Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/810a1bac-5cb7-3e97-96a3-c8f92d2d399a.roa
File:                     810a1bac-5cb7-3e97-96a3-c8f92d2d399a.roa (raw, json)
Hash identifier:          WoMKDKU7HIM33dKgE/6+xLiS9uZESme87WiLCNHLBwc=
Subject key identifier:   09:A2:76:18:1D:90:7E:02:07:3A:31:61:10:47:12:E1:79:2B:A0:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143A9605E42BF89C59654C48
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/810a1bac-5cb7-3e97-96a3-c8f92d2d399a.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        67.171.166.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:96:05:e4:2b:f8:9c:59:65:4c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=c5998ab5-a36d-4a78-a9bd-bc68a6efb74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:2b:4c:f2:83:80:df:af:13:c0:c9:01:23:
                    dc:b9:f7:7d:ea:d1:c0:74:5e:42:73:23:bd:8d:2d:
                    61:a1:49:62:83:fa:1e:20:9b:0f:d9:b9:1e:5b:4c:
                    85:ac:bf:75:b9:24:72:fe:53:ab:86:2e:6e:79:be:
                    09:30:95:49:a6:79:da:45:ce:93:c8:64:97:45:0e:
                    c3:c7:e8:55:10:51:cb:d3:a7:17:0c:df:be:0a:82:
                    31:9a:03:35:34:fa:36:46:e4:16:ed:db:b7:63:39:
                    4c:a9:02:67:c5:fc:60:4f:fa:6d:e6:33:f7:d1:cb:
                    5a:21:65:b9:93:3b:39:be:60:6a:fc:31:b3:58:9b:
                    a7:9c:3e:5f:b2:67:9a:06:55:dc:63:12:51:cf:be:
                    a7:20:a6:a0:d7:06:b4:d5:76:d8:65:a8:29:b9:a8:
                    d6:e2:32:72:9b:a0:a4:69:ae:1a:0e:a1:c9:2d:39:
                    f2:68:f3:cd:1a:6c:63:4f:db:3f:aa:33:f7:fe:1d:
                    eb:cc:72:60:a2:56:8c:87:6c:95:65:43:ab:61:b6:
                    23:28:ca:bf:c5:11:b8:4a:51:53:ed:60:59:7d:95:
                    4a:45:56:97:5d:b9:05:f2:d4:f6:83:a8:08:90:d1:
                    02:2b:54:58:56:5e:3b:47:b2:14:95:7e:68:40:dc:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A2:76:18:1D:90:7E:02:07:3A:31:61:10:47:12:E1:79:2B:A0:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/810a1bac-5cb7-3e97-96a3-c8f92d2d399a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.171.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:8b:d6:ff:af:f4:cc:e6:4f:a9:d4:1d:61:40:b6:90:40:ac:
         9a:24:2e:bb:35:0e:04:16:95:a8:f8:09:b2:08:21:9a:f6:6d:
         06:95:c7:71:55:37:16:21:3d:3e:ec:a2:b2:b6:de:ce:43:73:
         5a:ea:d5:89:a2:7e:3c:d8:7d:c0:0b:a2:5b:42:73:99:86:25:
         40:93:c3:6e:ad:29:12:80:8d:f9:ea:73:c9:9b:2c:be:d1:4d:
         e9:e9:5d:9c:f4:5e:38:37:6e:f2:f2:38:6e:64:12:d0:fa:56:
         47:85:5f:63:f0:b2:f0:05:46:c7:01:b9:a3:c5:eb:46:06:d5:
         5d:09:46:e1:28:79:9e:4f:7b:fa:cc:8a:8d:25:68:c9:de:22:
         5c:ca:0a:36:53:89:41:0f:aa:c6:8c:6e:4d:d8:54:5d:21:31:
         fe:12:5d:ab:98:1c:ab:b0:92:48:98:40:e8:a9:fe:4f:76:a3:
         d1:77:b0:7f:cd:b3:7b:35:2a:1e:55:5a:67:7d:fb:9a:25:7f:
         53:e8:a7:f4:75:b3:58:7d:ce:53:e9:f0:15:e0:5b:c8:4e:5c:
         95:52:9f:dd:63:7b:09:2b:12:b1:3d:c7:46:44:9b:a3:7c:1d:
         3a:32:ce:3c:d5:c8:d8:28:51:da:4f:7e:5b:62:13:d1:e0:c6:
         77:72:40:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOpYF5Cv4nFllTEgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YzU5OThhYjUtYTM2ZC00YTc4LWE5YmQtYmM2OGE2ZWZiNzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUIrTPKDgN+vE8DJASPcufd96tHAdF5CcyO9
jS1hoUlig/oeIJsP2bkeW0yFrL91uSRy/lOrhi5ueb4JMJVJpnnaRc6TyGSXRQ7D
x+hVEFHL06cXDN++CoIxmgM1NPo2RuQW7du3YzlMqQJnxfxgT/pt5jP30ctaIWW5
kzs5vmBq/DGzWJunnD5fsmeaBlXcYxJRz76nIKag1wa01XbYZagpuajW4jJym6Ck
aa4aDqHJLTnyaPPNGmxjT9s/qjP3/h3rzHJgolaMh2yVZUOrYbYjKMq/xRG4SlFT
7WBZfZVKRVaXXbkF8tT2g6gIkNECK1RYVl47R7IUlX5oQNzE4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmidhgdkH4CBzoxYRBHEuF5K6CuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODEwYTFiYWMtNWNiNy0z
ZTk3LTk2YTMtYzhmOTJkMmQzOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6umMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2L1v+v9MzmT6nUHWFAtpBArJokLrs1DgQWlaj4CbIIIZr2bQaVx3FV
NxYhPT7sorK23s5Dc1rq1YmifjzYfcALoltCc5mGJUCTw26tKRKAjfnqc8mbLL7R
TenpXZz0Xjg3bvLyOG5kEtD6VkeFX2PwsvAFRscBuaPF60YG1V0JRuEoeZ5Pe/rM
io0laMneIlzKCjZTiUEPqsaMbk3YVF0hMf4SXauYHKuwkkiYQOip/k92o9F3sH/N
s3s1Kh5VWmd9+5olf1Pop/R1s1h9zlPp8BXgW8hOXJVSn91jewkrErE9x0ZEm6N8
HToyzjzVyNgoUdpPfltiE9HgxndyQJg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:44:06 2025 by rpki-client