Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/944a3a22-f349-33a3-93a0-55f75ed31f06.roa
File:                     944a3a22-f349-33a3-93a0-55f75ed31f06.roa (raw, json)
Hash identifier:          mVCZs5xcwH5L+q5/ilEvY1a53P5Ro4eVA8dapOv45Jg=
Subject key identifier:   FF:47:9F:AF:0D:FC:F5:8B:B5:14:87:BA:F2:F1:A1:A2:84:E7:CE:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143DC1807311F6539050AFA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/944a3a22-f349-33a3-93a0-55f75ed31f06.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        66.31.196.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:c1:80:73:11:f6:53:90:50:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=d38b517c-b311-4277-be5e-7d7e2b928860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:03:7d:1c:ba:56:74:85:57:4e:cf:65:2e:f7:
                    df:de:82:4d:af:8e:aa:7c:95:a7:5a:f1:d8:39:92:
                    1a:65:8c:5b:6b:e1:58:1c:b3:bb:2b:3e:a5:9c:49:
                    b3:26:ba:fe:d6:95:59:54:d2:42:9e:b1:f1:6c:45:
                    2d:f7:f3:72:d9:47:0e:16:54:af:9c:a6:42:6d:bb:
                    66:6d:05:39:4a:73:5f:5c:94:56:8b:2b:d3:8e:3b:
                    8c:a4:d9:52:13:d9:9d:37:bd:ff:f8:32:45:4f:0d:
                    e1:7c:a2:4e:fb:ce:14:06:cb:bf:2e:33:5d:13:46:
                    09:82:9a:2e:59:f9:10:14:b4:62:4a:62:6a:66:ac:
                    1f:06:a3:a1:c6:45:e5:25:c2:62:6b:b1:59:4a:7d:
                    06:5a:e3:3c:ed:86:08:4f:33:46:ab:d1:52:56:f9:
                    3e:02:40:97:ea:9a:94:25:12:a1:da:28:24:9c:a3:
                    a8:41:0e:eb:9b:94:27:fb:30:c4:3e:09:fe:56:8f:
                    06:81:6e:fc:8d:80:a4:a0:b7:f8:da:a1:0e:70:b9:
                    54:59:5d:15:45:3e:d7:b0:20:ab:85:3e:5f:79:43:
                    33:2f:fe:c6:8e:98:1a:8d:3f:ec:c3:57:b0:bd:7f:
                    a7:fe:78:06:35:be:40:62:d9:66:05:2d:88:4c:e7:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:9F:AF:0D:FC:F5:8B:B5:14:87:BA:F2:F1:A1:A2:84:E7:CE:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/944a3a22-f349-33a3-93a0-55f75ed31f06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.31.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:aa:10:2b:19:35:2e:f9:aa:66:c5:a0:3a:14:88:bb:c9:b3:
         29:0d:b6:ff:f2:b5:5a:9a:e3:72:dc:c9:d4:02:69:7e:16:2b:
         bd:73:99:d1:49:b6:ed:af:ab:99:b6:f3:e9:73:4a:1d:2c:20:
         6f:98:ff:52:b4:7b:74:1e:b3:6d:03:94:db:fe:c0:f8:f1:a3:
         0f:d1:dc:af:f5:42:65:93:a0:a1:90:c7:93:57:da:a4:16:bc:
         e7:59:ca:dc:f6:f6:f7:f1:e9:f2:d1:8f:2f:66:8c:a9:0d:b1:
         51:cf:dc:0d:6e:1e:73:81:75:fc:6f:2c:2c:e2:be:24:a8:6d:
         27:79:7c:26:29:0e:58:8d:0b:c8:ae:f4:8e:cf:c9:8a:7d:66:
         ea:4f:e7:b9:2d:69:e2:5f:12:ab:db:21:22:43:00:6e:27:db:
         86:4f:cb:02:5f:28:b5:4e:85:d0:c8:9c:79:88:b7:35:b2:e4:
         42:6b:06:e5:86:8f:df:61:d5:b5:48:0c:52:b1:5b:37:c2:6e:
         65:3a:4a:f3:ee:1e:d7:a0:38:b6:ad:c4:ad:20:60:86:ae:48:
         86:21:73:4e:f4:ba:9e:e7:74:86:b2:73:76:9a:b2:1e:a9:80:
         8f:31:f2:10:aa:23:c4:6b:98:80:67:91:7b:e4:da:48:de:42:
         c9:2f:0c:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPcGAcxH2U5BQr6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZDM4YjUxN2MtYjMxMS00Mjc3LWJlNWUtN2Q3ZTJiOTI4ODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggN9HLpWdIVXTs9lLvff3oJNr46qfJWnWvHY
OZIaZYxba+FYHLO7Kz6lnEmzJrr+1pVZVNJCnrHxbEUt9/Ny2UcOFlSvnKZCbbtm
bQU5SnNfXJRWiyvTjjuMpNlSE9mdN73/+DJFTw3hfKJO+84UBsu/LjNdE0YJgpou
WfkQFLRiSmJqZqwfBqOhxkXlJcJia7FZSn0GWuM87YYITzNGq9FSVvk+AkCX6pqU
JRKh2igknKOoQQ7rm5Qn+zDEPgn+Vo8GgW78jYCkoLf42qEOcLlUWV0VRT7XsCCr
hT5feUMzL/7GjpgajT/sw1ewvX+n/ngGNb5AYtlmBS2ITOcQXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9Hn68N/PWLtRSHuvLxoaKE5842MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQ0YTNhMjItZjM0OS0z
M2EzLTkzYTAtNTVmNzVlZDMxZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQh/EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCqECsZNS75qmbFoDoUiLvJsykNtv/ytVqa43LcydQCaX4WK71zmdFJ
tu2vq5m28+lzSh0sIG+Y/1K0e3Qes20DlNv+wPjxow/R3K/1QmWToKGQx5NX2qQW
vOdZytz29vfx6fLRjy9mjKkNsVHP3A1uHnOBdfxvLCziviSobSd5fCYpDliNC8iu
9I7PyYp9ZupP57ktaeJfEqvbISJDAG4n24ZPywJfKLVOhdDInHmItzWy5EJrBuWG
j99h1bVIDFKxWzfCbmU6SvPuHtegOLatxK0gYIauSIYhc070up7ndIayc3aash6p
gI8x8hCqI8RrmIBnkXvk2kjeQskvDNQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:28 2025 by rpki-client