e-55b96de9c5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:f7:5c:f4:23:2f:6d:04:22:81:a6:4c:c5:
                    61:52:86:ab:04:05:8e:67:e4:bd:a3:cb:ec:ba:13:
                    01:14:09:7a:8a:8f:90:b9:04:44:a4:45:cd:76:3b:
                    09:41:6b:1b:a5:03:e9:9b:a7:27:e4:5a:80:f6:ec:
                    f9:7f:4b:c2:7c:2e:68:b2:ed:56:dd:be:9d:bc:a6:
                    f4:39:2e:21:8a:20:e8:e1:14:67:5a:36:4e:a9:44:
                    18:a3:f0:46:f9:ed:fb:e9:30:d4:4c:d4:db:c2:26:
                    96:e5:0f:5d:d3:24:b0:00:df:96:cb:09:4c:bf:21:
                    6f:99:59:20:f0:8f:b0:2b:c4:a5:4b:a6:66:0a:81:
                    2b:9f:e4:d4:8c:d2:eb:5b:dc:5d:5d:e3:bd:e7:6d:
                    73:95:75:ce:cb:9d:67:6e:3f:16:5a:ae:03:ee:32:
                    f5:a2:09:9f:27:13:33:66:63:93:fa:9e:73:70:29:
                    11:d4:0b:4c:51:97:28:aa:bf:8e:62:ed:2e:d6:5b:
                    cc:6e:33:66:44:5e:61:79:c8:ed:85:b6:82:55:30:
                    22:16:cc:4c:a0:ed:7d:08:5e:3d:71:b7:f0:df:91:
                    5b:f2:c6:ab:a5:71:c0:3f:2f:0f:00:34:0d:ed:f8:
                    22:41:13:02:32:fa:29:25:b1:0d:7d:ab:1c:2e:dd:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:6D:38:39:E1:EC:81:5A:F4:1B:94:B5:76:C3:17:3A:50:72:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc21e017-f16c-3a0f-8e19-3cf9daf65384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:8e:a9:32:d9:ef:02:ef:95:f4:e3:34:26:e9:8c:d1:37:90:
         74:58:ed:6a:ef:79:dc:53:94:85:28:ce:6d:af:0b:50:a7:de:
         0a:8a:b4:16:26:08:f4:5d:06:51:78:bb:b8:64:e4:6e:db:d0:
         34:bb:c8:d3:63:4c:c7:f0:d9:d4:44:3c:3e:dc:2f:fa:1f:b4:
         e7:b8:ef:af:b6:36:1c:ee:67:70:d0:c4:51:ca:f6:50:9f:15:
         0d:85:44:16:25:d6:67:10:f6:5e:96:64:e2:b9:89:b0:1c:d4:
         cf:09:2d:8e:58:5f:fb:fa:89:a3:98:31:08:db:b3:5a:f9:4b:
         d1:46:e4:58:56:8d:c2:42:40:45:2e:e4:e7:a8:b9:64:6e:54:
         d9:a5:4f:69:6c:ae:5f:e5:01:89:9b:eb:4a:f6:c8:71:4e:1f:
         3b:88:64:b6:d0:a0:6d:de:3c:37:c5:97:2e:3d:6b:62:ee:d4:
         d1:10:66:a0:f3:8d:30:33:5d:29:57:c8:4e:3f:91:0b:1e:bd:
         9f:d7:1e:ae:f7:81:ec:76:47:b0:12:40:76:8c:8b:a8:1a:79:
         32:44:c6:51:e4:51:97:23:28:b8:3b:1a:03:73:91:0c:bb:c7:
         fd:02:6a:db:ac:ce:d7:cb:32:99:13:d7:cf:da:31:6d:16:dc:
         9c:5e:98:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsXBJDvrf9xycUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YjEwNDkyNzgtYThiZC00Y2NiLTgwOGUtNTViOTZkZTljNWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8z3XPQjL20EIoGmTMVhUoarBAWOZ+S9o8vs
uhMBFAl6io+QuQREpEXNdjsJQWsbpQPpm6cn5FqA9uz5f0vCfC5osu1W3b6dvKb0
OS4hiiDo4RRnWjZOqUQYo/BG+e376TDUTNTbwiaW5Q9d0ySwAN+WywlMvyFvmVkg
8I+wK8SlS6ZmCoErn+TUjNLrW9xdXeO9521zlXXOy51nbj8WWq4D7jL1ogmfJxMz
ZmOT+p5zcCkR1AtMUZcoqr+OYu0u1lvMbjNmRF5hecjthbaCVTAiFsxMoO19CF49
cbfw35Fb8sarpXHAPy8PADQN7fgiQRMCMvopJbENfascLt3UWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRSbTg54eyBWvQblLV2wxc6UHLxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGMyMWUwMTctZjE2Yy0z
YTBmLThlMTktM2NmOWRhZjY1Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANmOqTLZ7wLvlfTjNCbpjNE3kHRY7WrvedxTlIUozm2vC1Cn3gqKtBYm
CPRdBlF4u7hk5G7b0DS7yNNjTMfw2dREPD7cL/oftOe476+2NhzuZ3DQxFHK9lCf
FQ2FRBYl1mcQ9l6WZOK5ibAc1M8JLY5YX/v6iaOYMQjbs1r5S9FG5FhWjcJCQEUu
5OeouWRuVNmlT2lsrl/lAYmb60r2yHFOHzuIZLbQoG3ePDfFly49a2Lu1NEQZqDz
jTAzXSlXyE4/kQsevZ/XHq73gex2R7ASQHaMi6gaeTJExlHkUZcjKLg7GgNzkQy7
x/0CatusztfLMpkT18/aMW0W3JxemC4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:26 2025 by rpki-client