Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/1cd2e978-2a42-3181-b6f1-9ac751724860.roa
File:                     1cd2e978-2a42-3181-b6f1-9ac751724860.roa (raw, json)
Hash identifier:          E6FrjEA6cZ+6sjlc1SUcIRrUTVAZ3eqfSXhIaf+MJow=
Subject key identifier:   5B:22:7B:45:74:92:6D:EA:7D:1D:75:40:4B:66:47:28:E9:DD:6E:4B
Certificate issuer:       /CN=70b45451-ee37-49a6-aa31-f94b6a016db8
Certificate serial:       010D0C9F43285848372017A75DD77EF1F975E580
Authority key identifier: 78:89:A2:DA:91:7D:58:2D:AB:52:DB:70:23:C9:03:F3:B3:37:96:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/1cd2e978-2a42-3181-b6f1-9ac751724860.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     393521
IP address blocks:        206.125.32.0/21 maxlen: 24
                          2607:c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:17:a7:5d:d7:7e:f1:f9:75:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b45451-ee37-49a6-aa31-f94b6a016db8
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=6ceb6692-87f5-44ab-98f5-a6b33ee085a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:93:e4:1a:3a:9b:e5:4e:8c:26:1d:3d:07:
                    67:93:95:a2:42:6c:49:e1:32:42:d5:c8:58:e4:7c:
                    95:a3:62:29:98:9a:99:8a:6e:3a:e1:c2:05:e2:a2:
                    a4:9e:29:e1:f6:a5:aa:de:a9:11:fe:06:8a:23:d9:
                    4f:a0:7f:f5:48:76:a3:17:c3:0e:25:7a:d9:a8:d9:
                    c6:62:3b:91:ac:fa:0b:31:86:5c:13:8d:0c:bb:ba:
                    ed:34:00:3b:7f:08:67:f8:9a:31:c9:54:b7:8c:54:
                    34:ee:54:83:53:5e:bd:2e:c1:73:2e:4d:d8:57:67:
                    4a:4f:ba:79:b8:9c:b6:04:9c:4c:8f:83:98:78:1c:
                    53:f2:ca:8b:81:29:9c:51:f8:19:95:ae:b6:f5:d1:
                    64:bc:d2:a7:a7:79:82:a5:05:bd:4d:a6:f4:cb:15:
                    82:b6:bb:1f:14:6e:69:17:aa:6e:86:00:8d:2e:b6:
                    98:a8:ac:a9:ce:7b:b4:a8:6a:06:ae:ff:94:73:ce:
                    ab:c5:c5:fc:67:9d:92:29:04:fe:46:fc:df:7d:2e:
                    79:83:f7:39:64:de:b5:88:23:ea:d3:09:9b:20:c8:
                    e7:d3:3f:ac:da:6c:a0:9b:92:bc:df:b1:a7:57:fd:
                    33:a1:2a:3d:3c:96:cf:e9:1e:d2:aa:05:9b:bf:e0:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:22:7B:45:74:92:6D:EA:7D:1D:75:40:4B:66:47:28:E9:DD:6E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/1cd2e978-2a42-3181-b6f1-9ac751724860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/70b45451-ee37-49a6-aa31-f94b6a016db8.crl

            X509v3 Authority Key Identifier:
                keyid:78:89:A2:DA:91:7D:58:2D:AB:52:DB:70:23:C9:03:F3:B3:37:96:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.32.0/21
                IPv6:
                  2607:c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:79:1a:7a:7e:ef:40:f9:2b:44:aa:63:80:b8:36:72:a7:7c:
         dd:fd:6b:2e:bd:81:1b:1b:7d:2b:4f:89:f7:62:7e:6b:2a:a3:
         11:fe:fa:76:c2:3d:54:85:59:88:4b:fc:7c:5b:ba:05:b3:bc:
         3d:3c:0e:1d:00:54:a0:d5:cd:83:1f:ef:e0:ad:ad:37:6f:0d:
         c6:30:7e:c3:3a:91:98:29:94:67:d6:95:03:14:50:ef:10:9b:
         58:9a:5e:c6:ba:79:be:77:ba:39:29:f4:bc:15:a2:c4:ec:a8:
         68:7c:77:fb:29:64:a3:5c:b0:cc:84:f0:63:b2:42:60:20:2c:
         e6:04:35:f2:f0:fc:be:49:61:a3:4d:34:15:60:7f:ec:9d:10:
         9a:a7:ee:32:1e:4a:72:5f:8a:e9:32:31:1b:a1:8c:2f:df:15:
         ea:e6:04:08:51:ff:3c:c4:4c:32:4a:f1:7a:bc:32:90:1e:cf:
         04:55:70:68:55:69:fc:74:c8:2c:a4:97:ed:7d:c4:dd:7c:a4:
         17:0c:05:2b:da:b5:1f:75:8b:58:21:51:0c:30:67:68:40:fd:
         8d:1f:99:36:8f:77:7b:fa:5e:9d:12:14:9f:b1:ce:b2:a1:5e:
         17:57:8e:28:e4:2e:08:0b:f3:e9:e5:92:31:2a:8b:eb:93:64:
         ca:7f:c6:30
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEg3IBenXdd+8fl15YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBiNDU0NTEtZWUzNy00OWE2LWFhMzEtZjk0YjZhMDE2
ZGI4MB4XDTI0MTIxNTE0MDA1M1oXDTI1MDMxNTEzMDA1M1owLzEtMCsGA1UEAxMk
NmNlYjY2OTItODdmNS00NGFiLTk4ZjUtYTZiMzNlZTA4NWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ICT5Bo6m+VOjCYdPQdnk5WiQmxJ4TJC1chY
5HyVo2IpmJqZim464cIF4qKkninh9qWq3qkR/gaKI9lPoH/1SHajF8MOJXrZqNnG
YjuRrPoLMYZcE40Mu7rtNAA7fwhn+JoxyVS3jFQ07lSDU169LsFzLk3YV2dKT7p5
uJy2BJxMj4OYeBxT8sqLgSmcUfgZla629dFkvNKnp3mCpQW9Tab0yxWCtrsfFG5p
F6puhgCNLraYqKypznu0qGoGrv+Uc86rxcX8Z52SKQT+RvzffS55g/c5ZN61iCPq
0wmbIMjn0z+s2mygm5K837GnV/0zoSo9PJbP6R7SqgWbv+DfDwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFFsie0V0km3qfR11QEtmRyjp3W5LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGI0
NTQ1MS1lZTM3LTQ5YTYtYWEzMS1mOTRiNmEwMTZkYjgvMWNkMmU5NzgtMmE0Mi0z
MTgxLWI2ZjEtOWFjNzUxNzI0ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBiNDU0NTEtZWUzNy00OWE2LWFh
MzEtZjk0YjZhMDE2ZGI4LzcwYjQ1NDUxLWVlMzctNDlhNi1hYTMxLWY5NGI2YTAx
NmRiOC5jcmwwHwYDVR0jBBgwFoAUeImi2pF9WC2rUttwI8kD87M3lqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83MGI0NTQ1MS1lZTM3LTQ5YTYtYWEzMS1mOTRi
NmEwMTZkYjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDzn0gMA0E
AgACMAcDBQAmBwDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAIV5Gnp+70D5K0SqY4C4NnKnfN39ay69gRsb
fStPifdifmsqoxH++nbCPVSFWYhL/HxbugWzvD08Dh0AVKDVzYMf7+CtrTdvDcYw
fsM6kZgplGfWlQMUUO8Qm1iaXsa6eb53ujkp9LwVosTsqGh8d/spZKNcsMyE8GOy
QmAgLOYENfLw/L5JYaNNNBVgf+ydEJqn7jIeSnJfiukyMRuhjC/fFermBAhR/zzE
TDJK8Xq8MpAezwRVcGhVafx0yCykl+19xN18pBcMBSvatR91i1ghUQwwZ2hA/Y0f
mTaPd3v6Xp0SFJ+xzrKhXhdXjijkLggL8+nlkjEqi+uTZMp/xjA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:34 2025 by rpki-client