Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa
File:                     e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa (raw, json)
Hash identifier:          iL1+gxybmpUSwu17A03Q9u1v8I8rThiTrH9EPL8sg2I=
Subject key identifier:   8C:A1:59:86:D1:62:20:64:E6:AF:D3:C8:0D:40:38:F2:D6:95:A3:B2
Certificate issuer:       /CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
Certificate serial:       010D0C9F43285847E35F730E00BB8248B2BBDF00
Authority key identifier: 71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     15296
IP address blocks:        198.161.120.0/24 maxlen: 24
                          198.161.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:73:0e:00:bb:82:48:b2:bb:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=8d60aee4-2e19-44e8-912c-f700e19f0bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:d5:06:a2:f6:37:b4:17:60:f9:5a:d2:ea:
                    65:b5:db:65:68:14:dc:09:07:a9:16:af:59:97:03:
                    bd:9b:c2:50:2d:2f:5e:a0:05:e6:8c:ae:59:65:4b:
                    05:6a:3d:5e:80:cf:73:09:8c:30:bc:df:31:ea:95:
                    29:af:82:85:f5:33:eb:ba:95:4c:2e:44:fb:aa:e9:
                    7a:e0:83:63:eb:d5:cd:ac:0d:d7:ba:6d:ec:63:e0:
                    79:8d:51:59:43:09:98:92:40:f5:39:5c:92:4b:1b:
                    ec:e5:b6:0c:5f:d6:2c:e6:09:51:13:54:46:bf:d0:
                    a1:8b:c0:f1:2b:64:e6:cd:25:7d:84:df:76:87:bc:
                    5a:69:7f:dc:8b:00:23:1c:a0:cc:6f:6a:a4:00:a8:
                    7c:68:7a:1b:c1:86:70:59:c0:f0:ef:99:29:bf:9a:
                    fe:8f:b0:69:a6:49:26:94:03:94:f4:b3:92:e7:42:
                    18:44:69:07:93:58:03:f8:2f:e9:80:5b:f0:76:d2:
                    2d:43:a7:ea:4c:c6:ac:e9:cf:94:82:32:11:e2:cb:
                    80:a2:70:3a:8b:4d:a4:5b:f6:14:6f:42:7a:55:32:
                    6f:2e:6e:f1:1d:34:43:41:8a:a2:6d:5e:2b:30:21:
                    53:1c:7e:fc:10:b1:7e:a5:2a:8d:08:ed:92:75:0d:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A1:59:86:D1:62:20:64:E6:AF:D3:C8:0D:40:38:F2:D6:95:A3:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl

            X509v3 Authority Key Identifier:
                keyid:71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:4b:18:54:aa:3d:96:1a:e6:46:51:70:1a:e2:df:92:f3:
         d7:c8:3a:a9:02:25:f9:b2:b2:e3:0e:d5:a4:b3:4b:f0:86:76:
         60:86:6f:2b:04:96:7c:ef:a1:e1:50:3c:1d:36:ab:f9:46:8c:
         52:5e:dc:0f:1c:cb:97:bd:c8:65:0a:87:9f:6d:e3:ad:80:04:
         fe:47:ed:bb:f4:99:b0:2d:08:51:3d:c1:66:3f:0f:d8:40:61:
         44:df:88:e8:e3:e7:f4:92:b6:4a:f9:ab:52:16:f8:2a:99:83:
         3f:d2:d4:2c:c4:bb:13:1c:39:95:08:78:b0:96:51:9f:8b:f3:
         09:70:a2:88:fa:41:fd:5e:ad:14:fd:02:75:24:a8:f4:8b:72:
         df:9e:40:39:ee:a3:46:51:22:18:79:6c:5e:f4:31:c0:a1:9f:
         55:6e:d5:66:80:2d:e3:fb:36:e1:2a:98:f5:fa:94:77:68:05:
         5b:71:c8:cc:3d:36:07:e9:80:e2:54:40:b6:16:6d:90:21:66:
         80:7e:9f:fa:79:97:d9:90:5b:c7:fa:ad:8d:e8:c9:c3:17:fa:
         02:f6:ce:78:4b:7a:a8:95:01:98:b7:82:2d:27:82:e5:03:10:
         70:4e:9c:33:45:c9:aa:5d:47:85:93:9a:74:49:18:53:f2:54:
         e4:d8:ca:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX3MOALuCSLK73wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTU1NGNjOTEtYTJjYy00YTBkLTk5ODktZjI0YTVjMThk
Yjk5MB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
OGQ2MGFlZTQtMmUxOS00NGU4LTkxMmMtZjcwMGUxOWYwYmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIjVBqL2N7QXYPla0upltdtlaBTcCQepFq9Z
lwO9m8JQLS9eoAXmjK5ZZUsFaj1egM9zCYwwvN8x6pUpr4KF9TPrupVMLkT7qul6
4INj69XNrA3Xum3sY+B5jVFZQwmYkkD1OVySSxvs5bYMX9Ys5glRE1RGv9Chi8Dx
K2TmzSV9hN92h7xaaX/ciwAjHKDMb2qkAKh8aHobwYZwWcDw75kpv5r+j7Bppkkm
lAOU9LOS50IYRGkHk1gD+C/pgFvwdtItQ6fqTMas6c+UgjIR4suAonA6i02kW/YU
b0J6VTJvLm7xHTRDQYqibV4rMCFTHH78ELF+pSqNCO2SdQ3gAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIyhWYbRYiBk5q/TyA1AOPLWlaOyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hNTU0
Y2M5MS1hMmNjLTRhMGQtOTk4OS1mMjRhNWMxOGRiOTkvZTg4NDRiYzgtZTliYy0z
NjA0LWFlNGEtZjYzNjU3OGNkYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTU1NGNjOTEtYTJjYy00YTBkLTk5
ODktZjI0YTVjMThkYjk5L2E1NTRjYzkxLWEyY2MtNGEwZC05OTg5LWYyNGE1YzE4
ZGI5OS5jcmwwHwYDVR0jBBgwFoAUcT0g6HqJKj31GD0PBCD8LPBMvmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hNTU0Y2M5MS1hMmNjLTRhMGQtOTk4OS1mMjRh
NWMxOGRiOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeMSxhUqj2WGuZGUXAa4t+S89fIOqkCJfmysuMO1aSzS/CGdmCGbysE
lnzvoeFQPB02q/lGjFJe3A8cy5e9yGUKh59t462ABP5H7bv0mbAtCFE9wWY/D9hA
YUTfiOjj5/SStkr5q1IW+CqZgz/S1CzEuxMcOZUIeLCWUZ+L8wlwooj6Qf1erRT9
AnUkqPSLct+eQDnuo0ZRIhh5bF70McChn1Vu1WaALeP7NuEqmPX6lHdoBVtxyMw9
NgfpgOJUQLYWbZAhZoB+n/p5l9mQW8f6rY3oycMX+gL2znhLeqiVAZi3gi0nguUD
EHBOnDNFyapdR4WTmnRJGFPyVOTYyhM=
-----END CERTIFICATE-----
Generated at Mon May 12 13:54:38 2025 by rpki-client