Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70a1c225-fd7b-391b-abfb-217090082f34.roa
File:                     70a1c225-fd7b-391b-abfb-217090082f34.roa (raw, json)
Hash identifier:          xe1a61OI1YqQpwW51CvxK04EJvZStaglaISaKi1vY8c=
Subject key identifier:   04:EC:27:BD:BD:43:E9:77:A2:62:04:F6:11:3D:05:85:19:4C:1F:F4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482AABD5F7919BA854A988AD80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70a1c225-fd7b-391b-abfb-217090082f34.roa
Signing time:             Wed 11 Dec 2024 02:57:04 +0000
ROA not before:           Wed 11 Dec 2024 02:57:04 +0000
ROA not after:            Tue 11 Mar 2025 01:57:04 +0000
asID:                     13335
IP address blocks:        172.69.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:ab:d5:f7:91:9b:a8:54:a9:88:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:57:04 2024 GMT
            Not After : Mar 11 01:57:04 2025 GMT
        Subject: CN=6fc82fe1-dead-4cab-981e-247284cbe0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:1f:e1:71:7f:d3:06:47:85:d4:ef:c8:16:
                    60:67:43:90:23:71:e8:d2:cd:17:32:84:75:83:65:
                    ee:d7:1a:54:79:c4:9e:d5:6b:63:ae:28:d6:dd:c9:
                    06:3a:88:9d:0d:7b:6e:37:66:a3:34:99:9b:31:0b:
                    b0:5b:39:d4:c2:23:25:be:1f:ea:9c:e0:74:1f:79:
                    d6:d8:57:1a:d7:8c:ae:52:62:f3:56:d1:9d:44:52:
                    0d:fb:cc:53:fc:e4:e4:44:42:07:be:7a:49:b0:60:
                    be:27:1a:c3:44:e6:9c:88:24:b8:77:72:55:d0:5f:
                    79:a1:0e:d6:ba:c6:f1:14:1c:6c:93:7d:54:9f:9a:
                    a5:2a:57:24:02:c5:36:66:45:85:33:e7:a1:bb:36:
                    02:37:d0:68:22:cb:69:6a:ad:fa:ef:f1:15:1d:31:
                    33:ee:db:86:0d:e6:ad:e1:1c:9e:19:f8:b8:e7:ad:
                    e2:ef:a2:fc:ed:17:ae:97:1b:45:55:a4:49:44:15:
                    2c:62:63:d8:e9:0e:72:21:df:36:ec:e6:e1:02:0e:
                    ff:24:47:d6:ee:3e:d8:f6:24:1b:60:00:60:ea:10:
                    89:7c:3f:07:d7:47:b8:f4:1b:ce:08:e1:48:14:ab:
                    9a:32:2b:f5:bd:41:2d:09:99:08:2d:08:41:e3:f7:
                    e6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EC:27:BD:BD:43:E9:77:A2:62:04:F6:11:3D:05:85:19:4C:1F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70a1c225-fd7b-391b-abfb-217090082f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:88:9c:9a:be:58:bb:03:83:57:2f:0d:58:3a:6e:f3:c5:e1:
         13:fb:59:66:c9:7e:83:49:b5:0a:7d:de:ec:36:ac:2f:e4:b1:
         1c:96:fd:9c:da:b7:6b:5f:6a:74:3d:5e:a4:b4:2a:ce:fd:f7:
         3f:e6:11:05:22:4d:4e:34:bf:79:1c:b5:4a:2e:84:9d:2a:6d:
         7a:3b:3a:80:f1:de:d0:41:86:32:51:df:98:e0:6c:75:10:ac:
         35:eb:62:3a:f8:ef:81:61:7e:9f:5e:5d:90:32:33:f0:fb:0d:
         72:39:18:72:3d:a3:1e:06:0d:46:07:70:74:ec:57:0b:38:5a:
         17:2f:f8:6a:83:2f:14:4d:b5:98:b3:a0:01:23:d7:ef:6b:42:
         ec:19:0c:b0:49:b7:1b:c6:55:01:35:07:f7:d6:4f:80:9e:37:
         c7:3b:26:e7:46:91:03:e4:46:d2:ac:38:56:05:88:b6:58:40:
         5f:a1:6a:cc:39:cb:3f:56:70:ea:10:f6:c1:fd:72:c5:7c:d8:
         17:c3:8f:39:54:0b:44:9f:7c:82:e0:1e:45:e2:6f:8e:0b:01:
         7d:bc:c9:59:7f:d7:d9:48:0b:d2:1a:39:d7:ce:d9:af:8a:31:
         c3:da:6f:5c:0e:bc:f8:b9:d8:86:31:7c:75:21:d3:cb:32:f5:
         ec:8f:6f:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqq9X3kZuoVKmIrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMTAyNTcwNFoXDTI1MDMxMTAxNTcwNFowLzEtMCsGA1UEAxMk
NmZjODJmZTEtZGVhZC00Y2FiLTk4MWUtMjQ3Mjg0Y2JlMGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+Qf4XF/0wZHhdTvyBZgZ0OQI3Ho0s0XMoR1
g2Xu1xpUecSe1WtjrijW3ckGOoidDXtuN2ajNJmbMQuwWznUwiMlvh/qnOB0H3nW
2Fca14yuUmLzVtGdRFIN+8xT/OTkREIHvnpJsGC+JxrDROaciCS4d3JV0F95oQ7W
usbxFBxsk31Un5qlKlckAsU2ZkWFM+ehuzYCN9BoIstpaq367/EVHTEz7tuGDeat
4RyeGfi4563i76L87ReulxtFVaRJRBUsYmPY6Q5yId827ObhAg7/JEfW7j7Y9iQb
YABg6hCJfD8H10e49BvOCOFIFKuaMiv1vUEtCZkILQhB4/fmWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATsJ729Q+l3omIE9hE9BYUZTB/0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzBhMWMyMjUtZmQ3Yi0z
OTFiLWFiZmItMjE3MDkwMDgyZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSInJq+WLsDg1cvDVg6bvPF4RP7WWbJfoNJtQp93uw2rC/ksRyW/Zza
t2tfanQ9XqS0Ks799z/mEQUiTU40v3kctUouhJ0qbXo7OoDx3tBBhjJR35jgbHUQ
rDXrYjr474Fhfp9eXZAyM/D7DXI5GHI9ox4GDUYHcHTsVws4Whcv+GqDLxRNtZiz
oAEj1+9rQuwZDLBJtxvGVQE1B/fWT4CeN8c7JudGkQPkRtKsOFYFiLZYQF+hasw5
yz9WcOoQ9sH9csV82BfDjzlUC0SffILgHkXib44LAX28yVl/19lIC9IaOdfO2a+K
McPab1wOvPi52IYxfHUh08sy9eyPb58=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:23 2025 by rpki-client