Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1b1477be-4861-34e9-a84a-b4ea3332351f.roa
File:                     1b1477be-4861-34e9-a84a-b4ea3332351f.roa (raw, json)
Hash identifier:          tqthz6C/cEupSgCIu6PPunXIXsQ1IjAgDlWWf4HrtJU=
Subject key identifier:   1E:69:B6:BB:B4:7B:1D:F4:39:43:86:C4:72:90:F2:FA:CD:0C:99:34
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584878BB06EEEE7265718BD5D200
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1b1477be-4861-34e9-a84a-b4ea3332351f.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        67.217.18.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:06:ee:ee:72:65:71:8b:d5:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=ad6eff17-3932-41c1-b293-11977d6393c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:7b:24:8a:01:52:ee:03:58:e9:a6:86:df:
                    44:10:18:70:22:1c:f3:86:98:e3:c2:84:df:bc:4a:
                    5e:5e:26:9e:53:dc:e6:65:ea:38:1a:ba:83:52:2b:
                    a7:7c:2d:f0:87:05:48:0f:6f:f0:dc:d2:35:29:29:
                    1d:50:4a:8d:32:48:18:27:df:36:3a:de:a0:1c:6d:
                    8f:20:91:e3:87:d6:1d:54:29:d8:f4:a5:79:e2:46:
                    77:53:d3:4f:4d:72:62:b0:51:5d:f9:9f:40:0b:d1:
                    3a:2f:2d:f2:fc:81:93:ab:68:4e:07:a6:a6:07:83:
                    9a:bc:ff:5c:58:c4:eb:16:f4:e5:f0:cd:96:cd:b5:
                    db:8d:66:cd:5d:e1:6c:f8:7e:f1:0e:c9:4f:e3:c8:
                    9c:89:e5:a9:06:0e:57:e6:f3:c1:99:d2:04:5a:ee:
                    2f:a3:b6:8b:01:4d:ce:bd:21:1c:d5:f5:e2:00:ed:
                    0f:c0:a8:b7:5e:09:72:e5:cd:25:f5:bd:e9:95:af:
                    a6:a9:4d:61:e7:43:28:0f:db:be:3e:b7:8a:c4:3f:
                    98:ab:3a:60:45:3d:33:45:67:75:d1:2a:0f:44:0f:
                    78:09:9f:84:b5:1a:ca:a7:dd:ab:23:a1:55:c1:cd:
                    ef:17:af:9b:ff:3e:1a:58:a3:24:f2:9f:79:b6:e2:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:69:B6:BB:B4:7B:1D:F4:39:43:86:C4:72:90:F2:FA:CD:0C:99:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1b1477be-4861-34e9-a84a-b4ea3332351f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:62:3a:67:09:0b:fe:b7:60:f1:15:46:db:52:03:f4:62:
         9b:2a:b0:ba:01:e2:21:c2:7c:42:9b:d8:2d:a5:2b:44:c9:93:
         2b:f1:a4:07:a6:29:9e:d8:47:da:28:5f:d1:89:1d:ed:3e:bd:
         12:6f:5c:e4:ea:11:31:27:e8:9c:fd:ce:86:3a:8b:e9:d2:52:
         b9:b1:58:6b:0b:a3:7e:ea:d7:f3:dd:9d:29:d9:cb:de:d0:0a:
         cc:44:0d:b2:6f:8d:f3:a6:52:54:a0:00:dd:40:1c:ff:a5:18:
         dc:4f:ef:5a:60:18:ee:9d:83:5e:4a:b8:24:1b:a8:41:01:9f:
         64:8e:e1:6f:cf:a6:dc:14:23:76:fe:26:12:e3:13:90:0e:3a:
         fc:4b:25:04:9a:c7:05:9a:9b:67:82:4f:7a:f9:c4:5f:53:59:
         db:1c:55:e1:41:14:53:96:6a:3b:1d:d5:7e:d5:06:9a:fd:43:
         b7:1d:3b:0a:a0:6e:9a:11:6f:ce:0d:0b:4a:cc:55:fc:af:3a:
         0e:80:18:80:40:e8:39:9b:34:05:ba:0e:40:c7:12:51:1e:55:
         e2:2c:39:50:67:75:28:5d:a8:58:36:98:e8:d1:6c:a9:fd:b0:
         2d:f6:cf:d3:2b:b7:7b:b7:90:3f:1e:06:fa:41:7b:8d:2c:a6:
         b4:5d:43:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh4uwbu7nJlcYvV0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDEwODAyMDAzOVoXDTI1MDQwODAxMDAzOVowLzEtMCsGA1UEAxMk
YWQ2ZWZmMTctMzkzMi00MWMxLWIyOTMtMTE5NzdkNjM5M2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1B7JIoBUu4DWOmmht9EEBhwIhzzhpjjwoTf
vEpeXiaeU9zmZeo4GrqDUiunfC3whwVID2/w3NI1KSkdUEqNMkgYJ982Ot6gHG2P
IJHjh9YdVCnY9KV54kZ3U9NPTXJisFFd+Z9AC9E6Ly3y/IGTq2hOB6amB4OavP9c
WMTrFvTl8M2WzbXbjWbNXeFs+H7xDslP48icieWpBg5X5vPBmdIEWu4vo7aLAU3O
vSEc1fXiAO0PwKi3Xgly5c0l9b3pla+mqU1h50MoD9u+PreKxD+YqzpgRT0zRWd1
0SoPRA94CZ+EtRrKp92rI6FVwc3vF6+b/z4aWKMk8p95tuJxhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5ptru0ex30OUOGxHKQ8vrNDJk0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMWIxNDc3YmUtNDg2MS0z
NGU5LWE4NGEtYjRlYTMzMzIzNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ9kSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjuYjpnCQv+t2DxFUbbUgP0YpsqsLoB4iHCfEKb2C2lK0TJkyvxpAem
KZ7YR9ooX9GJHe0+vRJvXOTqETEn6Jz9zoY6i+nSUrmxWGsLo37q1/PdnSnZy97Q
CsxEDbJvjfOmUlSgAN1AHP+lGNxP71pgGO6dg15KuCQbqEEBn2SO4W/PptwUI3b+
JhLjE5AOOvxLJQSaxwWam2eCT3r5xF9TWdscVeFBFFOWajsd1X7VBpr9Q7cdOwqg
bpoRb84NC0rMVfyvOg6AGIBA6DmbNAW6DkDHElEeVeIsOVBndShdqFg2mOjRbKn9
sC32z9Mrt3u3kD8eBvpBe40sprRdQ80=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:43 2025 by rpki-client