Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/251e6a29-2030-3486-ad87-f842f4a277f9.roa
File:                     251e6a29-2030-3486-ad87-f842f4a277f9.roa (raw, json)
Hash identifier:          86M4pY4a07tRUnP3UFGvAYjrK+q/771QwA/4d8IIR5Y=
Subject key identifier:   4C:0F:EC:D8:32:6B:53:74:68:9D:5A:A4:15:0A:0F:FD:AD:4C:B5:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143ABB1BB82B13D8A89B9840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/251e6a29-2030-3486-ad87-f842f4a277f9.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        76.144.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:bb:1b:b8:2b:13:d8:a8:9b:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ea0c5606-aded-4b15-ab9a-5064a8e036b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:81:59:99:58:70:89:77:da:8f:bb:32:7b:
                    4c:3e:53:15:87:a9:99:67:29:23:82:7e:1d:c1:81:
                    e8:a0:2e:26:34:5b:1f:fc:d1:33:ba:12:db:cc:70:
                    ea:54:99:2e:43:9f:57:57:e6:9c:57:50:3e:7f:9d:
                    0a:e6:58:9e:db:8c:eb:2a:17:bf:b8:21:3c:fe:6a:
                    87:62:8b:44:b8:84:a7:57:da:a1:89:85:e1:b0:c7:
                    57:36:ea:ee:7f:7f:fb:ba:0a:6c:5a:c6:c8:a2:75:
                    d2:3d:0c:24:fd:f1:ed:d5:f0:10:98:5a:fa:db:99:
                    0d:ed:cc:5d:8c:4d:51:9e:30:91:47:84:12:66:ed:
                    39:2e:f5:98:8d:b0:8d:93:2c:6e:9b:11:77:81:4c:
                    45:34:3b:c2:bc:d3:4a:0b:6b:71:e4:75:01:15:06:
                    29:55:7c:2e:81:a9:6a:70:b4:c3:68:73:7d:b8:09:
                    ef:85:ef:1c:4e:fc:ec:e2:7b:1f:66:d5:3a:2a:52:
                    bb:f3:41:af:06:11:ef:3e:a4:f2:1b:c9:84:73:11:
                    7d:c8:9a:7f:d4:fc:de:5c:fe:64:42:ff:5a:64:3a:
                    83:69:cf:bd:c8:88:6b:8c:81:27:1d:4d:1e:6c:a3:
                    cc:52:4a:e4:7e:33:64:a4:ad:91:1c:08:09:6f:88:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0F:EC:D8:32:6B:53:74:68:9D:5A:A4:15:0A:0F:FD:AD:4C:B5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/251e6a29-2030-3486-ad87-f842f4a277f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.144.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7f:12:35:1a:ec:1f:d5:e5:f9:68:48:71:64:88:6a:8b:af:
         c2:9f:4f:de:c1:67:9f:8b:23:35:de:1b:2b:0b:9e:71:d8:c6:
         b0:4a:bc:0e:e7:bb:de:1f:33:da:69:99:40:ac:25:24:24:ca:
         97:4c:48:ee:a9:80:c0:a6:c3:e7:27:af:3a:5b:72:4c:f7:40:
         09:a4:c0:e7:76:29:75:55:3c:86:b8:6a:36:14:93:e9:2c:76:
         21:2c:d5:69:97:9a:c6:a7:35:79:7e:2e:2e:aa:bd:15:39:cf:
         4a:36:ef:c0:1c:49:e3:85:d5:31:3e:a4:82:91:b6:1c:42:21:
         33:8c:2f:56:1f:0b:41:89:e6:8b:c3:7c:56:48:b3:f3:df:24:
         47:10:ad:10:e8:2d:a8:6d:f6:e1:75:ee:fb:1b:ab:fe:a6:ef:
         00:1c:01:d3:fa:d7:a5:af:36:3e:34:d6:7d:fa:2c:be:3c:40:
         ce:3f:90:ea:98:59:1f:32:07:6e:c7:77:fa:2f:3b:69:5b:2b:
         2f:c6:14:6e:d3:20:03:de:19:b4:99:04:7b:f6:30:d8:3e:5f:
         9f:18:50:97:47:b2:c5:2b:ff:b0:07:fa:83:0f:20:0a:c4:22:
         a4:46:8d:80:40:09:41:9b:46:65:de:e5:81:35:4a:03:90:6b:
         c3:88:30:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOrsbuCsT2KibmEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZWEwYzU2MDYtYWRlZC00YjE1LWFiOWEtNTA2NGE4ZTAzNmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5aBWZlYcIl32o+7MntMPlMVh6mZZykjgn4d
wYHooC4mNFsf/NEzuhLbzHDqVJkuQ59XV+acV1A+f50K5lie24zrKhe/uCE8/mqH
YotEuISnV9qhiYXhsMdXNuruf3/7ugpsWsbIonXSPQwk/fHt1fAQmFr625kN7cxd
jE1RnjCRR4QSZu05LvWYjbCNkyxumxF3gUxFNDvCvNNKC2tx5HUBFQYpVXwugalq
cLTDaHN9uAnvhe8cTvzs4nsfZtU6KlK780GvBhHvPqTyG8mEcxF9yJp/1PzeXP5k
Qv9aZDqDac+9yIhrjIEnHU0ebKPMUkrkfjNkpK2RHAgJb4hAqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwP7Ngya1N0aJ1apBUKD/2tTLXCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjUxZTZhMjktMjAzMC0z
NDg2LWFkODctZjg0MmY0YTI3N2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZ/EjUa7B/V5floSHFkiGqLr8KfT97BZ5+LIzXeGysLnnHYxrBKvA7n
u94fM9ppmUCsJSQkypdMSO6pgMCmw+cnrzpbckz3QAmkwOd2KXVVPIa4ajYUk+ks
diEs1WmXmsanNXl+Li6qvRU5z0o278AcSeOF1TE+pIKRthxCITOML1YfC0GJ5ovD
fFZIs/PfJEcQrRDoLaht9uF17vsbq/6m7wAcAdP616WvNj401n36LL48QM4/kOqY
WR8yB27Hd/ovO2lbKy/GFG7TIAPeGbSZBHv2MNg+X58YUJdHssUr/7AH+oMPIArE
IqRGjYBACUGbRmXe5YE1SgOQa8OIMMM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:43 2025 by rpki-client