Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa
File:                     e3797bcd-705e-363c-b104-8d569e2486fb.roa (raw, json)
Hash identifier:          3IMmDs0ocax3FArzLipn892QueU8Fcjy4hbhy+59rHU=
Subject key identifier:   60:77:9D:9D:34:E0:60:11:85:D7:8F:76:E5:CA:28:2F:2B:7E:12:6E
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858488EDCFA715CD782385FF8D260
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa
Signing time:             Thu 16 Jan 2025 00:16:55 +0000
ROA not before:           Thu 16 Jan 2025 00:16:55 +0000
ROA not after:            Tue 15 Apr 2025 23:16:55 +0000
asID:                     36691
IP address blocks:        192.55.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8e:dc:fa:71:5c:d7:82:38:5f:f8:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jan 16 00:16:55 2025 GMT
            Not After : Apr 15 23:16:55 2025 GMT
        Subject: CN=c8b04ebb-f370-4275-ad60-2eb6ac1b4021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:75:66:61:75:da:9b:0b:1c:0b:c2:3a:44:
                    61:33:8e:0c:e7:83:d0:c2:c8:65:a9:d9:46:4b:e6:
                    c4:ed:49:51:bc:b9:0e:ea:e0:e9:c3:f6:e1:29:65:
                    3c:35:5c:e5:7a:1d:71:e1:dc:53:d3:81:7f:14:97:
                    0a:20:0f:0d:ad:8f:27:02:54:fa:58:8f:f9:d4:c2:
                    29:fa:95:05:4d:84:71:f5:c6:00:cb:d2:13:f1:0a:
                    c4:84:7d:0a:3d:70:82:5c:48:77:80:72:9d:74:52:
                    ff:93:4f:31:63:9c:81:8a:b0:8b:4d:07:e8:8c:3a:
                    88:4f:cd:72:c9:76:22:6a:b6:bf:d2:6f:4b:ca:0a:
                    62:08:6a:07:2b:7c:22:fb:93:82:ae:70:79:07:71:
                    e8:55:35:7e:54:52:79:95:1c:f9:8f:06:b9:76:6c:
                    50:c1:a4:80:f9:54:9c:35:95:32:f3:b9:ce:9d:64:
                    a0:b6:e5:bb:d7:73:4a:bc:43:77:86:ca:e7:22:2a:
                    a9:74:c4:d2:37:9b:78:ba:35:33:8d:84:75:2e:8f:
                    28:7c:f1:26:7b:ba:e4:5e:cb:25:cf:28:b0:f8:3d:
                    5b:da:5a:1e:fb:71:3f:9b:be:ea:d1:7f:08:06:71:
                    cf:0e:26:71:ec:e3:df:ad:cd:21:50:11:f0:2c:fc:
                    60:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:77:9D:9D:34:E0:60:11:85:D7:8F:76:E5:CA:28:2F:2B:7E:12:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:de:78:21:af:f1:02:d2:eb:10:aa:6c:3d:1d:e3:47:05:
         4f:f8:fb:96:88:99:3a:ef:2f:ff:88:b4:ec:5d:26:7e:73:c6:
         75:1a:4b:74:09:1e:9d:20:30:03:c4:02:cd:a2:9b:4b:b9:a0:
         c7:71:89:c6:29:f3:01:27:49:54:4c:6c:99:b9:b1:2f:ff:b6:
         47:15:25:f3:bb:6b:9a:cf:20:2b:2d:9a:ca:24:2c:19:b0:28:
         42:87:6c:d8:22:7e:8e:1b:9a:50:07:41:21:6a:c3:69:d6:24:
         2c:c0:d8:6a:79:bb:c5:73:b4:9b:83:d1:dd:2c:fc:84:2a:81:
         60:23:3f:28:b9:32:f8:b1:95:16:61:26:12:1e:cf:dd:20:c0:
         20:54:de:53:93:ff:52:70:25:6f:9b:50:c6:65:49:56:c7:2a:
         dd:43:18:ca:98:c8:55:e1:d1:95:d2:8f:51:1a:c9:d4:60:3f:
         be:f4:6e:fa:26:9b:a6:75:16:43:04:b0:05:46:af:9b:c5:d7:
         c6:3e:38:12:87:fc:6b:4d:1a:16:ef:a1:55:dc:fa:fa:6e:06:
         d9:f9:30:15:43:2c:6a:80:7a:37:ad:da:ce:14:6b:65:a5:bd:
         02:bf:28:ae:b2:fe:92:a3:e8:e0:12:b7:47:ce:35:74:7a:f0:
         eb:88:18:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiO3PpxXNeCOF/40mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy
ZmQ1MB4XDTI1MDExNjAwMTY1NVoXDTI1MDQxNTIzMTY1NVowLzEtMCsGA1UEAxMk
YzhiMDRlYmItZjM3MC00Mjc1LWFkNjAtMmViNmFjMWI0MDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq751ZmF12psLHAvCOkRhM44M54PQwshlqdlG
S+bE7UlRvLkO6uDpw/bhKWU8NVzleh1x4dxT04F/FJcKIA8NrY8nAlT6WI/51MIp
+pUFTYRx9cYAy9IT8QrEhH0KPXCCXEh3gHKddFL/k08xY5yBirCLTQfojDqIT81y
yXYiara/0m9LygpiCGoHK3wi+5OCrnB5B3HoVTV+VFJ5lRz5jwa5dmxQwaSA+VSc
NZUy87nOnWSgtuW713NKvEN3hsrnIiqpdMTSN5t4ujUzjYR1Lo8ofPEme7rkXssl
zyiw+D1b2loe+3E/m77q0X8IBnHPDiZx7OPfrc0hUBHwLPxgIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGB3nZ004GARhdePduXKKC8rfhJuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy
ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvZTM3OTdiY2QtNzA1ZS0z
NjNjLWIxMDQtOGQ1NjllMjQ4NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5
ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl
MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2
ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDflMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzX3nghr/EC0usQqmw9HeNHBU/4+5aImTrvL/+ItOxdJn5zxnUaS3QJ
Hp0gMAPEAs2im0u5oMdxicYp8wEnSVRMbJm5sS//tkcVJfO7a5rPICstmsokLBmw
KEKHbNgifo4bmlAHQSFqw2nWJCzA2Gp5u8VztJuD0d0s/IQqgWAjPyi5MvixlRZh
JhIez90gwCBU3lOT/1JwJW+bUMZlSVbHKt1DGMqYyFXh0ZXSj1EaydRgP770bvom
m6Z1FkMEsAVGr5vF18Y+OBKH/GtNGhbvoVXc+vpuBtn5MBVDLGqAejet2s4Ua2Wl
vQK/KK6y/pKj6OASt0fONXR68OuIGOg=
-----END CERTIFICATE-----
Generated at Mon May 5 04:39:01 2025 by rpki-client