Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa
File:                     1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa (raw, json)
Hash identifier:          UkpHWqlRgO6Q2AQOcIvOp6h6gxFUn3I2UfrlCPrCDhA=
Subject key identifier:   41:10:3E:98:A3:0F:5E:79:F3:8C:ED:23:31:C6:1C:B1:3F:95:4A:3D
Certificate issuer:       /CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce
Certificate serial:       010D0C9F4328584827C54595EBB3A1EDA04FD700
Authority key identifier: EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     397373
IP address blocks:        216.87.48.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:45:95:eb:b3:a1:ed:a0:4f:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=ab314a42-4668-420c-ae85-3ed033df6884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:ae:fa:de:8d:46:d6:89:44:6b:da:9b:34:
                    16:cd:a7:38:c9:d9:0b:43:87:4e:22:10:28:a7:f3:
                    97:89:cd:6f:25:5f:97:26:e6:9c:fa:1c:d0:25:61:
                    96:b4:d6:d2:1d:79:37:17:5f:34:ad:46:29:ea:fa:
                    44:9a:c0:74:20:56:41:56:66:a8:08:02:a9:ed:4d:
                    da:f3:8b:0b:90:28:e7:23:72:7e:a4:e5:08:a4:98:
                    88:09:13:a9:6c:8e:ec:65:f8:4c:4b:4b:57:c0:a7:
                    a8:21:2b:d3:84:7b:8a:01:e2:df:1e:7f:c1:10:36:
                    c5:19:a6:78:d5:01:8e:c0:4d:32:e8:7d:00:9b:42:
                    f8:57:21:c9:c6:13:b2:55:7b:a9:4c:cc:34:27:01:
                    45:98:ff:42:47:85:cf:f7:57:f7:47:ac:24:f9:6e:
                    ea:62:a0:a1:19:fa:9e:37:ca:f3:7e:f4:80:29:3a:
                    19:87:a3:0d:08:9a:18:20:ca:8c:1b:6e:72:95:9a:
                    eb:c7:bd:31:23:96:b3:48:f4:25:ae:4d:b0:c7:2a:
                    e3:0b:38:d4:b7:70:96:02:93:77:12:01:fe:1d:b6:
                    86:96:37:df:47:39:08:c0:2b:51:a4:c2:49:37:5c:
                    55:8a:36:da:30:a3:4c:91:a6:cf:65:9e:61:78:aa:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:3E:98:A3:0F:5E:79:F3:8C:ED:23:31:C6:1C:B1:3F:95:4A:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.crl

            X509v3 Authority Key Identifier:
                keyid:EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:79:dd:fa:65:98:a8:86:d5:86:95:97:5a:95:04:4a:58:
         ed:98:37:b4:7d:03:e7:10:77:ff:f9:7e:9c:b1:31:73:85:4f:
         66:4c:88:dc:41:7f:4a:38:46:80:f1:c2:5e:e3:6f:3b:e6:47:
         c6:35:c4:8f:de:6d:cb:dd:04:f1:a4:29:34:08:60:65:a8:90:
         03:59:23:98:61:bf:be:ef:57:48:f4:26:43:84:c7:77:c3:89:
         be:21:d7:a1:78:05:4e:ff:27:73:dc:fc:02:f7:c9:92:1d:c9:
         b3:23:01:e3:86:0e:f3:9c:a1:ed:0f:cb:8a:aa:0b:79:ed:07:
         e5:e2:19:dd:7f:de:fb:86:3d:f4:70:f5:4a:82:12:0d:09:45:
         3c:67:52:6e:0c:8f:c4:c0:e9:16:d3:19:cd:69:66:f9:5b:67:
         4f:a7:4b:37:50:53:e5:fe:1f:d1:12:3f:ca:7a:ac:9b:02:c5:
         59:03:4d:8d:ad:3f:d7:e5:0e:9e:14:11:63:04:bf:f8:31:26:
         51:87:02:01:78:87:0f:a1:3f:97:f3:9a:c4:c3:55:77:62:6e:
         a4:5f:2b:78:87:27:69:86:7b:62:f2:2a:0a:e2:24:1f:f5:51:
         19:6a:40:e3:21:5b:86:27:c0:e8:e2:80:4c:bb:c9:85:3c:52:
         11:a6:4d:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxUWV67Oh7aBP1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ3ZTI4NDMtMTZlMS00ZWQwLWFjYzItN2E5NDJiZmM0
NmNlMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
YWIzMTRhNDItNDY2OC00MjBjLWFlODUtM2VkMDMzZGY2ODg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQWu+t6NRtaJRGvamzQWzac4ydkLQ4dOIhAo
p/OXic1vJV+XJuac+hzQJWGWtNbSHXk3F180rUYp6vpEmsB0IFZBVmaoCAKp7U3a
84sLkCjnI3J+pOUIpJiICROpbI7sZfhMS0tXwKeoISvThHuKAeLfHn/BEDbFGaZ4
1QGOwE0y6H0Am0L4VyHJxhOyVXupTMw0JwFFmP9CR4XP91f3R6wk+W7qYqChGfqe
N8rzfvSAKToZh6MNCJoYIMqMG25ylZrrx70xI5azSPQlrk2wxyrjCzjUt3CWApN3
EgH+HbaGljffRzkIwCtRpMJJN1xVijbaMKNMkabPZZ5heKpiqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEQPpijD15584ztIzHGHLE/lUo9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNDdl
Mjg0My0xNmUxLTRlZDAtYWNjMi03YTk0MmJmYzQ2Y2UvMWFlNDk5NmUtMGE0Yi0z
YmZkLTlmYjEtMjBmMmFhN2Y4YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTQ3ZTI4NDMtMTZlMS00ZWQwLWFj
YzItN2E5NDJiZmM0NmNlL2E0N2UyODQzLTE2ZTEtNGVkMC1hY2MyLTdhOTQyYmZj
NDZjZS5jcmwwHwYDVR0jBBgwFoAU75/2R1bw4j1pqmiU1+H4jrfOATgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hNDdlMjg0My0xNmUxLTRlZDAtYWNjMi03YTk0
MmJmYzQ2Y2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvYed36ZZiohtWGlZdalQRKWO2YN7R9A+cQd//5fpyxMXOFT2ZMiNxB
f0o4RoDxwl7jbzvmR8Y1xI/ebcvdBPGkKTQIYGWokANZI5hhv77vV0j0JkOEx3fD
ib4h16F4BU7/J3Pc/AL3yZIdybMjAeOGDvOcoe0Py4qqC3ntB+XiGd1/3vuGPfRw
9UqCEg0JRTxnUm4Mj8TA6RbTGc1pZvlbZ0+nSzdQU+X+H9ESP8p6rJsCxVkDTY2t
P9flDp4UEWMEv/gxJlGHAgF4hw+hP5fzmsTDVXdibqRfK3iHJ2mGe2LyKgriJB/1
URlqQOMhW4YnwOjigEy7yYU8UhGmTSI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:59 2025 by rpki-client