Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b574c0f5-cc72-3c73-a351-d71904dc03ad.roa
File:                     b574c0f5-cc72-3c73-a351-d71904dc03ad.roa (raw, json)
Hash identifier:          mdK1joEV+XGJoTGxztjDy5R+1p1b6oyieo6oc1z3UYg=
Subject key identifier:   D2:B2:F3:2C:DE:C3:6E:23:3C:68:69:EA:2A:E5:AF:2C:6F:4B:33:D6
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847F584F4D8DFBD92A0F214F780
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b574c0f5-cc72-3c73-a351-d71904dc03ad.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     397422
IP address blocks:        69.1.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:f4:d8:df:bd:92:a0:f2:14:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=923c3a30-bd49-4a7e-9ca5-897ecbc47438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:fd:66:d8:2d:7d:0f:aa:39:50:5f:b3:f4:
                    1e:58:30:3e:64:7f:47:4d:d0:c6:72:31:b4:03:01:
                    bc:c8:10:4a:ec:ab:95:84:c4:83:6a:ec:ca:ae:3d:
                    33:93:4a:a2:e1:ba:10:d6:dc:2d:27:00:05:37:7f:
                    f9:b4:e2:e8:16:af:8d:8d:ae:22:28:83:45:a2:7b:
                    98:f3:77:85:81:0b:d5:f9:21:5a:1f:b5:47:d0:e2:
                    20:ca:c3:12:f8:74:82:15:77:be:a7:0c:4e:4d:85:
                    38:ff:03:ad:12:f3:e1:5f:c4:77:8f:9b:e1:71:4c:
                    44:ce:47:ee:e8:03:de:30:d6:8e:46:19:67:d8:e7:
                    4b:a3:d1:2c:9a:db:1a:ba:88:ff:e4:2e:94:4b:fe:
                    a8:74:93:09:f9:d0:1d:75:4b:9f:9d:56:8c:c8:5e:
                    b8:e0:c9:7f:a2:b2:50:48:27:af:71:75:f4:22:8b:
                    aa:83:14:4c:94:5a:9b:e1:71:cf:26:48:24:29:63:
                    db:a4:26:80:d4:f8:3d:90:95:0d:8d:b1:60:cb:14:
                    37:43:0b:d8:bf:1a:5c:ba:a4:90:5b:c2:21:cb:5b:
                    73:fb:2d:65:79:62:3a:91:ba:a1:2e:76:8c:94:5b:
                    e7:a4:b5:28:24:41:d8:b7:f7:6b:b6:bd:48:8b:56:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B2:F3:2C:DE:C3:6E:23:3C:68:69:EA:2A:E5:AF:2C:6F:4B:33:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b574c0f5-cc72-3c73-a351-d71904dc03ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:81:78:97:ef:60:af:2b:46:f2:4d:f1:04:3c:7b:57:15:6e:
         39:1a:44:25:b1:6c:c2:d0:9b:2c:41:85:64:27:2a:3f:40:a8:
         6c:87:d2:4d:50:db:ba:6a:0f:4d:a0:ba:f1:9c:a3:47:7d:12:
         4b:d3:40:a8:32:65:b3:c0:48:ed:01:c3:74:10:e1:74:e4:5e:
         32:8b:d2:b1:fd:c8:f4:e0:a0:ee:18:ff:81:6a:aa:12:c8:08:
         d5:a3:56:c0:0e:7f:12:ba:c2:bf:de:8a:05:c8:32:55:e5:f7:
         d9:76:4b:30:cb:51:d6:28:a1:72:16:4e:6c:18:9c:61:4d:d2:
         ba:5f:ed:fa:b9:c9:70:46:b8:40:4a:ce:6b:e0:f6:26:d0:92:
         2d:e7:f7:9c:05:0c:b1:a3:ff:b8:8f:6d:65:7d:5f:ff:cf:05:
         97:86:06:17:3e:5a:b0:b2:eb:8a:b3:a4:9c:c6:86:c0:86:6f:
         a9:7d:9c:be:71:f2:ed:4e:f8:59:6b:4a:ad:a1:a2:86:09:96:
         c4:11:16:8a:a7:7c:ef:c9:3f:56:b7:c3:35:91:b6:57:97:5a:
         ce:78:44:7e:4d:32:f5:c5:5e:16:63:c1:ef:3b:d9:08:f3:11:
         5c:58:64:f6:8f:59:a7:5a:76:1b:23:20:b7:73:e1:ef:78:8a:
         e3:d6:0b:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf1hPTY372SoPIU94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk
OTIzYzNhMzAtYmQ0OS00YTdlLTljYTUtODk3ZWNiYzQ3NDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAter9ZtgtfQ+qOVBfs/QeWDA+ZH9HTdDGcjG0
AwG8yBBK7KuVhMSDauzKrj0zk0qi4boQ1twtJwAFN3/5tOLoFq+Nja4iKINFonuY
83eFgQvV+SFaH7VH0OIgysMS+HSCFXe+pwxOTYU4/wOtEvPhX8R3j5vhcUxEzkfu
6APeMNaORhln2OdLo9Esmtsauoj/5C6US/6odJMJ+dAddUufnVaMyF644Ml/orJQ
SCevcXX0IouqgxRMlFqb4XHPJkgkKWPbpCaA1Pg9kJUNjbFgyxQ3QwvYvxpcuqSQ
W8Ihy1tz+y1leWI6kbqhLnaMlFvnpLUoJEHYt/drtr1Ii1YI/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKy8yzew24jPGhp6irlryxvSzPWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYjU3NGMwZjUtY2M3Mi0z
YzczLWEzNTEtZDcxOTA0ZGMwM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQFyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCBeJfvYK8rRvJN8QQ8e1cVbjkaRCWxbMLQmyxBhWQnKj9AqGyH0k1Q
27pqD02guvGco0d9EkvTQKgyZbPASO0Bw3QQ4XTkXjKL0rH9yPTgoO4Y/4FqqhLI
CNWjVsAOfxK6wr/eigXIMlXl99l2SzDLUdYooXIWTmwYnGFN0rpf7fq5yXBGuEBK
zmvg9ibQki3n95wFDLGj/7iPbWV9X//PBZeGBhc+WrCy64qzpJzGhsCGb6l9nL5x
8u1O+FlrSq2hooYJlsQRFoqnfO/JP1a3wzWRtleXWs54RH5NMvXFXhZjwe872Qjz
EVxYZPaPWadadhsjILdz4e94iuPWC34=
-----END CERTIFICATE-----
Generated at Sat May 10 10:10:04 2025 by rpki-client