Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b7a7450d-0a22-30aa-8a66-05f18258110b.roa
File:                     b7a7450d-0a22-30aa-8a66-05f18258110b.roa (raw, json)
Hash identifier:          ouCNJzefYRMaNgO67lowso5Laxf+/1mRhmXoo6B8/As=
Subject key identifier:   CB:67:50:64:7B:3E:87:09:4A:76:57:3F:E8:93:4F:A3:EE:DC:1F:10
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285848573AD82DD03C13C479D2C500
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b7a7450d-0a22-30aa-8a66-05f18258110b.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     142132
IP address blocks:        206.54.24.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:d8:2d:d0:3c:13:c4:79:d2:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=14348050-1e36-4cd8-99fe-71ce46cdbb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:f7:17:bc:5e:66:6e:ac:6f:09:af:23:9d:
                    41:d3:22:13:41:94:9d:9c:3b:7d:38:1d:c8:20:01:
                    1e:f7:f1:b5:47:25:2c:64:21:9b:8e:fc:51:c6:b5:
                    b9:77:6f:6b:57:36:fd:39:2b:1b:1c:bd:b4:f0:34:
                    1a:ee:84:95:ff:ad:38:77:49:b6:e2:b3:7e:2a:03:
                    11:7c:f8:95:e1:ea:9a:0c:84:e5:49:35:a3:15:61:
                    ae:6c:36:21:75:a5:65:d9:ec:4b:aa:b0:25:16:62:
                    e4:c6:8c:c4:04:8f:c5:56:a6:41:6e:32:77:42:0b:
                    2b:ee:4f:bf:60:4e:92:ef:9c:4d:6d:8d:a7:f4:61:
                    e1:27:ff:ac:50:af:3a:cb:68:89:ab:1d:82:bd:98:
                    87:fc:d0:8a:ca:1b:c9:48:bd:19:b3:d9:b0:57:da:
                    fc:2a:e2:9b:ca:88:49:98:34:15:61:e2:1a:d4:bc:
                    89:c2:f8:66:6a:44:18:df:90:47:d9:a9:39:55:56:
                    4d:cb:37:8f:ba:3b:f3:40:a3:e8:c1:6b:40:9b:17:
                    1a:cd:58:a9:ec:cf:47:cb:6b:c2:f0:43:6b:4b:65:
                    5c:92:fe:3e:49:10:aa:e1:81:8c:04:bd:aa:30:a5:
                    38:02:c4:81:ab:49:ca:db:a3:09:4b:73:31:87:6e:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:67:50:64:7B:3E:87:09:4A:76:57:3F:E8:93:4F:A3:EE:DC:1F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b7a7450d-0a22-30aa-8a66-05f18258110b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:2c:09:8c:43:84:43:7a:84:64:91:9a:a3:88:76:c1:a5:97:
         00:c2:0c:48:97:37:11:06:88:a1:59:86:0d:cc:c4:76:0b:e0:
         c5:14:03:3f:0f:46:a6:1e:25:71:89:3e:e4:67:33:8b:70:fb:
         21:38:5c:39:13:ca:2d:f6:ea:31:f9:c3:31:21:a4:c5:55:c4:
         48:a1:2d:69:11:86:d4:db:73:95:4f:fd:0e:b4:7d:76:16:59:
         6f:46:48:d7:fc:99:75:7b:67:2e:35:04:30:0b:3b:ea:d8:20:
         9f:f9:93:a7:0f:6a:9b:0f:dd:4b:c8:1b:25:7a:6f:4a:0b:4b:
         48:d9:bb:d3:14:fe:0b:7c:52:d1:3f:82:67:fc:19:78:1c:d0:
         4a:ad:4c:76:b2:5a:73:4c:8d:c3:16:a8:5b:9b:d0:4a:3d:21:
         4b:41:9b:5c:8c:dd:0b:7a:dc:d6:81:c2:32:19:31:4c:b7:b4:
         85:14:42:3b:fa:fb:4c:50:a9:25:d1:69:ad:f1:b6:f7:fd:c2:
         32:40:99:58:9d:ea:d9:8a:3e:16:c1:d4:e4:59:b4:b2:c8:95:
         f0:b7:43:f5:ff:9c:78:ad:5e:37:eb:fc:d4:20:08:e1:e9:0f:
         a0:b3:25:d8:a9:17:cb:3f:8b:25:6e:07:22:2b:04:26:03:5b:
         84:cb:8b:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtgt0DwTxHnSxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
MTQzNDgwNTAtMWUzNi00Y2Q4LTk5ZmUtNzFjZTQ2Y2RiYjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9P3F7xeZm6sbwmvI51B0yITQZSdnDt9OB3I
IAEe9/G1RyUsZCGbjvxRxrW5d29rVzb9OSsbHL208DQa7oSV/604d0m24rN+KgMR
fPiV4eqaDITlSTWjFWGubDYhdaVl2exLqrAlFmLkxozEBI/FVqZBbjJ3Qgsr7k+/
YE6S75xNbY2n9GHhJ/+sUK86y2iJqx2CvZiH/NCKyhvJSL0Zs9mwV9r8KuKbyohJ
mDQVYeIa1LyJwvhmakQY35BH2ak5VVZNyzePujvzQKPowWtAmxcazVip7M9Hy2vC
8ENrS2Vckv4+SRCq4YGMBL2qMKU4AsSBq0nK26MJS3Mxh24gmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtnUGR7PocJSnZXP+iTT6Pu3B8QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjdhNzQ1MGQtMGEyMi0z
MGFhLThhNjYtMDVmMTgyNTgxMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzjYYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMEsCYxDhEN6hGSRmqOIdsGllwDCDEiXNxEGiKFZhg3MxHYL4MUUAz8P
RqYeJXGJPuRnM4tw+yE4XDkTyi326jH5wzEhpMVVxEihLWkRhtTbc5VP/Q60fXYW
WW9GSNf8mXV7Zy41BDALO+rYIJ/5k6cPapsP3UvIGyV6b0oLS0jZu9MU/gt8UtE/
gmf8GXgc0EqtTHayWnNMjcMWqFub0Eo9IUtBm1yM3Qt63NaBwjIZMUy3tIUUQjv6
+0xQqSXRaa3xtvf9wjJAmVid6tmKPhbB1ORZtLLIlfC3Q/X/nHitXjfr/NQgCOHp
D6CzJdipF8s/iyVuByIrBCYDW4TLi0Y=
-----END CERTIFICATE-----
Generated at Mon May 12 02:11:21 2025 by rpki-client