Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/1ad21c0b-e01c-3049-a221-0f6391386cb6.roa
File:                     1ad21c0b-e01c-3049-a221-0f6391386cb6.roa (raw, json)
Hash identifier:          RoYdneC+YH+J0kPrURqXzY8x16bSyk282L04w425M+Y=
Subject key identifier:   A5:B5:3B:65:78:1A:31:0A:A3:C1:C0:E4:9F:D8:E8:08:AB:E9:83:C3
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F43285847FDE4DAACA644881B13F4CEC0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/1ad21c0b-e01c-3049-a221-0f6391386cb6.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     19901
IP address blocks:        143.103.128.0/20 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:da:ac:a6:44:88:1b:13:f4:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=84aa1fe1-051d-4f38-946d-22b0fbec9cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:9a:72:00:fe:d7:61:17:7c:a2:c9:01:fb:
                    f5:6e:17:95:a1:71:ea:8e:bc:40:4d:60:42:a3:96:
                    39:24:58:1f:d2:87:a9:10:4e:8d:2a:83:59:30:78:
                    9b:59:de:dd:e7:7e:24:71:18:54:8e:ef:7e:19:00:
                    d0:cd:40:49:f1:d4:d6:e5:15:bb:88:7e:3f:c3:94:
                    c7:be:9c:6c:ca:14:79:bf:8f:6e:8e:e7:ea:12:9a:
                    4c:d5:7c:e5:f9:33:55:9b:5e:10:87:f6:9e:03:00:
                    e8:4b:ea:6c:da:e7:81:a9:0e:df:1d:5d:de:78:19:
                    91:0b:0b:7b:dd:bd:29:13:8b:ea:4f:bf:72:32:dc:
                    d0:bb:30:fa:1e:ce:f2:c1:1c:dd:53:04:40:34:3d:
                    f1:ba:04:42:4e:28:08:00:c2:64:97:ac:c1:3d:1b:
                    96:f8:d5:95:96:2f:a8:2f:09:90:87:46:2b:cd:1b:
                    b6:5e:b7:bb:b2:8f:4b:c2:3c:81:16:b3:0b:87:93:
                    9b:ce:67:00:8c:93:63:80:78:ab:91:fc:2e:96:d5:
                    c5:1d:7a:f8:b6:98:8d:74:3e:d3:23:f4:3d:9a:bc:
                    d2:b0:79:16:10:ff:36:4a:8a:81:c9:95:4a:95:75:
                    71:69:70:1d:c7:54:74:4d:7f:ea:dd:4b:3d:d0:a3:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B5:3B:65:78:1A:31:0A:A3:C1:C0:E4:9F:D8:E8:08:AB:E9:83:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/1ad21c0b-e01c-3049-a221-0f6391386cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:be:98:9f:c5:00:28:21:72:02:ae:d8:e5:e2:c1:77:e0:
         5f:29:b3:92:83:f6:82:25:3b:01:6e:a0:21:ed:42:d8:4a:d6:
         bc:65:23:48:7a:69:9c:70:de:d8:2b:bd:04:cf:e2:cd:a1:28:
         d8:58:21:55:6f:9c:03:45:94:50:a4:b8:37:b7:1d:26:a0:65:
         9d:03:f1:dc:dc:68:11:86:e5:45:58:fc:ca:a1:60:df:00:6f:
         b5:42:90:0f:be:c9:2f:23:96:ff:8b:a3:a1:80:3c:d0:d6:b0:
         18:0f:4a:e5:e7:6e:45:8a:68:26:81:db:c3:e4:cf:7c:93:0b:
         37:b3:30:5b:42:dd:63:a4:77:98:c6:5a:03:c8:14:24:e4:23:
         6d:ed:d0:1d:62:6f:fa:5a:3b:de:db:b2:1a:c5:88:95:52:da:
         f6:f3:10:37:2b:15:bb:43:5e:25:18:1f:32:4e:59:7c:ed:d8:
         8e:4b:5a:40:1e:14:f0:09:f0:30:37:11:e3:4c:10:36:d2:e5:
         6b:92:a8:20:49:33:27:dc:ce:9c:ad:99:1d:a4:35:37:eb:24:
         16:40:54:91:0c:23:f1:85:51:ac:5c:3c:5d:5c:b4:cd:d7:0b:
         70:c0:09:99:3e:02:67:ff:83:7b:2d:28:0e:93:0f:47:ef:d3:
         42:ca:f2:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf95NqspkSIGxP0zsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI0MTEyNTAyMDAyOFoXDTI1MDIyMzAyMDAyOFowLzEtMCsGA1UEAxMk
ODRhYTFmZTEtMDUxZC00ZjM4LTk0NmQtMjJiMGZiZWM5Y2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxSacgD+12EXfKLJAfv1bheVoXHqjrxATWBC
o5Y5JFgf0oepEE6NKoNZMHibWd7d534kcRhUju9+GQDQzUBJ8dTW5RW7iH4/w5TH
vpxsyhR5v49ujufqEppM1Xzl+TNVm14Qh/aeAwDoS+ps2ueBqQ7fHV3eeBmRCwt7
3b0pE4vqT79yMtzQuzD6Hs7ywRzdUwRAND3xugRCTigIAMJkl6zBPRuW+NWVli+o
LwmQh0YrzRu2Xre7so9LwjyBFrMLh5ObzmcAjJNjgHirkfwultXFHXr4tpiNdD7T
I/Q9mrzSsHkWEP82SoqByZVKlXVxaXAdx1R0TX/q3Us90KOUlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKW1O2V4GjEKo8HA5J/Y6Air6YPDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvMWFkMjFjMGItZTAxYy0z
MDQ5LWEyMjEtMGY2MzkxMzg2Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj2eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPzvpifxQAoIXICrtjl4sF34F8ps5KD9oIlOwFuoCHtQthK1rxlI0h6
aZxw3tgrvQTP4s2hKNhYIVVvnANFlFCkuDe3HSagZZ0D8dzcaBGG5UVY/MqhYN8A
b7VCkA++yS8jlv+Lo6GAPNDWsBgPSuXnbkWKaCaB28Pkz3yTCzezMFtC3WOkd5jG
WgPIFCTkI23t0B1ib/paO97bshrFiJVS2vbzEDcrFbtDXiUYHzJOWXzt2I5LWkAe
FPAJ8DA3EeNMEDbS5WuSqCBJMyfczpytmR2kNTfrJBZAVJEMI/GFUaxcPF1ctM3X
C3DACZk+Amf/g3stKA6TD0fv00LK8n4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:33 2025 by rpki-client