Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/b830bb09-441e-3d90-85c0-99ed71209328.roa
File:                     b830bb09-441e-3d90-85c0-99ed71209328.roa (raw, json)
Hash identifier:          nb7bp0lUfVeCteDSse1xA6dkOoygWEjWApSK++3X2pE=
Subject key identifier:   79:0B:68:82:82:28:15:79:0D:2D:0E:33:DD:9B:A0:78:F6:A7:8A:40
Certificate issuer:       /CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
Certificate serial:       010D0C9F4328584851A5748C42CB7C1A38E94350
Authority key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/b830bb09-441e-3d90-85c0-99ed71209328.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     22215
IP address blocks:        198.177.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:74:8c:42:cb:7c:1a:38:e9:43:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=ed521604-9f26-407e-be8f-ef434e0f1e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:43:9e:d5:05:c5:7b:77:e2:9a:66:56:cf:02:
                    87:fa:75:0a:22:3f:85:8f:5c:d2:85:66:61:ab:da:
                    11:d0:24:b1:24:b6:88:a3:04:47:c4:56:f5:b5:fc:
                    39:ee:53:0a:71:b4:78:70:02:48:1a:7e:b5:62:89:
                    87:81:d1:fe:97:80:d7:78:b2:e0:1a:0b:ce:5a:3e:
                    26:bf:b6:4f:87:12:03:d9:3a:e3:cc:be:ee:83:46:
                    de:8b:1f:b5:94:5f:9b:b3:55:d0:dc:59:de:37:d8:
                    6d:9e:8e:32:71:13:a3:a6:d1:47:c0:58:5a:b9:83:
                    8e:2d:86:f3:05:a3:77:6e:5c:ac:a8:66:d5:eb:f0:
                    69:fb:a3:5e:ac:5e:45:74:7a:56:ea:ee:e4:7a:f2:
                    fd:53:e6:c9:58:2e:6b:2b:2d:d4:e1:34:e3:76:ee:
                    fc:c6:9c:e9:06:a4:fa:a5:18:8e:26:ef:7d:93:be:
                    29:29:a2:a3:0e:66:b1:cc:c9:e5:69:ef:8d:74:50:
                    4b:39:36:6d:3d:cd:cf:ad:20:b2:dc:3c:c3:db:e0:
                    3d:36:74:45:17:14:37:31:d8:ec:fc:aa:8b:51:35:
                    56:19:17:f2:c7:3e:99:17:d2:76:a3:99:19:1e:fc:
                    84:0c:32:42:81:5c:77:36:b8:fb:f7:04:91:e7:b1:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0B:68:82:82:28:15:79:0D:2D:0E:33:DD:9B:A0:78:F6:A7:8A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/b830bb09-441e-3d90-85c0-99ed71209328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl

            X509v3 Authority Key Identifier:
                keyid:0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:8d:a9:43:6b:a7:47:ca:09:14:03:41:b9:d5:b2:04:94:29:
         9b:4a:f0:e4:1c:ac:ec:1d:ed:b8:56:39:f6:4a:11:23:ed:36:
         b1:c9:0d:34:ae:90:66:ac:c7:fe:c6:05:29:f3:e9:cc:25:ea:
         db:32:ae:d9:42:37:f2:f7:f2:aa:ec:8c:39:60:09:ee:1c:68:
         2a:6a:d3:78:19:d6:de:5e:5a:60:4c:23:bd:99:d8:98:67:44:
         41:b8:41:73:15:46:d6:bb:93:60:4c:ab:58:43:fd:fc:82:e2:
         da:b5:ea:bf:3c:3b:9d:ae:11:fc:6d:2b:e8:55:73:e9:0b:de:
         d6:6d:d7:54:87:d6:bb:12:88:8c:41:f6:14:c9:5b:51:be:26:
         bf:6c:f1:c3:fb:8b:06:c4:5a:42:83:45:f6:68:ab:52:c2:54:
         43:6d:ae:0d:8d:a2:e3:2b:ee:14:a3:fd:00:56:d5:91:d8:08:
         22:e3:60:32:e2:fc:5a:fe:8b:5f:25:c0:65:59:97:fa:a6:d9:
         6f:70:0e:bb:80:18:14:d3:70:47:cc:90:81:53:9b:00:34:09:
         11:e3:e3:15:25:3a:c9:bc:7d:ca:a5:c1:50:07:86:70:7f:b4:
         4f:69:c3:c4:dc:65:0a:c0:9a:a2:60:c2:03:c9:21:66:30:bc:
         3a:a4:09:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXSMQst8GjjpQ1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNiMGE1OTctZjZlYi00Yzk3LWFhNmMtMzZkMDRiZDdj
MmQxMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
ZWQ1MjE2MDQtOWYyNi00MDdlLWJlOGYtZWY0MzRlMGYxZTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0Oe1QXFe3fimmZWzwKH+nUKIj+Fj1zShWZh
q9oR0CSxJLaIowRHxFb1tfw57lMKcbR4cAJIGn61YomHgdH+l4DXeLLgGgvOWj4m
v7ZPhxID2TrjzL7ug0beix+1lF+bs1XQ3FneN9htno4ycROjptFHwFhauYOOLYbz
BaN3blysqGbV6/Bp+6NerF5FdHpW6u7kevL9U+bJWC5rKy3U4TTjdu78xpzpBqT6
pRiOJu99k74pKaKjDmaxzMnlae+NdFBLOTZtPc3PrSCy3DzD2+A9NnRFFxQ3Mdjs
/KqLUTVWGRfyxz6ZF9J2o5kZHvyEDDJCgVx3Nrj79wSR57G7kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHkLaIKCKBV5DS0OM92boHj2p4pAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Iw
YTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJkN2MyZDEvYjgzMGJiMDktNDQxZS0z
ZDkwLTg1YzAtOTllZDcxMjA5MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNiMGE1OTctZjZlYi00Yzk3LWFh
NmMtMzZkMDRiZDdjMmQxL2RjYjBhNTk3LWY2ZWItNGM5Ny1hYTZjLTM2ZDA0YmQ3
YzJkMS5jcmwwHwYDVR0jBBgwFoAUCk3RL4DlL9n5CrZdj//AsSxmWLUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQw
NGJkN2MyZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrGaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJuNqUNrp0fKCRQDQbnVsgSUKZtK8OQcrOwd7bhWOfZKESPtNrHJDTSu
kGasx/7GBSnz6cwl6tsyrtlCN/L38qrsjDlgCe4caCpq03gZ1t5eWmBMI72Z2Jhn
REG4QXMVRta7k2BMq1hD/fyC4tq16r88O52uEfxtK+hVc+kL3tZt11SH1rsSiIxB
9hTJW1G+Jr9s8cP7iwbEWkKDRfZoq1LCVENtrg2NouMr7hSj/QBW1ZHYCCLjYDLi
/Fr+i18lwGVZl/qm2W9wDruAGBTTcEfMkIFTmwA0CRHj4xUlOsm8fcqlwVAHhnB/
tE9pw8TcZQrAmqJgwgPJIWYwvDqkCdg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:48 2025 by rpki-client