Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c527db98-0405-31a9-92ee-450056e1eb2c.roa
File:                     c527db98-0405-31a9-92ee-450056e1eb2c.roa (raw, json)
Hash identifier:          krgYJi7uUsDhu8zsrCCdWHO9tRl8h9qMMmkulrnzxqw=
Subject key identifier:   55:4E:E2:78:06:F3:D7:1F:62:E3:67:F8:31:BB:5A:B9:D4:9F:B0:40
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827A33F58BE48A5DFA204A8A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c527db98-0405-31a9-92ee-450056e1eb2c.roa
Signing time:             Tue 10 Dec 2024 00:52:20 +0000
ROA not before:           Tue 10 Dec 2024 00:52:20 +0000
ROA not after:            Sun 09 Mar 2025 23:52:20 +0000
asID:                     13335
IP address blocks:        172.69.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:a3:3f:58:be:48:a5:df:a2:04:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 00:52:20 2024 GMT
            Not After : Mar  9 23:52:20 2025 GMT
        Subject: CN=368ed3f2-2ef4-44e5-b2c0-afd476b8bb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:5b:53:ac:0f:a5:7d:02:9a:69:9f:67:fd:
                    ce:49:6a:8e:26:91:1f:1b:96:ca:39:9c:a6:34:2c:
                    47:4f:88:a8:b7:3c:ea:33:eb:f1:24:dd:d1:8c:dd:
                    81:d7:30:26:b9:97:7b:a3:fe:0e:fd:a3:74:a6:90:
                    76:f1:7d:4e:4c:0f:92:b1:74:12:9c:1b:4e:10:a9:
                    cd:d2:72:7b:ee:0a:d5:9e:91:a4:a3:9b:60:58:83:
                    52:cc:ce:2a:05:27:63:95:20:4e:28:09:a7:c3:24:
                    41:6b:77:89:3f:1d:1c:4f:86:dc:b3:5b:0e:62:73:
                    62:2e:c8:9c:71:b6:f5:0e:f5:50:89:be:3e:d0:08:
                    ef:15:63:b3:45:06:5d:47:da:f2:cb:3b:ac:07:0f:
                    2b:b7:a1:51:41:6c:0f:fa:6a:99:34:9b:53:21:e9:
                    42:fb:c1:37:5f:67:b3:f0:ea:f7:73:43:2b:12:f1:
                    da:70:8e:c4:df:f5:8a:b7:42:dd:85:38:d1:3a:8d:
                    90:2a:ce:51:71:21:53:3e:18:54:e3:bb:9b:c5:11:
                    49:ba:1f:1f:b9:d6:b7:04:02:02:ed:3d:85:27:7b:
                    06:af:1e:d3:9e:8a:a7:3a:5c:a1:24:4e:5f:60:90:
                    cf:12:87:ad:10:8f:86:4b:66:71:64:44:b2:6b:84:
                    12:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4E:E2:78:06:F3:D7:1F:62:E3:67:F8:31:BB:5A:B9:D4:9F:B0:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c527db98-0405-31a9-92ee-450056e1eb2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fc:01:5d:29:32:06:8c:80:e3:0d:ca:8c:3c:84:4a:c9:53:
         a8:73:02:69:a9:f7:c7:da:a9:2f:cb:2d:97:41:2f:e9:8b:5d:
         13:4f:25:db:c8:74:f8:df:19:0f:70:ab:23:bd:4a:91:08:90:
         88:18:b1:4d:66:ad:9b:3a:26:39:0d:ae:44:dc:12:cf:35:40:
         70:ce:58:ee:8e:16:48:df:c8:d4:87:3f:97:c1:a1:f3:6e:80:
         97:9d:84:d8:68:54:bb:ed:2c:56:d0:6e:5f:99:73:cd:15:6e:
         c5:51:46:cf:bf:5a:c4:a1:a5:32:9b:8e:ee:c2:84:cd:20:c2:
         48:12:25:49:91:cf:8a:81:41:37:e0:a8:a3:2b:2e:45:7f:c0:
         06:b6:76:ee:e1:aa:42:d7:66:2f:4d:62:f7:e1:cf:3a:ff:ab:
         96:17:bf:fd:9d:2a:28:15:e6:fa:ca:e6:68:b2:4c:86:c9:d3:
         28:53:6b:76:36:03:2c:2b:11:b1:d2:97:23:01:6b:8e:31:eb:
         ef:b6:97:db:c5:2c:3d:98:42:e7:ed:d7:6a:b7:9c:91:64:eb:
         33:12:48:4a:f3:4e:90:56:d2:f1:80:d8:8c:1f:9e:da:23:72:
         cc:f2:33:46:9a:29:2d:8c:f1:87:93:4d:f7:3b:7b:13:0d:cd:
         f5:ed:9b:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnoz9Yvkil36IEqKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAwNTIyMFoXDTI1MDMwOTIzNTIyMFowLzEtMCsGA1UEAxMk
MzY4ZWQzZjItMmVmNC00NGU1LWIyYzAtYWZkNDc2YjhiYjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JRbU6wPpX0CmmmfZ/3OSWqOJpEfG5bKOZym
NCxHT4iotzzqM+vxJN3RjN2B1zAmuZd7o/4O/aN0ppB28X1OTA+SsXQSnBtOEKnN
0nJ77grVnpGko5tgWINSzM4qBSdjlSBOKAmnwyRBa3eJPx0cT4bcs1sOYnNiLsic
cbb1DvVQib4+0AjvFWOzRQZdR9ryyzusBw8rt6FRQWwP+mqZNJtTIelC+8E3X2ez
8Or3c0MrEvHacI7E3/WKt0LdhTjROo2QKs5RcSFTPhhU47ubxRFJuh8fuda3BAIC
7T2FJ3sGrx7TnoqnOlyhJE5fYJDPEoetEI+GS2ZxZESya4QSJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFVO4ngG89cfYuNn+DG7WrnUn7BAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzUyN2RiOTgtMDQwNS0z
MWE5LTkyZWUtNDUwMDU2ZTFlYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIH8AV0pMgaMgOMNyow8hErJU6hzAmmp98faqS/LLZdBL+mLXRNPJdvI
dPjfGQ9wqyO9SpEIkIgYsU1mrZs6JjkNrkTcEs81QHDOWO6OFkjfyNSHP5fBofNu
gJedhNhoVLvtLFbQbl+Zc80VbsVRRs+/WsShpTKbju7ChM0gwkgSJUmRz4qBQTfg
qKMrLkV/wAa2du7hqkLXZi9NYvfhzzr/q5YXv/2dKigV5vrK5miyTIbJ0yhTa3Y2
AywrEbHSlyMBa44x6++2l9vFLD2YQuft12q3nJFk6zMSSErzTpBW0vGA2Iwfntoj
cszyM0aaKS2M8YeTTfc7exMNzfXtm+Y=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:52 2025 by rpki-client