Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa
File:                     885503bb-67f7-33bb-a275-0063d04ac58e.roa (raw, json)
Hash identifier:          Pc+rZ+utEk2QtsZYLv9Ci777YXrOwmTQ6XAmIjOt2Gs=
Subject key identifier:   CD:DB:93:F4:ED:5B:6A:3A:D3:2F:B4:60:4A:BB:3C:97:B6:44:C2:BE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858483E1AB11970F5C05C107CEB00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     2914
IP address blocks:        129.250.53.0/27 maxlen: 27
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b1:19:70:f5:c0:5c:10:7c:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=6b530fe7-c003-445d-b9e9-afef58a5c0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:fb:4c:c3:f0:8f:eb:f1:ad:e2:29:63:36:
                    da:29:f4:8c:86:4b:41:f3:06:ac:db:3c:7e:99:79:
                    81:6a:d7:1c:84:26:36:f5:84:24:8c:ab:dc:96:6d:
                    ac:b9:06:65:56:df:c4:4b:1d:cc:53:e3:eb:f3:5e:
                    f2:cb:aa:69:bb:ec:61:45:eb:0b:05:63:cd:28:ae:
                    5e:24:1f:a9:08:23:b1:14:f2:be:7d:ba:c0:59:53:
                    05:3a:10:db:bd:d1:77:7c:bf:84:c3:7b:fa:ed:c7:
                    21:2f:36:82:49:85:6c:f8:85:c0:c1:0f:2f:77:92:
                    b2:4e:53:1e:ab:45:74:ee:39:35:af:f4:67:87:40:
                    fa:7c:59:96:33:d6:c5:6a:0b:a0:b5:69:bd:d7:a8:
                    bd:6b:f2:d4:42:07:d4:a0:84:01:3a:7c:48:4c:c0:
                    53:a5:44:97:ce:15:fd:2e:8a:d0:1e:b3:1d:ae:09:
                    21:c8:8b:af:43:cb:2b:30:be:c9:28:9c:9e:f9:b9:
                    18:97:d7:23:3a:b3:09:43:28:47:4d:71:ef:7b:37:
                    f9:68:bf:c3:01:38:2a:3b:37:a9:d9:a5:09:26:8f:
                    e7:d9:a6:30:89:bf:a1:b9:1a:7b:e8:fc:d5:9f:ce:
                    88:46:c6:83:0f:f6:53:cf:ce:ff:0d:3a:c5:9b:a2:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DB:93:F4:ED:5B:6A:3A:D3:2F:B4:60:4A:BB:3C:97:B6:44:C2:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.53.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:94:34:f9:4b:82:26:92:b7:7d:2c:8d:a6:fe:79:9a:1b:60:
         f6:f9:a7:53:1c:bc:60:33:48:7d:9b:cf:89:26:b6:d4:07:0c:
         6f:3c:6c:a9:86:33:9d:5f:8f:3d:b4:3b:b4:82:fd:16:cb:0e:
         63:97:5a:7c:fe:17:bc:83:54:a1:1a:42:b7:7f:11:e0:44:92:
         20:26:c0:72:e3:f0:9f:d4:f4:cd:e0:63:b1:f7:9c:1f:f6:7d:
         bd:7d:7d:e4:40:2a:35:fb:ae:0d:91:cf:1b:cd:8d:fd:75:8f:
         ca:79:44:41:d3:a6:84:1a:6f:50:e4:95:28:80:55:29:dd:43:
         62:8f:f1:0c:de:0f:73:29:ea:bd:1b:c0:de:fa:e6:83:57:b9:
         0c:ba:63:c0:f4:b7:6a:c7:7b:ed:36:89:7c:ff:d9:4e:e2:ee:
         8f:d1:f4:48:91:cd:00:cb:dc:a0:1e:0f:e1:dc:9d:e9:36:7a:
         d1:dc:7c:19:2e:61:e4:13:ea:57:90:51:4b:17:14:1f:1d:fb:
         d1:0d:b2:1f:73:2e:2f:f8:a8:dc:5e:1d:85:12:67:25:c5:8a:
         97:23:e6:e1:dd:4a:06:54:23:44:2b:eb:d7:21:b9:6d:57:dc:
         04:98:2b:c3:34:3b:dc:f7:c5:13:ed:f0:e0:50:73:5e:73:e3:
         db:07:b1:c9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEg+GrEZcPXAXBB86wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
NmI1MzBmZTctYzAwMy00NDVkLWI5ZTktYWZlZjU4YTVjMGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJr7TMPwj+vxreIpYzbaKfSMhktB8was2zx+
mXmBatcchCY29YQkjKvclm2suQZlVt/ESx3MU+Pr817yy6ppu+xhResLBWPNKK5e
JB+pCCOxFPK+fbrAWVMFOhDbvdF3fL+Ew3v67cchLzaCSYVs+IXAwQ8vd5KyTlMe
q0V07jk1r/Rnh0D6fFmWM9bFagugtWm916i9a/LUQgfUoIQBOnxITMBTpUSXzhX9
LorQHrMdrgkhyIuvQ8srML7JKJye+bkYl9cjOrMJQyhHTXHvezf5aL/DATgqOzep
2aUJJo/n2aYwib+huRp76PzVn86IRsaDD/ZTz87/DTrFm6JoCQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM3bk/TtW2o60y+0YEq7PJe2RMK+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODg1NTAzYmItNjdmNy0z
M2JiLWEyNzUtMDA2M2QwNGFjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfo1ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDGlDT5S4Imkrd9LI2m/nmaG2D2+adTHLxgM0h9m8+JJrbUBwxvPGyp
hjOdX489tDu0gv0Wyw5jl1p8/he8g1ShGkK3fxHgRJIgJsBy4/Cf1PTN4GOx95wf
9n29fX3kQCo1+64Nkc8bzY39dY/KeURB06aEGm9Q5JUogFUp3UNij/EM3g9zKeq9
G8De+uaDV7kMumPA9Ldqx3vtNol8/9lO4u6P0fRIkc0Ay9ygHg/h3J3pNnrR3HwZ
LmHkE+pXkFFLFxQfHfvRDbIfcy4v+KjcXh2FEmclxYqXI+bh3UoGVCNEK+vXIblt
V9wEmCvDNDvc98UT7fDgUHNec+PbB7HJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:59 2025 by rpki-client