Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/db107b41-d5bb-3cf2-bf96-c7fcf663775f.roa
File:                     db107b41-d5bb-3cf2-bf96-c7fcf663775f.roa (raw, json)
Hash identifier:          Qx74rATY+mSzH28CVh/tgIh+9ANPp7zyG/AZ4uP2OSI=
Subject key identifier:   D3:35:5D:96:C5:E9:C9:FC:DD:7C:F5:32:59:76:76:D9:86:22:24:41
Certificate issuer:       /CN=b567f52f-9461-4275-9469-41dce04ed9a1
Certificate serial:       010D0C9F432858486D904580CDFD54CB04DA5480
Authority key identifier: FA:8D:C1:82:C3:0E:E4:EC:71:67:46:76:AE:7E:6C:59:72:20:17:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/db107b41-d5bb-3cf2-bf96-c7fcf663775f.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     397361
IP address blocks:        64.33.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:45:80:cd:fd:54:cb:04:da:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b567f52f-9461-4275-9469-41dce04ed9a1
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=96b6493c-b4ba-4747-bd94-8acac219a9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:cf:98:31:15:a8:a5:ec:f6:2f:4b:02:ce:
                    05:25:ad:d0:69:41:3e:1a:ee:b4:eb:ae:0b:12:b9:
                    40:d0:3e:09:22:7e:c4:2b:53:80:70:79:20:88:ca:
                    d4:0d:5c:ed:84:15:35:30:8c:dd:7e:52:ab:ea:6d:
                    8e:27:0c:80:c0:5e:89:13:bd:f8:36:c0:60:23:3c:
                    94:d5:04:6a:77:15:e3:6f:77:d8:92:ec:3a:33:ad:
                    f7:2f:67:c2:ae:7f:9a:9f:e8:7c:62:93:58:f2:08:
                    a0:c7:d4:90:c1:e7:6d:94:ab:24:7e:18:2f:7e:1f:
                    38:6f:ef:3c:56:c9:bc:57:49:46:4e:0a:3e:7f:ad:
                    2d:e9:03:dc:62:85:e7:6e:95:36:c0:1d:14:16:0f:
                    3e:96:a4:37:63:3c:4e:9c:25:b9:c7:ca:f3:9c:d3:
                    62:6b:1a:37:74:06:b9:7d:85:36:9b:47:6b:cb:a9:
                    34:03:db:e5:bd:73:92:29:85:e9:30:db:d7:74:ab:
                    dc:f0:41:95:3f:6b:6b:10:d2:fe:e6:a5:44:5a:8d:
                    f3:70:42:49:fc:de:c4:35:6d:e9:72:5d:c7:79:66:
                    4c:74:6e:20:9f:b1:fa:ba:5f:5d:3a:06:50:85:b0:
                    f0:dd:bc:1a:85:4b:ba:2b:c4:4e:40:ef:2a:7f:33:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:35:5D:96:C5:E9:C9:FC:DD:7C:F5:32:59:76:76:D9:86:22:24:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/db107b41-d5bb-3cf2-bf96-c7fcf663775f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/b567f52f-9461-4275-9469-41dce04ed9a1.crl

            X509v3 Authority Key Identifier:
                keyid:FA:8D:C1:82:C3:0E:E4:EC:71:67:46:76:AE:7E:6C:59:72:20:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:de:1a:97:e6:b4:dd:94:ee:02:71:bb:d8:59:b4:47:71:
         1f:a3:54:fc:54:44:43:d6:35:f9:fb:99:f9:25:76:c3:ba:80:
         ac:f6:bc:a8:a8:98:80:00:9c:91:23:00:6d:ba:67:16:4d:e1:
         7b:7e:30:5c:89:50:5b:0e:cd:a1:69:57:4b:49:4b:9d:d7:08:
         c3:5a:4e:72:cd:9e:60:17:0e:3a:dd:cb:93:55:e1:39:f1:f7:
         1b:4a:5f:c5:0d:a5:bc:30:7b:ca:75:fe:bd:5e:3e:4d:6f:07:
         0f:1f:ee:fb:74:60:fc:f4:7e:9d:42:47:08:3c:67:05:8c:2f:
         f2:2b:31:da:18:ba:92:fb:ca:2f:bc:9e:82:de:bf:2a:57:7e:
         d1:90:cc:18:fc:72:9f:f2:8b:07:cb:67:a0:85:a4:f3:90:58:
         ee:ea:52:ab:55:01:f4:c2:84:2d:57:0e:ba:d1:d2:61:8a:2a:
         a4:01:8a:22:ff:fa:62:12:5c:6c:a2:51:fa:5b:ea:9b:50:31:
         ed:50:4b:eb:86:b2:b1:64:78:fa:d7:60:0c:bb:88:87:30:0e:
         12:ce:97:03:ed:fb:54:9a:b6:0f:f2:6c:d2:6d:f7:a7:6d:7b:
         dc:e4:ad:7f:82:cd:1b:83:07:cc:d3:29:5d:ab:8a:a0:01:20:
         59:15:64:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkEWAzf1UywTaVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2N2Y1MmYtOTQ2MS00Mjc1LTk0NjktNDFkY2UwNGVk
OWExMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTZiNjQ5M2MtYjRiYS00NzQ3LWJkOTQtOGFjYWMyMTlhOWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIHPmDEVqKXs9i9LAs4FJa3QaUE+Gu60664L
ErlA0D4JIn7EK1OAcHkgiMrUDVzthBU1MIzdflKr6m2OJwyAwF6JE734NsBgIzyU
1QRqdxXjb3fYkuw6M633L2fCrn+an+h8YpNY8gigx9SQwedtlKskfhgvfh84b+88
Vsm8V0lGTgo+f60t6QPcYoXnbpU2wB0UFg8+lqQ3YzxOnCW5x8rznNNiaxo3dAa5
fYU2m0dry6k0A9vlvXOSKYXpMNvXdKvc8EGVP2trENL+5qVEWo3zcEJJ/N7ENW3p
cl3HeWZMdG4gn7H6ul9dOgZQhbDw3bwahUu6K8ROQO8qfzNZewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNM1XZbF6cn83Xz1Mll2dtmGIiRBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNTY3
ZjUyZi05NDYxLTQyNzUtOTQ2OS00MWRjZTA0ZWQ5YTEvZGIxMDdiNDEtZDViYi0z
Y2YyLWJmOTYtYzdmY2Y2NjM3NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjU2N2Y1MmYtOTQ2MS00Mjc1LTk0
NjktNDFkY2UwNGVkOWExL2I1NjdmNTJmLTk0NjEtNDI3NS05NDY5LTQxZGNlMDRl
ZDlhMS5jcmwwHwYDVR0jBBgwFoAU+o3BgsMO5OxxZ0Z2rn5sWXIgF30wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNTY3ZjUyZi05NDYxLTQyNzUtOTQ2OS00MWRj
ZTA0ZWQ5YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4l3hqX5rTdlO4CcbvYWbRHcR+jVPxUREPWNfn7mfkldsO6gKz2vKio
mIAAnJEjAG26ZxZN4Xt+MFyJUFsOzaFpV0tJS53XCMNaTnLNnmAXDjrdy5NV4Tnx
9xtKX8UNpbwwe8p1/r1ePk1vBw8f7vt0YPz0fp1CRwg8ZwWML/IrMdoYupL7yi+8
noLevypXftGQzBj8cp/yiwfLZ6CFpPOQWO7qUqtVAfTChC1XDrrR0mGKKqQBiiL/
+mISXGyiUfpb6ptQMe1QS+uGsrFkePrXYAy7iIcwDhLOlwPt+1Satg/ybNJt96dt
e9zkrX+CzRuDB8zTKV2riqABIFkVZBw=
-----END CERTIFICATE-----
Generated at Mon May 12 16:18:42 2025 by rpki-client