Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d4011818-39de-3ba8-ac14-669bf6aa97a1.roa
File:                     d4011818-39de-3ba8-ac14-669bf6aa97a1.roa (raw, json)
Hash identifier:          MgrOyaRQQePib3WT8DGY6LMjg9OR1hfiGAMqVGIOCHA=
Subject key identifier:   40:29:46:CF:D0:A1:CC:3C:E1:99:3F:94:04:71:39:77:26:8E:DD:6F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B500F0A254BEE8AFC053BF0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d4011818-39de-3ba8-ac14-669bf6aa97a1.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        2001:4c8:1093::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0f:0a:25:4b:ee:8a:fc:05:3b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=61805377-53da-4312-bc3c-6bc12d966b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:f1:8e:a0:2b:f1:a0:3d:68:06:ca:3b:f8:
                    0e:7f:1e:d1:36:c2:26:d8:8e:73:8b:f0:a7:c0:b4:
                    cc:4b:8e:72:bc:f0:e8:95:0c:c9:c1:25:0e:37:2e:
                    f3:a4:b9:e2:3d:2a:a7:09:05:ed:8d:83:ee:88:0b:
                    78:a4:88:e4:14:7c:83:82:ec:7b:c5:4f:bd:12:a2:
                    4c:1d:6d:18:36:f0:bc:39:3e:49:4b:f9:04:b5:00:
                    16:71:25:66:b8:8e:e8:6e:72:e0:99:8a:b0:aa:33:
                    1d:04:55:6d:36:f2:03:10:ed:be:be:59:10:f1:78:
                    d9:30:31:59:a5:17:d6:6b:4d:ae:21:cf:df:bc:ae:
                    9e:1d:68:35:4a:41:5d:a7:36:34:08:66:bb:ee:1b:
                    98:0e:22:75:a7:db:e6:d7:d4:08:59:73:d8:e3:66:
                    44:b3:c4:97:01:4f:ac:57:e2:57:82:ae:2b:b1:c2:
                    94:f1:82:46:d4:62:18:20:64:b9:91:00:ad:ff:e1:
                    11:ad:bc:d8:fc:56:50:b2:8d:2e:54:50:4b:93:13:
                    90:2c:96:ec:27:90:f9:91:e7:4b:27:51:cc:68:b2:
                    d2:b2:77:97:b2:9a:53:ac:5d:2c:e5:f2:2a:db:df:
                    11:ac:46:2b:ab:b4:f8:14:40:d0:60:8b:53:da:e0:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:29:46:CF:D0:A1:CC:3C:E1:99:3F:94:04:71:39:77:26:8E:DD:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d4011818-39de-3ba8-ac14-669bf6aa97a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:78:6d:dc:06:a0:fc:89:a9:bb:fa:92:d1:41:63:a3:8a:9d:
         b7:a2:76:02:3e:51:aa:12:2a:3f:4e:c4:4d:70:74:2f:8e:19:
         36:b0:a7:db:a5:7e:03:c1:4c:fd:4a:1c:c6:5f:66:65:ce:ae:
         0b:9e:43:ef:84:2b:ec:97:08:28:44:0e:7b:94:f0:5b:17:77:
         81:11:d2:7a:65:88:e7:1e:96:4d:b5:60:21:6f:43:30:77:f3:
         fd:3e:24:23:dc:02:c4:d8:aa:a0:6f:48:75:ce:b8:27:00:be:
         70:48:04:07:15:c0:63:6b:74:40:cb:51:d0:93:9e:9f:03:da:
         bb:f2:30:17:4a:be:1c:4a:dc:de:bb:07:c6:48:e5:60:d3:9d:
         64:4e:88:64:e2:18:88:1a:eb:65:5b:20:51:50:ca:c3:40:e5:
         96:a7:b9:4e:af:6c:ef:fe:17:6f:6b:22:cd:a9:71:1c:d6:45:
         25:1a:68:41:56:2c:7c:5a:03:a5:b5:1f:75:49:45:9a:9c:aa:
         8a:1a:f3:f3:6a:a0:c3:16:be:8c:1b:eb:14:7a:d3:37:96:fa:
         74:f8:07:a7:57:96:08:1a:6d:cd:3d:d4:46:c7:31:57:0f:3d:
         3b:66:5c:0f:1a:1d:6e:73:f3:3b:04:ea:3c:27:52:d6:fd:f7:
         dd:06:b8:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg7UA8KJUvuivwFO/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
NjE4MDUzNzctNTNkYS00MzEyLWJjM2MtNmJjMTJkOTY2YjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/3xjqAr8aA9aAbKO/gOfx7RNsIm2I5zi/Cn
wLTMS45yvPDolQzJwSUONy7zpLniPSqnCQXtjYPuiAt4pIjkFHyDgux7xU+9EqJM
HW0YNvC8OT5JS/kEtQAWcSVmuI7obnLgmYqwqjMdBFVtNvIDEO2+vlkQ8XjZMDFZ
pRfWa02uIc/fvK6eHWg1SkFdpzY0CGa77huYDiJ1p9vm19QIWXPY42ZEs8SXAU+s
V+JXgq4rscKU8YJG1GIYIGS5kQCt/+ERrbzY/FZQso0uVFBLkxOQLJbsJ5D5kedL
J1HMaLLSsneXsppTrF0s5fIq298RrEYrq7T4FEDQYItT2uB97wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEApRs/Qocw84Zk/lARxOXcmjt1vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvZDQwMTE4MTgtMzlkZS0z
YmE4LWFjMTQtNjY5YmY2YWE5N2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBCT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGJ4bdwGoPyJqbv6ktFBY6OKnbeidgI+UaoSKj9OxE1wdC+OGTaw
p9ulfgPBTP1KHMZfZmXOrgueQ++EK+yXCChEDnuU8FsXd4ER0npliOcelk21YCFv
QzB38/0+JCPcAsTYqqBvSHXOuCcAvnBIBAcVwGNrdEDLUdCTnp8D2rvyMBdKvhxK
3N67B8ZI5WDTnWROiGTiGIga62VbIFFQysNA5ZanuU6vbO/+F29rIs2pcRzWRSUa
aEFWLHxaA6W1H3VJRZqcqooa8/NqoMMWvowb6xR60zeW+nT4B6dXlggabc091EbH
MVcPPTtmXA8aHW5z8zsE6jwnUtb9990GuAE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:35 2025 by rpki-client