Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eee4ef8c-58cf-3d56-bca4-ec182ccace83.roa
File:                     eee4ef8c-58cf-3d56-bca4-ec182ccace83.roa (raw, json)
Hash identifier:          YOIQmEhfCCIWGW/SU8OQFIRG53rprwhorgFtKRMYI9A=
Subject key identifier:   F8:B3:76:BE:37:64:5A:CC:DC:FA:DF:70:7F:1A:E7:0C:AC:C5:F8:EB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B16F0C055FD668C102C40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eee4ef8c-58cf-3d56-bca4-ec182ccace83.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:16:f0:c0:55:fd:66:8c:10:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=1ae7cbe2-a7eb-4e44-a65a-b208b2f754cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:89:5f:72:92:e8:05:00:21:ee:b5:4d:c0:
                    0b:8f:82:b5:71:6b:32:2a:8b:83:e8:56:3d:b1:e9:
                    e8:ae:53:a4:b9:9e:10:a7:aa:71:ee:1f:7a:0d:73:
                    46:db:10:c4:75:a7:76:df:71:de:ff:11:e1:dd:bd:
                    e7:26:a7:f7:b3:5b:77:40:40:03:3e:35:b8:36:18:
                    5a:8e:57:02:0a:39:15:51:b2:f9:05:d8:a7:a4:a0:
                    a2:a3:a6:99:4a:82:10:0b:9a:b8:ad:04:bf:69:6c:
                    3b:85:72:b5:5c:ff:70:1a:77:29:4d:3a:5d:6d:af:
                    5c:70:61:79:0c:e5:64:e2:62:ce:ac:69:31:44:87:
                    b8:09:94:c3:78:43:1b:44:0b:8c:37:00:f6:ec:77:
                    c0:3b:ae:4a:2c:02:1f:61:17:a9:53:3d:ed:14:5d:
                    be:2f:2f:5a:eb:0e:fc:cf:55:c5:bc:a7:a3:61:5f:
                    51:20:41:d3:91:36:ed:ed:b2:b9:b6:1f:c7:13:ae:
                    c4:d5:4d:d4:e5:18:c8:9e:dd:f7:c9:1b:46:e9:63:
                    a3:d8:07:11:7a:c6:9d:91:27:9d:79:04:d3:02:89:
                    f1:6c:03:49:80:98:82:62:ff:be:43:8c:05:88:a7:
                    27:d2:1c:29:f2:01:04:b3:6d:1a:f9:00:c0:00:03:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:76:BE:37:64:5A:CC:DC:FA:DF:70:7F:1A:E7:0C:AC:C5:F8:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eee4ef8c-58cf-3d56-bca4-ec182ccace83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8c:f0:08:e7:d6:d3:7f:8c:a1:7a:c8:05:bb:15:b2:8f:df:
         5d:12:3b:79:75:c0:94:b2:f5:f7:d4:0b:16:bc:7a:30:4e:3b:
         84:08:35:a4:24:8c:87:c3:a2:9d:db:fc:0a:b9:0b:b5:3a:2f:
         3e:06:39:8a:af:a5:20:25:ff:33:a0:b6:62:43:58:3c:d1:0a:
         92:51:82:44:15:83:25:40:36:0a:6a:16:23:97:61:9e:d0:5e:
         4a:16:23:40:72:5c:a7:78:52:3b:41:a4:0e:54:ec:5b:5d:5d:
         03:9e:72:6e:ab:bb:3f:65:18:57:b2:15:8c:b2:bf:6f:fa:ef:
         29:0e:92:bf:0b:77:8b:28:fd:aa:f9:bb:8d:75:77:b5:75:5f:
         07:9e:c9:44:56:e2:3c:af:5d:cb:1d:3e:fd:b1:f3:85:44:81:
         53:d0:16:ee:79:fa:db:85:19:62:1b:e1:e7:98:10:e1:ac:e5:
         38:71:29:b0:ca:0e:ac:32:fa:d5:a6:a8:7c:ed:b2:f9:18:71:
         21:f2:c3:7d:65:a6:1e:42:78:69:44:88:88:ad:db:df:e7:c5:
         75:10:55:44:6a:f6:b7:94:ac:1d:12:d9:2e:c0:69:85:57:66:
         1a:58:9b:1d:d6:36:7f:80:fb:d8:c9:5d:7d:a5:28:67:e9:4c:
         a1:75:f5:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKxbwwFX9ZowQLEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MWFlN2NiZTItYTdlYi00ZTQ0LWE2NWEtYjIwOGIyZjc1NGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHmJX3KS6AUAIe61TcALj4K1cWsyKouD6FY9
senorlOkuZ4Qp6px7h96DXNG2xDEdad233He/xHh3b3nJqf3s1t3QEADPjW4Nhha
jlcCCjkVUbL5BdinpKCio6aZSoIQC5q4rQS/aWw7hXK1XP9wGncpTTpdba9ccGF5
DOVk4mLOrGkxRIe4CZTDeEMbRAuMNwD27HfAO65KLAIfYRepUz3tFF2+Ly9a6w78
z1XFvKejYV9RIEHTkTbt7bK5th/HE67E1U3U5RjInt33yRtG6WOj2AcResadkSed
eQTTAonxbANJgJiCYv++Q4wFiKcn0hwp8gEEs20a+QDAAANPewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPizdr43ZFrM3PrfcH8a5wysxfjrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWVlNGVmOGMtNThjZi0z
ZDU2LWJjYTQtZWMxODJjY2FjZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2M8Ajn1tN/jKF6yAW7FbKP310SO3l1wJSy9ffUCxa8ejBOO4QINaQk
jIfDop3b/Aq5C7U6Lz4GOYqvpSAl/zOgtmJDWDzRCpJRgkQVgyVANgpqFiOXYZ7Q
XkoWI0ByXKd4UjtBpA5U7FtdXQOecm6ruz9lGFeyFYyyv2/67ykOkr8Ld4so/ar5
u411d7V1XweeyURW4jyvXcsdPv2x84VEgVPQFu55+tuFGWIb4eeYEOGs5ThxKbDK
Dqwy+tWmqHztsvkYcSHyw31lph5CeGlEiIit29/nxXUQVURq9reUrB0S2S7AaYVX
ZhpYmx3WNn+A+9jJXX2lKGfpTKF19Ts=
-----END CERTIFICATE-----
Generated at Sun May 11 23:58:40 2025 by rpki-client