Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa
File:                     7dae22f8-939a-3a54-b81c-8890233bc71a.roa (raw, json)
Hash identifier:          EAn50RBOR7+Y/HrahFcilRIe179LqWNaemaZeXsEWQE=
Subject key identifier:   15:65:86:FD:3D:B9:D5:49:52:7E:E6:9E:DC:FE:FE:28:A7:BC:CE:31
Certificate issuer:       /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7
Certificate serial:       010D0C9F432858485F9AE229F60885A88CC85E40
Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     30691
IP address blocks:        65.111.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:e2:29:f6:08:85:a8:8c:c8:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=6865158f-6482-4a84-ab86-a16ae1bb21bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:8a:55:58:a7:5f:ae:be:cc:08:5c:bf:4f:
                    30:41:0b:c2:dd:e9:be:1c:90:20:47:b5:31:d4:9f:
                    14:1b:9e:99:e3:55:37:1d:b0:29:b4:3e:09:43:af:
                    a3:3b:18:38:4d:f5:11:5b:8b:3c:3c:c1:bf:5b:43:
                    31:81:15:05:7c:a3:3d:aa:25:a3:7d:20:2e:a0:2a:
                    ef:68:5c:37:3a:64:7a:9a:0c:97:eb:a7:79:6a:5d:
                    34:56:38:95:f7:28:e1:64:84:03:a3:c6:9b:69:51:
                    03:1c:d9:9f:ca:0c:e4:51:7f:ba:6f:62:50:df:4d:
                    c0:ff:0a:59:32:76:c1:05:b4:ae:35:ef:6c:06:a9:
                    ab:44:a6:37:2e:64:90:6c:75:18:50:7f:7a:12:cb:
                    27:58:fc:f2:e1:00:0d:c1:6e:bc:6c:9b:15:0c:f3:
                    4d:1f:7c:39:7b:4e:88:87:16:e0:03:3a:af:9a:3d:
                    b4:29:20:c9:22:8d:95:2f:46:91:2b:46:bb:f6:a2:
                    97:12:4d:f0:ae:51:04:17:90:3b:60:49:a5:b8:fe:
                    5f:39:23:2c:6a:50:3b:77:ee:45:51:c5:51:bf:43:
                    fa:96:44:85:c2:fa:91:b5:24:1a:6d:69:20:5e:75:
                    02:e3:fa:f8:0a:72:ea:19:d2:37:a5:a9:44:32:b8:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:65:86:FD:3D:B9:D5:49:52:7E:E6:9E:DC:FE:FE:28:A7:BC:CE:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl

            X509v3 Authority Key Identifier:
                keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.111.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:a1:d4:f8:c9:e4:fe:fd:46:c4:b4:3e:5f:e5:98:a1:ab:
         4a:9d:d9:b7:03:99:ca:5e:4c:99:55:6f:c3:1d:8d:00:9c:01:
         16:1a:d4:e0:75:39:76:25:a1:2e:38:b2:0f:ca:dd:b2:e8:52:
         cb:9a:d9:ac:7c:bc:61:d9:a5:d8:2a:f7:f7:3a:7e:85:a4:d4:
         d4:a4:e6:50:ff:06:ef:4f:34:2b:bc:28:f4:a2:0e:b0:47:ce:
         69:b1:09:6c:f0:7c:fc:2b:a4:0d:a5:3a:53:1f:04:7b:9c:49:
         ea:e0:86:a7:3f:2e:20:50:59:92:1a:fb:be:51:9b:92:db:95:
         a3:9e:e2:84:c6:ed:97:3a:22:46:9d:ee:b3:b3:f3:7e:f0:9d:
         c0:d2:2a:ec:19:c4:e3:21:98:f7:82:b1:18:61:25:17:fb:51:
         68:83:51:1d:c2:e4:0c:31:c9:5e:33:c9:0c:7b:8d:6a:cc:4c:
         32:eb:44:ab:27:2e:ad:e4:a3:45:74:2d:67:0d:47:3a:1d:01:
         27:7d:b4:00:7c:7d:48:56:0a:32:d4:cc:25:08:41:75:de:71:
         51:7c:18:e7:0a:2e:ce:4b:58:51:ac:bb:e1:fb:95:e5:28:71:
         9d:45:f8:77:35:d4:bd:5f:09:bc:fd:54:60:e3:ae:f4:a5:0a:
         c0:95:70:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuIp9giFqIzIXkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk
NWQ3MB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
Njg2NTE1OGYtNjQ4Mi00YTg0LWFiODYtYTE2YWUxYmIyMWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieWKVVinX66+zAhcv08wQQvC3em+HJAgR7Ux
1J8UG56Z41U3HbAptD4JQ6+jOxg4TfURW4s8PMG/W0MxgRUFfKM9qiWjfSAuoCrv
aFw3OmR6mgyX66d5al00VjiV9yjhZIQDo8abaVEDHNmfygzkUX+6b2JQ303A/wpZ
MnbBBbSuNe9sBqmrRKY3LmSQbHUYUH96EssnWPzy4QANwW68bJsVDPNNH3w5e06I
hxbgAzqvmj20KSDJIo2VL0aRK0a79qKXEk3wrlEEF5A7YEmluP5fOSMsalA7d+5F
UcVRv0P6lkSFwvqRtSQabWkgXnUC4/r4CnLqGdI3palEMrgXEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVlhv09udVJUn7mntz+/iinvM4xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk
Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvN2RhZTIyZjgtOTM5YS0z
YTU0LWI4MWMtODg5MDIzM2JjNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1
YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1
ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0
Y2JhNWQ1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQW/wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYLodT4yeT+/UbEtD5f5Zihq0qd2bcDmcpeTJlVb8MdjQCcARYa1OB1
OXYloS44sg/K3bLoUsua2ax8vGHZpdgq9/c6foWk1NSk5lD/Bu9PNCu8KPSiDrBH
zmmxCWzwfPwrpA2lOlMfBHucSerghqc/LiBQWZIa+75Rm5LblaOe4oTG7Zc6Ikad
7rOz837wncDSKuwZxOMhmPeCsRhhJRf7UWiDUR3C5AwxyV4zyQx7jWrMTDLrRKsn
Lq3ko0V0LWcNRzodASd9tAB8fUhWCjLUzCUIQXXecVF8GOcKLs5LWFGsu+H7leUo
cZ1F+Hc11L1fCbz9VGDjrvSlCsCVcHs=
-----END CERTIFICATE-----