Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
File:                     b1689224-3522-322c-b540-085659c0b310.roa (raw, json)
Hash identifier:          qNZbh2HBeKkktKX400dBIU7UaVy2TbDubHYWzBRLf9M=
Subject key identifier:   25:BD:42:8C:45:E6:74:48:D2:EC:F1:DB:11:57:1F:43:41:1F:87:8B
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F4328584886B0828E9468F51276985D00
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     19740
IP address blocks:        23.173.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:82:8e:94:68:f5:12:76:98:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=2501045b-f34c-4ddc-a66e-d0174db8d8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:f8:0f:d4:f6:ad:b8:e3:43:df:ff:f0:03:
                    10:1d:b6:01:24:a1:51:b2:be:c2:97:d5:7d:a2:fc:
                    9c:3d:cb:86:4e:11:40:d1:9c:6f:70:11:a0:3c:9e:
                    16:ac:2e:df:9e:2b:e0:0c:1e:0b:e8:ed:ba:21:cb:
                    59:66:bd:a7:08:7d:12:7c:5f:b5:5d:b1:0d:9c:4e:
                    6c:46:d0:a7:33:f8:92:08:59:92:3c:53:8f:d9:1f:
                    c0:d2:99:e7:58:ff:ca:c2:87:2f:3b:1f:8f:5a:9a:
                    05:e8:8a:12:0e:fe:99:dd:c5:18:72:fb:01:0f:1f:
                    78:72:a1:84:90:44:0d:bd:58:86:ef:f7:1c:d7:88:
                    a3:d0:3e:2f:f5:16:74:4b:c3:58:08:4c:0e:a3:5c:
                    50:31:d9:10:8c:84:91:7e:03:7b:82:de:9f:49:82:
                    d3:f2:69:4b:95:cf:84:e2:18:ab:65:82:15:17:6e:
                    6e:c0:fa:f8:f3:84:9f:8f:c2:7f:c1:1d:e6:e2:f3:
                    c1:1b:3e:66:9c:13:a4:bb:a2:d3:4a:f6:61:65:92:
                    8d:6c:e9:2c:b0:43:7d:5e:b7:4f:6f:db:3c:66:9c:
                    67:0b:96:39:05:ba:1e:af:10:14:98:e0:2e:02:5c:
                    b5:9c:4a:e3:b8:e7:77:9f:72:36:b1:ed:38:b7:85:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BD:42:8C:45:E6:74:48:D2:EC:F1:DB:11:57:1F:43:41:1F:87:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:50:f9:6b:07:ef:3e:b8:58:22:e4:df:be:e8:79:0d:93:
         15:c7:0b:1b:be:b4:ec:8a:52:21:f6:c6:2c:05:ce:e5:ed:c4:
         da:57:a9:91:8d:10:30:04:b9:4c:37:c4:50:07:55:0f:39:60:
         52:55:f4:10:fc:2d:48:92:ec:02:37:4c:f3:a1:8e:ca:75:e5:
         07:e7:fe:65:81:76:14:f3:fc:73:26:97:5e:cd:68:9c:d6:7f:
         e3:8b:b7:f4:43:71:80:00:8b:8c:5a:96:13:1f:5f:7b:9e:f0:
         9c:ed:d7:c4:c5:01:0e:2b:0b:8e:3c:c4:a4:7b:6e:dd:e1:5c:
         e3:ad:4e:4c:d3:30:48:1d:42:5c:7b:d1:e6:5d:20:ec:ba:53:
         f8:8e:38:0c:20:9f:19:11:15:77:a2:9b:c1:f4:61:b2:83:e8:
         ca:3b:1e:98:8e:11:3b:c1:ec:e9:3e:de:b9:06:75:92:73:aa:
         03:c1:dc:b9:c7:db:46:78:b9:15:37:80:bc:79:40:0b:9d:3e:
         25:dd:0d:2d:38:19:73:0d:b9:58:62:09:bd:55:fa:dd:01:9e:
         00:ba:39:ec:07:a6:5c:c4:29:8f:c6:1f:31:14:8b:ac:6d:71:
         2e:84:37:e9:8d:8c:af:f7:46:9d:18:1e:99:fc:75:6a:96:f7:
         7f:e3:11:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsIKOlGj1EnaYXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE2YjRkMzQtMzg4MC00YjcyLWI3ODYtMzY1ZmJkZWM4
YmEwMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk
MjUwMTA0NWItZjM0Yy00ZGRjLWE2NmUtZDAxNzRkYjhkOGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttr4D9T2rbjjQ9//8AMQHbYBJKFRsr7Cl9V9
ovycPcuGThFA0ZxvcBGgPJ4WrC7fnivgDB4L6O26IctZZr2nCH0SfF+1XbENnE5s
RtCnM/iSCFmSPFOP2R/A0pnnWP/KwocvOx+PWpoF6IoSDv6Z3cUYcvsBDx94cqGE
kEQNvViG7/cc14ij0D4v9RZ0S8NYCEwOo1xQMdkQjISRfgN7gt6fSYLT8mlLlc+E
4hirZYIVF25uwPr484Sfj8J/wR3m4vPBGz5mnBOku6LTSvZhZZKNbOkssEN9XrdP
b9s8ZpxnC5Y5BboerxAUmOAuAly1nErjuOd3n3I2se04t4UMAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCW9QoxF5nRI0uzx2xFXH0NBH4eLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84MTZi
NGQzNC0zODgwLTRiNzItYjc4Ni0zNjVmYmRlYzhiYTAvYjE2ODkyMjQtMzUyMi0z
MjJjLWI1NDAtMDg1NjU5YzBiMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODE2YjRkMzQtMzg4MC00YjcyLWI3
ODYtMzY1ZmJkZWM4YmEwLzgxNmI0ZDM0LTM4ODAtNGI3Mi1iNzg2LTM2NWZiZGVj
OGJhMC5jcmwwHwYDVR0jBBgwFoAUnyi16wc4cor/+ST8DFEWGFjVQBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84MTZiNGQzNC0zODgwLTRiNzItYjc4Ni0zNjVm
YmRlYzhiYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6RUPlrB+8+uFgi5N++6HkNkxXHCxu+tOyKUiH2xiwFzuXtxNpXqZGN
EDAEuUw3xFAHVQ85YFJV9BD8LUiS7AI3TPOhjsp15Qfn/mWBdhTz/HMml17NaJzW
f+OLt/RDcYAAi4xalhMfX3ue8Jzt18TFAQ4rC448xKR7bt3hXOOtTkzTMEgdQlx7
0eZdIOy6U/iOOAwgnxkRFXeim8H0YbKD6Mo7HpiOETvB7Ok+3rkGdZJzqgPB3LnH
20Z4uRU3gLx5QAudPiXdDS04GXMNuVhiCb1V+t0BngC6OewHplzEKY/GHzEUi6xt
cS6EN+mNjK/3Rp0YHpn8dWqW93/jET4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:17:48 2025 by rpki-client