Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/fe212a02-0342-3663-9ad4-9aa7126160f9.roa
File:                     fe212a02-0342-3663-9ad4-9aa7126160f9.roa (raw, json)
Hash identifier:          vtTSOxCuzF9rMbXE+tRtGPTbyNaNM4ZxEx5YR9dKUR4=
Subject key identifier:   BF:C2:1E:4A:7D:72:7C:03:E8:B4:07:93:44:50:F4:A0:E0:7E:00:4E
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F432858480215025DDC25E6C7B542C240
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/fe212a02-0342-3663-9ad4-9aa7126160f9.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     6505
IP address blocks:        206.49.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:02:5d:dc:25:e6:c7:b5:42:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=13809275-959b-42bb-b3ce-237ad2023f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:19:3c:23:ab:97:91:60:b4:7c:64:64:74:
                    32:ba:9f:72:2b:c9:1c:7d:08:8d:93:85:fe:fd:7a:
                    8d:e8:30:93:18:e3:be:16:e7:dd:c0:d3:18:d4:8d:
                    2d:81:a8:b5:55:a7:29:9f:9e:01:79:5e:a1:04:f2:
                    c5:d3:80:2d:fa:94:ee:ad:f7:3e:6e:f0:76:17:af:
                    7a:46:cb:4b:3e:f8:1b:39:13:be:8d:83:27:c7:ec:
                    15:7f:86:f9:87:7b:3a:4b:ce:c5:99:60:e0:04:cb:
                    0c:6d:26:c5:56:1a:d8:e0:0a:8e:06:6b:28:33:b7:
                    68:20:91:3e:a0:55:11:1a:e6:88:0a:7e:5e:79:4d:
                    ca:ff:d8:22:14:a7:0d:a6:92:32:f3:fc:fc:04:19:
                    49:cf:d0:98:67:37:e3:37:c0:72:c6:bc:ae:ca:b7:
                    a9:e4:bd:4f:18:75:85:19:7a:d2:43:01:03:b9:12:
                    9f:2e:07:9d:e4:36:58:12:3e:6c:39:f6:02:74:5e:
                    4f:26:5a:6d:58:ad:f6:3e:51:90:6c:95:17:ef:16:
                    76:59:4a:76:95:ed:b3:d0:05:7b:ea:c0:f7:29:97:
                    12:60:5e:9d:5c:0f:5b:76:3c:ca:0b:32:92:b9:42:
                    47:90:49:3e:67:c0:7b:60:b5:5e:f2:f5:fb:27:d9:
                    f4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C2:1E:4A:7D:72:7C:03:E8:B4:07:93:44:50:F4:A0:E0:7E:00:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/fe212a02-0342-3663-9ad4-9aa7126160f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:13:61:e1:2b:0a:8e:09:16:c0:53:7b:1f:15:dd:85:a6:
         85:28:8c:ed:d8:75:ee:d4:5a:ef:6d:5d:11:5d:da:03:e1:22:
         bc:ec:2b:60:28:0f:35:e2:b0:77:cd:40:69:21:de:ab:3f:fa:
         24:e7:f7:20:82:4e:75:29:77:b7:be:74:8c:41:f5:c0:1f:6a:
         2a:41:09:c2:34:52:de:60:3c:54:6f:7f:38:2b:3b:13:1b:85:
         75:f0:0e:43:48:8a:1b:71:b4:05:6c:10:2e:da:41:fb:49:de:
         3d:70:37:56:00:e4:06:d4:77:a7:a5:9f:e5:32:36:b8:5f:4c:
         dd:ba:ad:8c:d6:a2:5b:de:7f:09:a2:cd:90:08:91:a5:60:36:
         2b:af:a1:1f:ee:85:35:db:93:d0:06:5c:94:b3:0f:43:4e:f1:
         bb:7b:0a:1d:e3:dc:5d:36:f7:4d:43:cc:18:1f:62:4c:77:30:
         07:4d:dc:de:ff:4a:06:2d:c4:df:c9:6c:55:89:f7:d1:2c:06:
         b9:fe:bc:80:27:87:68:1d:06:55:47:16:6c:64:2a:7d:0a:c6:
         9c:56:80:35:83:66:7c:8f:f4:ee:92:ff:46:7b:70:4c:5d:3e:
         75:ce:c7:a7:3d:4a:bc:b8:2f:11:55:fc:b5:04:c1:34:39:86:
         45:f9:2d:41
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgCFQJd3CXmx7VCwkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm
ZTM3MB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
MTM4MDkyNzUtOTU5Yi00MmJiLWIzY2UtMjM3YWQyMDIzZjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie4ZPCOrl5FgtHxkZHQyup9yK8kcfQiNk4X+
/XqN6DCTGOO+FufdwNMY1I0tgai1Vacpn54BeV6hBPLF04At+pTurfc+bvB2F696
RstLPvgbORO+jYMnx+wVf4b5h3s6S87FmWDgBMsMbSbFVhrY4AqOBmsoM7doIJE+
oFURGuaICn5eeU3K/9giFKcNppIy8/z8BBlJz9CYZzfjN8Byxryuyrep5L1PGHWF
GXrSQwEDuRKfLged5DZYEj5sOfYCdF5PJlptWK32PlGQbJUX7xZ2WUp2le2z0AV7
6sD3KZcSYF6dXA9bdjzKCzKSuUJHkEk+Z8B7YLVe8vX7J9n09wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL/CHkp9cnwD6LQHk0RQ9KDgfgBOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw
ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZmUyMTJhMDItMDM0Mi0z
NjYzLTlhZDQtOWFhNzEyNjE2MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2
NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi
ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm
MGZhYmZlMzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzjEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHT4TYeErCo4JFsBTex8V3YWmhSiM7dh17tRa721dEV3aA+EivOwrYCgP
NeKwd81AaSHeqz/6JOf3IIJOdSl3t750jEH1wB9qKkEJwjRS3mA8VG9/OCs7ExuF
dfAOQ0iKG3G0BWwQLtpB+0nePXA3VgDkBtR3p6Wf5TI2uF9M3bqtjNaiW95/CaLN
kAiRpWA2K6+hH+6FNduT0AZclLMPQ07xu3sKHePcXTb3TUPMGB9iTHcwB03c3v9K
Bi3E38lsVYn30SwGuf68gCeHaB0GVUcWbGQqfQrGnFaANYNmfI/07pL/RntwTF0+
dc7Hpz1KvLgvEVX8tQTBNDmGRfktQQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:53 2025 by rpki-client