Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa
File:                     0327aa02-52d2-3d16-9336-4e4047d5dc35.roa (raw, json)
Hash identifier:          GjkrUBkpaqoe4NqY615L9e/V1zBFGDAeDyUQXeM9mi4=
Subject key identifier:   07:A1:C6:B4:46:70:6A:8C:A6:A5:C9:86:D1:C4:13:29:F6:88:B4:11
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584816032F13B5A06DE378C89200
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa
Signing time:             Tue 03 Dec 2024 17:21:05 +0000
ROA not before:           Tue 03 Dec 2024 17:21:05 +0000
ROA not after:            Mon 03 Mar 2025 17:21:05 +0000
asID:                     262287
IP address blocks:        64.64.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:16:03:2f:13:b5:a0:6d:e3:78:c8:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Dec  3 17:21:05 2024 GMT
            Not After : Mar  3 17:21:05 2025 GMT
        Subject: CN=00b843f0-d805-4a76-9021-a948b13d172a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:3e:d3:43:b7:70:a0:b4:b2:c3:a2:36:2a:
                    c5:34:d2:08:e6:ed:1c:60:7a:d4:cb:1e:d3:32:93:
                    9f:69:76:48:61:bb:db:84:c9:67:32:16:90:d9:3f:
                    97:89:ec:42:de:5d:25:b3:9b:7a:cb:01:a7:96:91:
                    1b:d9:89:e5:82:d5:26:aa:bb:4e:35:08:43:0e:9f:
                    0f:06:e9:0a:75:51:77:4e:58:64:66:48:03:5f:4e:
                    c6:33:b1:a5:75:a0:b3:f0:ae:53:3e:a1:be:9e:97:
                    c4:f7:d3:06:00:41:92:f0:e9:17:9e:37:5c:92:d7:
                    e0:0d:1a:c4:01:5d:bd:75:e2:e1:b3:f2:a6:cb:38:
                    89:1c:6d:1c:33:37:5f:fb:2c:12:38:7b:e5:86:24:
                    e0:3a:9e:ef:b0:63:36:9f:27:0f:df:b7:b7:e9:2a:
                    c0:79:44:5f:96:e6:0c:2d:9b:60:37:74:1c:88:41:
                    ef:a1:24:45:76:57:b5:54:90:6c:7b:7f:0a:63:56:
                    88:22:7d:6e:06:96:50:20:7c:1d:4e:d8:c1:8e:ab:
                    3b:dc:fb:a3:80:7f:9d:e0:1c:33:df:c0:c8:13:9e:
                    63:2b:49:fb:98:29:ad:63:14:5f:5d:0d:9b:62:19:
                    ae:63:56:3c:d0:be:25:1f:6b:ef:79:44:35:28:b7:
                    77:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A1:C6:B4:46:70:6A:8C:A6:A5:C9:86:D1:C4:13:29:F6:88:B4:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:53:cb:b1:e4:b4:72:1f:b2:74:88:bd:9f:ae:29:7a:76:f9:
         ef:28:f7:da:f0:3b:1a:71:01:92:aa:05:44:bd:15:7e:30:cf:
         38:73:26:50:e2:ce:2b:25:c4:c0:1d:4b:7c:43:6a:17:21:4e:
         cd:7e:8a:db:fe:f1:cd:39:9a:07:9e:0b:e9:d0:dd:d2:04:37:
         43:60:6e:a4:93:55:f2:22:1a:80:3e:95:3b:39:4a:72:62:34:
         f4:f5:19:fb:52:44:2f:45:7c:f9:7e:49:3b:76:fc:f9:8c:b9:
         b3:80:b2:af:70:75:b0:36:d2:76:8f:e2:4f:96:b9:17:f6:f4:
         6e:c3:ed:3e:75:65:c8:38:d5:ec:6d:7d:a5:44:c5:78:25:f6:
         dc:a5:87:b3:57:a9:9d:d2:ce:ae:1e:6b:b0:f6:c2:e0:52:c5:
         ec:79:49:83:45:24:84:ae:bb:d5:1c:29:fa:9c:8a:53:a3:e0:
         9c:e0:40:04:b4:a2:89:bc:0b:0a:00:33:9e:70:9d:fd:cf:c3:
         83:cd:a6:20:7c:8a:1e:d0:81:23:34:1b:8e:ba:7f:3e:85:59:
         33:5e:19:9b:98:cf:06:a3:fa:e3:ff:1c:53:c6:2c:d5:1c:86:
         a9:08:8d:d7:1d:e7:fe:f0:dc:70:38:a3:e7:64:02:a3:bc:9d:
         22:ee:2c:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgWAy8TtaBt43jIkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI0MTIwMzE3MjEwNVoXDTI1MDMwMzE3MjEwNVowLzEtMCsGA1UEAxMk
MDBiODQzZjAtZDgwNS00YTc2LTkwMjEtYTk0OGIxM2QxNzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4E+00O3cKC0ssOiNirFNNII5u0cYHrUyx7T
MpOfaXZIYbvbhMlnMhaQ2T+XiexC3l0ls5t6ywGnlpEb2YnlgtUmqrtONQhDDp8P
BukKdVF3TlhkZkgDX07GM7GldaCz8K5TPqG+npfE99MGAEGS8OkXnjdcktfgDRrE
AV29deLhs/KmyziJHG0cMzdf+ywSOHvlhiTgOp7vsGM2nycP37e36SrAeURfluYM
LZtgN3QciEHvoSRFdle1VJBse38KY1aIIn1uBpZQIHwdTtjBjqs73PujgH+d4Bwz
38DIE55jK0n7mCmtYxRfXQ2bYhmuY1Y80L4lH2vveUQ1KLd3xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAehxrRGcGqMpqXJhtHEEyn2iLQRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMDMyN2FhMDItNTJkMi0z
ZDE2LTkzMzYtNGU0MDQ3ZDVkYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEB0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJTy7HktHIfsnSIvZ+uKXp2+e8o99rwOxpxAZKqBUS9FX4wzzhzJlDi
zislxMAdS3xDahchTs1+itv+8c05mgeeC+nQ3dIEN0NgbqSTVfIiGoA+lTs5SnJi
NPT1GftSRC9FfPl+STt2/PmMubOAsq9wdbA20naP4k+WuRf29G7D7T51Zcg41ext
faVExXgl9tylh7NXqZ3Szq4ea7D2wuBSxex5SYNFJISuu9UcKfqcilOj4JzgQAS0
oom8CwoAM55wnf3Pw4PNpiB8ih7QgSM0G466fz6FWTNeGZuYzwaj+uP/HFPGLNUc
hqkIjdcd5/7w3HA4o+dkAqO8nSLuLK0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:48 2025 by rpki-client