Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbed26b5-4c6e-3228-b11d-f20b5b22ee95.roa
File:                     fbed26b5-4c6e-3228-b11d-f20b5b22ee95.roa (raw, json)
Hash identifier:          XGb17AulPnRb5L7pTrS4FYx7JPtDXcx5TDijjF7ab4Y=
Subject key identifier:   B3:66:D0:C5:6C:90:06:03:CA:15:7A:4D:0E:7F:94:E7:6D:2F:25:8A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584830253C5E442213A165DEA1F8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbed26b5-4c6e-3228-b11d-f20b5b22ee95.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        131.125.116.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:3c:5e:44:22:13:a1:65:de:a1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=7d4c8091-40f9-4ca6-acb9-5cf87f4ff6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:22:b9:f0:c8:b5:66:4f:c3:d1:77:f7:58:
                    7f:79:94:4c:b8:ce:f4:87:fd:db:98:6a:ae:d6:87:
                    3d:e6:f7:72:86:76:86:38:bf:6a:6f:ab:0e:51:9d:
                    c2:1b:08:31:56:01:15:10:7e:11:e5:df:c4:bf:a5:
                    5e:e7:fc:a6:a1:ef:54:b7:1d:b5:74:19:8d:51:7c:
                    38:4e:6d:fe:f4:41:7e:de:68:95:db:4a:2d:95:fe:
                    91:4c:b8:26:8a:d6:35:6a:0e:dc:d1:0e:a3:35:b1:
                    38:80:a6:18:96:27:50:cb:38:7f:c1:2a:08:e9:64:
                    86:5c:7e:f5:0d:bf:71:c0:18:26:16:21:d2:76:47:
                    6c:e3:9f:b8:f1:ed:2e:98:ea:3d:e3:f1:03:f8:e0:
                    5f:cd:27:79:e9:31:a2:1e:2c:de:49:1b:62:26:38:
                    da:5a:bf:c2:b5:31:98:70:41:93:75:6a:1a:79:09:
                    23:47:55:42:01:48:18:5c:7c:22:b8:ee:13:7b:85:
                    f5:dc:dc:8b:0f:d4:4a:2d:ea:00:5d:8e:91:12:0a:
                    0b:fb:ac:fd:93:19:2b:f7:2b:6b:65:c8:13:94:a7:
                    cf:b1:17:b5:73:c6:f2:70:b9:26:11:73:1b:79:06:
                    47:a0:5a:78:25:9c:69:75:b2:77:5c:5a:e1:b6:0c:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:66:D0:C5:6C:90:06:03:CA:15:7A:4D:0E:7F:94:E7:6D:2F:25:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbed26b5-4c6e-3228-b11d-f20b5b22ee95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:15:f0:e4:12:13:b4:af:84:0a:ae:e3:b2:17:b0:d8:56:e6:
         d2:35:93:03:2d:f3:d0:02:ec:2b:3e:f9:57:0b:dd:aa:c1:6c:
         a4:e0:12:23:77:44:c8:2b:0a:40:24:31:7d:bf:a2:28:ce:df:
         f1:bb:1f:5b:ef:8a:54:d8:82:61:a8:be:a9:83:81:11:84:5a:
         53:d1:89:5a:10:e8:2a:23:07:8e:a1:37:d9:58:5a:08:ce:dc:
         6a:21:24:1c:d5:90:af:f4:d4:74:da:20:a4:14:b0:78:0b:9d:
         b7:f1:69:e6:d2:49:5d:d1:cc:54:57:5e:5b:94:37:0f:53:40:
         76:4d:b9:f0:fe:0c:71:f1:f3:9f:93:53:86:56:05:21:b4:62:
         4f:40:f0:84:b9:b7:97:59:d4:11:d4:25:04:56:59:cc:2c:c3:
         f3:b2:35:18:84:c7:3a:0e:7e:ae:ad:ad:7d:bf:b9:58:f7:c2:
         b7:f3:b7:36:8f:00:96:3d:a9:3a:ea:b2:95:05:88:72:99:91:
         2e:5c:15:32:fe:cb:3e:c0:ae:d1:94:cb:cb:3a:b1:6a:5f:ea:
         7d:9c:b7:10:89:9a:d4:1c:a6:30:e9:e1:46:e7:97:da:51:cc:
         50:0e:0c:bb:1a:bf:ac:88:e4:f6:96:e3:03:e6:df:88:ff:e1:
         7c:e9:0a:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJTxeRCIToWXeofgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk
N2Q0YzgwOTEtNDBmOS00Y2E2LWFjYjktNWNmODdmNGZmNmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2oiufDItWZPw9F391h/eZRMuM70h/3bmGqu
1oc95vdyhnaGOL9qb6sOUZ3CGwgxVgEVEH4R5d/Ev6Ve5/ymoe9Utx21dBmNUXw4
Tm3+9EF+3miV20otlf6RTLgmitY1ag7c0Q6jNbE4gKYYlidQyzh/wSoI6WSGXH71
Db9xwBgmFiHSdkds45+48e0umOo94/ED+OBfzSd56TGiHizeSRtiJjjaWr/CtTGY
cEGTdWoaeQkjR1VCAUgYXHwiuO4Te4X13NyLD9RKLeoAXY6REgoL+6z9kxkr9ytr
ZcgTlKfPsRe1c8bycLkmEXMbeQZHoFp4JZxpdbJ3XFrhtgzIuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLNm0MVskAYDyhV6TQ5/lOdtLyWKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmJlZDI2YjUtNGM2ZS0z
MjI4LWIxMWQtZjIwYjViMjJlZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg310MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYV8OQSE7SvhAqu47IXsNhW5tI1kwMt89AC7Cs++VcL3arBbKTgEiN3
RMgrCkAkMX2/oijO3/G7H1vvilTYgmGovqmDgRGEWlPRiVoQ6CojB46hN9lYWgjO
3GohJBzVkK/01HTaIKQUsHgLnbfxaebSSV3RzFRXXluUNw9TQHZNufD+DHHx85+T
U4ZWBSG0Yk9A8IS5t5dZ1BHUJQRWWcwsw/OyNRiExzoOfq6trX2/uVj3wrfztzaP
AJY9qTrqspUFiHKZkS5cFTL+yz7ArtGUy8s6sWpf6n2ctxCJmtQcpjDp4Ubnl9pR
zFAODLsav6yI5PaW4wPm34j/4XzpCoc=
-----END CERTIFICATE-----
Generated at Tue May 6 21:23:12 2025 by rpki-client