Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/430e2fdb-132d-3c38-ab73-beeaf803cd53.roa
File:                     430e2fdb-132d-3c38-ab73-beeaf803cd53.roa (raw, json)
Hash identifier:          RkIfkb8BbonvHi4SCrggkUBOmd+oEIeWlFDeeJwSCLY=
Subject key identifier:   BD:33:08:65:2C:74:BF:B1:94:1F:B9:E5:0A:F2:F2:BB:F9:05:C1:5E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA3C8870E57AAE26111C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/430e2fdb-132d-3c38-ab73-beeaf803cd53.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a3:c8:87:0e:57:aa:e2:61:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=8b837440-d111-4429-b04e-017393571512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:8d:78:48:b9:e2:01:53:f0:4a:ce:ca:3c:
                    b6:a5:13:fa:1c:e0:af:62:43:4d:66:05:09:82:dd:
                    5f:6e:8a:3b:2f:fc:9d:d1:88:71:ad:77:aa:18:fd:
                    9a:7a:42:54:11:ea:ff:56:32:d3:4f:c0:5c:41:a5:
                    59:3f:6e:1d:01:3e:65:ee:66:8f:c8:17:f8:e5:e0:
                    d3:e5:86:da:5c:78:18:be:b0:da:0e:79:65:03:fe:
                    a3:ea:c7:89:ca:d4:bd:80:38:67:e6:e8:c8:a0:03:
                    81:d4:37:d1:5b:71:5a:5a:8c:69:29:f6:80:70:5e:
                    10:42:da:70:e3:f9:57:0c:b4:af:2b:ed:d8:9c:5f:
                    94:86:71:4c:e8:42:96:d0:21:39:93:9d:82:21:36:
                    75:a7:26:7c:02:b3:45:90:5f:6f:f7:7a:d8:97:7d:
                    89:9d:2a:3d:e3:12:a5:fd:95:48:c1:40:f5:7c:c3:
                    5e:34:8e:72:65:10:84:57:37:2b:ef:77:1c:d9:32:
                    d3:d5:96:bf:8e:0e:4a:9e:9c:9e:ab:dd:76:3e:39:
                    a8:c9:4d:8e:30:e6:d5:2c:0d:1f:4f:20:30:b1:4a:
                    fd:c8:f4:b4:5d:c4:47:c6:40:fe:58:92:90:d2:df:
                    54:22:bf:ac:c1:f4:5b:fc:13:27:0b:14:df:fd:ea:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:33:08:65:2C:74:BF:B1:94:1F:B9:E5:0A:F2:F2:BB:F9:05:C1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/430e2fdb-132d-3c38-ab73-beeaf803cd53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:32:b1:48:c2:06:64:6a:60:2c:06:70:53:f1:8d:d3:2e:f9:
         4c:b5:bb:7f:09:43:82:d9:16:6a:24:43:5b:1c:70:bc:ae:42:
         20:50:3f:f6:1e:b9:7d:3f:5e:b2:78:b3:e3:ab:5e:73:be:c4:
         81:b3:0b:e0:1e:cf:b8:4c:f2:47:6d:d5:c6:9f:e6:2b:b2:e4:
         08:64:c8:32:74:cb:ea:97:04:76:7f:8a:84:aa:49:53:1b:d3:
         da:c9:29:46:a8:1e:46:4c:23:60:78:a9:ce:b9:22:55:1f:4f:
         bb:b9:08:d4:59:ad:67:43:83:cd:25:48:7e:fa:3a:ad:21:47:
         3b:cb:4e:99:c6:8f:f8:56:40:c1:ef:36:16:52:ee:09:55:4e:
         4b:58:5a:5c:3f:8f:f9:62:c7:84:bc:5f:b0:5c:28:97:6d:a5:
         09:96:ad:1f:ba:25:84:72:8e:10:db:93:29:d4:e6:10:45:e1:
         b6:51:87:1d:2c:93:88:77:8f:15:15:ba:45:2a:37:9b:62:23:
         8b:a8:a6:39:ac:d7:c1:a7:91:7d:28:c2:05:e2:a6:e4:0d:68:
         ae:89:c8:e5:a2:3a:89:c7:93:c1:75:07:de:cf:1c:6c:23:3a:
         23:a1:a9:b7:57:22:26:30:97:35:a3:d3:2d:1d:83:ca:52:fb:
         e0:6e:9f:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1uqPIhw5XquJhEcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk
OGI4Mzc0NDAtZDExMS00NDI5LWIwNGUtMDE3MzkzNTcxNTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRyNeEi54gFT8ErOyjy2pRP6HOCvYkNNZgUJ
gt1fboo7L/yd0YhxrXeqGP2aekJUEer/VjLTT8BcQaVZP24dAT5l7maPyBf45eDT
5YbaXHgYvrDaDnllA/6j6seJytS9gDhn5ujIoAOB1DfRW3FaWoxpKfaAcF4QQtpw
4/lXDLSvK+3YnF+UhnFM6EKW0CE5k52CITZ1pyZ8ArNFkF9v93rYl32JnSo94xKl
/ZVIwUD1fMNeNI5yZRCEVzcr73cc2TLT1Za/jg5Knpyeq912PjmoyU2OMObVLA0f
TyAwsUr9yPS0XcRHxkD+WJKQ0t9UIr+swfRb/BMnCxTf/eqAxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0zCGUsdL+xlB+55Qry8rv5BcFeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDMwZTJmZGItMTMyZC0z
YzM4LWFiNzMtYmVlYWY4MDNjZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIysUjCBmRqYCwGcFPxjdMu+Uy1u38JQ4LZFmokQ1sccLyuQiBQP/Ye
uX0/XrJ4s+OrXnO+xIGzC+Aez7hM8kdt1caf5iuy5AhkyDJ0y+qXBHZ/ioSqSVMb
09rJKUaoHkZMI2B4qc65IlUfT7u5CNRZrWdDg80lSH76Oq0hRzvLTpnGj/hWQMHv
NhZS7glVTktYWlw/j/lix4S8X7BcKJdtpQmWrR+6JYRyjhDbkynU5hBF4bZRhx0s
k4h3jxUVukUqN5tiI4uopjms18GnkX0owgXipuQNaK6JyOWiOonHk8F1B97PHGwj
OiOhqbdXIiYwlzWj0y0dg8pS++BunxQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:14 2025 by rpki-client