Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa
File:                     c247b3ff-276b-3115-bfe5-d2984aaf0719.roa (raw, json)
Hash identifier:          NQUIz5XsNifIr3u359gS1jHXue0uMTN6LzMjEjMWdTE=
Subject key identifier:   75:D2:42:B1:C9:E4:1F:72:4B:0E:7E:AF:B2:9B:46:C6:C5:BB:FE:D5
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F432858488AE0A4A000475C1225CB3980
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     32595
IP address blocks:        23.172.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a4:a0:00:47:5c:12:25:cb:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=97ccd41e-07a6-4021-ba71-8a1020e55c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:72:a4:33:e8:d0:17:bf:20:9a:15:d1:57:
                    7b:b5:39:53:6f:ae:dd:c3:d6:65:c6:84:bc:1f:58:
                    8c:4b:00:da:92:df:25:1e:8f:01:ca:62:3d:6b:e9:
                    0d:71:cf:d8:24:d7:aa:14:04:6c:98:c1:1d:ad:6d:
                    a5:98:38:d0:10:b1:16:cf:11:b4:d5:42:ac:a3:f5:
                    9a:66:41:f6:e2:3a:25:11:b3:a9:02:1e:dc:73:2f:
                    db:b7:a8:62:42:74:4e:5e:95:75:be:fc:a8:6f:59:
                    38:b1:61:eb:df:c4:9e:f8:ad:db:c4:f9:18:c2:6a:
                    5c:1e:d3:7c:da:48:40:a4:47:39:a7:c5:c0:98:22:
                    9d:9e:9a:8c:3c:ea:e1:fc:e7:fa:92:52:0c:b0:08:
                    46:57:15:1d:29:af:8f:2a:d2:8b:55:75:7e:22:80:
                    07:a4:7b:aa:92:11:ec:42:fb:3d:99:b8:28:77:68:
                    42:65:b8:a3:ab:2f:8b:00:7d:9b:07:09:9b:5d:58:
                    d8:df:f8:35:cd:ab:0a:39:29:ff:b4:ac:44:fd:8c:
                    c3:16:3a:f2:15:27:89:9e:36:04:98:67:33:6d:2f:
                    c2:31:f2:c9:7f:ff:07:c8:02:7d:c3:37:d6:99:eb:
                    dd:06:f7:eb:b3:cb:98:2b:20:15:63:1e:86:04:72:
                    a7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D2:42:B1:C9:E4:1F:72:4B:0E:7E:AF:B2:9B:46:C6:C5:BB:FE:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:a9:22:e8:31:df:9d:ef:c6:1f:4e:6d:b9:f8:18:57:7d:4f:
         b1:31:21:e0:5a:fe:4d:14:eb:04:13:0f:ef:1d:62:1b:aa:08:
         8c:bf:cd:da:14:e2:f6:a1:6a:ef:10:59:ad:69:98:22:55:a2:
         b9:c0:45:be:59:11:13:2b:fa:2f:b7:5a:87:6a:d8:7c:f1:4a:
         2a:91:59:0e:ba:97:9b:44:89:b0:81:25:b5:1c:58:85:2a:03:
         cd:bf:20:a5:f1:21:f4:20:08:a3:f0:b7:cf:62:bd:82:eb:81:
         6b:e2:df:76:d3:d2:3d:f6:c3:2e:0b:fd:49:2c:a6:2f:1a:7e:
         31:21:95:42:3d:fc:c6:cb:ec:ba:6a:ce:34:8c:d7:70:a1:f4:
         a3:fd:17:a0:e6:ff:b4:05:96:95:03:d8:da:d6:eb:d3:bf:6d:
         41:51:ce:8c:db:cc:5e:f5:c5:06:dc:34:c9:7f:f2:59:d9:7e:
         5b:9e:35:50:ee:49:53:84:9a:ff:49:33:39:a0:28:94:c6:da:
         87:e9:0d:d6:e5:44:63:2a:15:35:e0:3c:80:8f:97:2b:0b:22:
         95:19:98:07:be:9f:aa:3a:2a:5d:14:62:5f:d6:f2:08:40:80:
         98:0b:df:8c:fd:85:fc:fc:b5:ef:0e:95:1c:3c:01:f0:02:6c:
         10:b7:9c:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4KSgAEdcEiXLOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw
ZWZiMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
OTdjY2Q0MWUtMDdhNi00MDIxLWJhNzEtOGExMDIwZTU1YzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw45ypDPo0Be/IJoV0Vd7tTlTb67dw9ZlxoS8
H1iMSwDakt8lHo8BymI9a+kNcc/YJNeqFARsmMEdrW2lmDjQELEWzxG01UKso/Wa
ZkH24jolEbOpAh7ccy/bt6hiQnROXpV1vvyob1k4sWHr38Se+K3bxPkYwmpcHtN8
2khApEc5p8XAmCKdnpqMPOrh/Of6klIMsAhGVxUdKa+PKtKLVXV+IoAHpHuqkhHs
Qvs9mbgod2hCZbijqy+LAH2bBwmbXVjY3/g1zasKOSn/tKxE/YzDFjryFSeJnjYE
mGczbS/CMfLJf/8HyAJ9wzfWmevdBvfrs8uYKyAVYx6GBHKnLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHXSQrHJ5B9ySw5+r7KbRsbFu/7VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh
Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvYzI0N2IzZmYtMjc2Yi0z
MTE1LWJmZTUtZDI5ODRhYWYwNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl
YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj
MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm
M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2pIugx353vxh9Obbn4GFd9T7ExIeBa/k0U6wQTD+8dYhuqCIy/zdoU
4vahau8QWa1pmCJVornARb5ZERMr+i+3Wodq2HzxSiqRWQ66l5tEibCBJbUcWIUq
A82/IKXxIfQgCKPwt89ivYLrgWvi33bT0j32wy4L/Ukspi8afjEhlUI9/MbL7Lpq
zjSM13Ch9KP9F6Dm/7QFlpUD2NrW69O/bUFRzozbzF71xQbcNMl/8lnZflueNVDu
SVOEmv9JMzmgKJTG2ofpDdblRGMqFTXgPICPlysLIpUZmAe+n6o6Kl0UYl/W8ghA
gJgL34z9hfz8te8OlRw8AfACbBC3nG4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:48 2025 by rpki-client