Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb253aeb-5d57-3eaa-9bb0-c7593533db70.roa
File:                     bb253aeb-5d57-3eaa-9bb0-c7593533db70.roa (raw, json)
Hash identifier:          P138aPp+lXEVBudHi9uW7N7uFPsmNXhBoZXqzgbnN2k=
Subject key identifier:   45:35:3E:0D:CD:4E:13:F9:36:C1:59:22:C9:1D:E7:86:3F:AB:C9:C7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847EFEF92828C4DFD41991704B8
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb253aeb-5d57-3eaa-9bb0-c7593533db70.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     204957
IP address blocks:        166.88.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:92:82:8c:4d:fd:41:99:17:04:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=65fabfd4-4ccc-4c60-9d35-74e67e27df18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:da:09:d0:f3:98:05:e3:2e:bf:af:f4:d5:
                    f0:1f:09:58:61:a8:a4:05:76:eb:ca:81:7a:07:5b:
                    8c:13:04:b6:b6:47:cf:a9:09:31:e2:dc:20:08:b1:
                    e9:60:ed:19:d6:66:a6:09:7e:e9:19:70:9c:40:33:
                    99:85:45:ce:4f:53:89:c8:f4:5f:21:49:08:26:5b:
                    3c:63:5e:cb:9f:ef:c5:d7:ad:e7:43:17:e6:22:17:
                    3b:d3:df:8f:bb:30:df:f8:15:23:b3:b8:14:4b:85:
                    b2:2d:78:2b:a8:49:d4:69:33:b2:0c:c5:1a:30:3f:
                    3f:99:c2:51:e2:e0:a8:b5:50:51:26:fd:7d:ff:ca:
                    e6:74:73:71:58:d4:16:62:52:1b:f0:e1:c3:5c:60:
                    0f:84:f3:d6:e2:0d:54:c7:62:4b:89:0c:a8:75:97:
                    0e:6f:fe:48:09:08:82:30:d2:41:fc:c7:eb:cc:f3:
                    ea:97:e2:1e:38:dc:f9:7c:86:f7:42:f4:40:51:5c:
                    55:2c:e3:ec:3f:02:c9:e4:28:8e:72:26:8c:5d:44:
                    13:31:8c:60:ae:59:94:0c:86:7c:26:6b:c5:97:8c:
                    ba:9d:7a:84:0a:ec:ec:ff:7d:d3:33:cd:99:54:93:
                    ca:5e:18:f2:09:16:28:4d:29:17:62:5b:1c:1a:19:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:35:3E:0D:CD:4E:13:F9:36:C1:59:22:C9:1D:E7:86:3F:AB:C9:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb253aeb-5d57-3eaa-9bb0-c7593533db70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:4e:09:e9:46:ad:2d:f1:e3:12:39:60:06:73:c4:30:92:
         a4:d2:73:06:6d:33:08:9e:24:7d:d0:49:28:60:be:fb:3c:47:
         e8:1a:c6:cb:4d:35:c0:fc:79:f4:aa:40:c2:b1:37:09:42:7c:
         f9:22:dd:6b:92:57:55:b0:71:36:ca:63:d0:61:4d:dd:1d:08:
         3c:75:95:9c:1a:00:90:ae:8c:b2:aa:02:e6:25:34:a1:d7:7c:
         5c:a4:90:c4:00:ec:d3:bc:74:65:83:ff:22:3c:01:ba:a4:07:
         5f:4b:c8:3e:ee:ca:66:92:fe:37:3d:4d:5e:80:ef:7e:ae:98:
         62:f2:c2:22:7e:c1:ab:b2:1f:e2:e4:37:14:e4:0c:db:56:46:
         59:ed:0f:86:8b:cd:22:82:dd:fa:72:85:2e:3d:e8:13:89:39:
         1b:d7:2a:78:81:0c:fa:52:f1:40:47:0f:15:b1:ae:ff:72:1c:
         c7:b9:46:2e:95:3f:b9:91:b6:65:1c:a4:62:00:87:4a:82:fc:
         49:d8:3e:e4:db:0d:c0:f9:1f:d0:6e:7a:a7:0b:4d:64:24:6e:
         df:43:ef:29:f1:e7:24:a8:e2:2c:b2:f1:d7:b5:0d:5c:95:a3:
         61:fc:5b:04:a2:15:5c:50:fa:9c:e1:75:02:e3:6f:45:7d:92:
         a9:d2:e3:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv75KCjE39QZkXBLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk
NjVmYWJmZDQtNGNjYy00YzYwLTlkMzUtNzRlNjdlMjdkZjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKbaCdDzmAXjLr+v9NXwHwlYYaikBXbryoF6
B1uMEwS2tkfPqQkx4twgCLHpYO0Z1mamCX7pGXCcQDOZhUXOT1OJyPRfIUkIJls8
Y17Ln+/F163nQxfmIhc709+PuzDf+BUjs7gUS4WyLXgrqEnUaTOyDMUaMD8/mcJR
4uCotVBRJv19/8rmdHNxWNQWYlIb8OHDXGAPhPPW4g1Ux2JLiQyodZcOb/5ICQiC
MNJB/MfrzPPql+IeONz5fIb3QvRAUVxVLOPsPwLJ5CiOciaMXUQTMYxgrlmUDIZ8
JmvFl4y6nXqECuzs/33TM82ZVJPKXhjyCRYoTSkXYlscGhkUdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEU1Pg3NThP5NsFZIskd54Y/q8nHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmIyNTNhZWItNWQ1Ny0z
ZWFhLTliYjAtYzc1OTM1MzNkYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuVTgnpRq0t8eMSOWAGc8QwkqTScwZtMwieJH3QSShgvvs8R+gaxstN
NcD8efSqQMKxNwlCfPki3WuSV1WwcTbKY9BhTd0dCDx1lZwaAJCujLKqAuYlNKHX
fFykkMQA7NO8dGWD/yI8AbqkB19LyD7uymaS/jc9TV6A736umGLywiJ+wauyH+Lk
NxTkDNtWRlntD4aLzSKC3fpyhS496BOJORvXKniBDPpS8UBHDxWxrv9yHMe5Ri6V
P7mRtmUcpGIAh0qC/EnYPuTbDcD5H9BueqcLTWQkbt9D7ynx5ySo4iyy8de1DVyV
o2H8WwSiFVxQ+pzhdQLjb0V9kqnS45U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:14 2025 by rpki-client