Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b0fa4d22-50ae-320b-8e44-4fbd3e443842.roa
File:                     b0fa4d22-50ae-320b-8e44-4fbd3e443842.roa (raw, json)
Hash identifier:          Um/0M6/6ZQZWFdTE421DlgOKo+6sbW8a9iHKGjfEp28=
Subject key identifier:   DB:A2:80:C8:6A:9F:8C:EA:47:9A:55:05:6A:7F:0D:86:31:DC:69:35
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A4EAA6F70FA9346ACB7C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b0fa4d22-50ae-320b-8e44-4fbd3e443842.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     7843
IP address blocks:        66.61.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:4e:aa:6f:70:fa:93:46:ac:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=74297714-3a65-424b-b6d5-e35e1e9a2bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:83:93:2f:5c:78:c3:1f:31:e8:fa:df:20:
                    72:7c:f1:14:b5:77:3c:f8:86:04:94:77:da:6f:c2:
                    73:94:86:f3:7d:45:e4:66:fa:4e:b0:fd:e6:b0:83:
                    bc:68:0c:e1:34:26:c2:74:0d:da:cd:88:96:be:d7:
                    51:69:10:6b:1e:12:92:e3:1f:bb:8a:47:a3:9e:32:
                    fb:b4:71:c1:a7:bf:37:4d:8f:58:31:d9:15:59:ed:
                    7d:2c:46:3f:08:c6:f4:36:c2:e0:82:c8:86:57:2f:
                    2e:e0:02:48:c0:4d:ed:3c:2b:9a:8d:19:ab:d4:bb:
                    cd:c8:0e:5c:94:88:06:7a:70:24:80:bc:80:74:cd:
                    c4:d0:c2:2e:03:ba:74:e1:ac:12:3a:bc:a2:80:5e:
                    79:b6:f4:78:54:69:29:10:67:ab:df:91:7f:dd:60:
                    78:59:22:90:c9:47:06:91:4f:e1:d0:44:86:7b:8f:
                    9f:49:25:92:3d:4e:36:22:6e:b9:32:75:0e:52:9a:
                    8e:95:1a:8c:c3:0d:3a:98:b3:f5:da:c9:3d:f9:97:
                    6c:41:e1:5d:b8:97:f5:05:4e:a0:5f:9a:64:b4:cb:
                    74:44:1b:d1:cf:4a:5c:9f:b1:0b:40:bc:ea:28:f7:
                    03:0b:ef:e0:70:4e:30:d0:86:c9:0a:b1:5b:19:a1:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A2:80:C8:6A:9F:8C:EA:47:9A:55:05:6A:7F:0D:86:31:DC:69:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b0fa4d22-50ae-320b-8e44-4fbd3e443842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.61.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:f2:96:f3:1b:ce:b2:95:39:b4:72:9e:89:49:95:61:15:
         ff:af:41:8d:23:d3:9f:6d:96:bf:03:cb:98:0b:63:3c:69:b2:
         09:d3:ad:20:b3:07:af:30:10:29:13:01:6b:71:62:d2:ce:e1:
         6c:dc:e5:f9:26:29:1e:d3:56:12:bd:26:9c:4c:96:55:45:25:
         e8:6c:76:04:20:e4:b5:7c:1d:7d:e9:4f:dd:1e:e0:09:19:37:
         00:5c:60:75:11:b9:5c:9f:20:94:b6:01:e9:de:f0:8a:7d:6c:
         90:6d:91:06:c0:da:8f:52:d0:05:15:5d:61:dd:ac:93:f9:c4:
         71:d0:16:bb:8a:f0:ee:85:da:62:f7:62:e0:c5:15:a9:3c:5b:
         5d:26:b9:cb:35:3b:93:e5:47:83:f5:37:7b:d6:82:ed:2d:af:
         73:4a:4d:d6:bd:d4:44:8a:63:c8:fb:50:8c:d4:8e:59:16:f6:
         4a:24:94:78:b1:1c:51:af:0c:01:15:26:44:e8:d1:b5:e2:3f:
         42:4a:ab:66:d8:ad:c9:2b:01:ce:04:e2:5a:73:8f:d0:b9:74:
         c3:55:e3:d6:0e:6e:68:ee:0d:10:17:b3:9e:9f:d9:8a:89:51:
         2f:05:ef:b4:68:cb:c4:30:c2:ad:10:98:b0:0e:3e:bc:e5:14:
         a0:ed:8a:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDek6qb3D6k0ast8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NzQyOTc3MTQtM2E2NS00MjRiLWI2ZDUtZTM1ZTFlOWEyYmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjmDky9ceMMfMej63yByfPEUtXc8+IYElHfa
b8JzlIbzfUXkZvpOsP3msIO8aAzhNCbCdA3azYiWvtdRaRBrHhKS4x+7ikejnjL7
tHHBp783TY9YMdkVWe19LEY/CMb0NsLggsiGVy8u4AJIwE3tPCuajRmr1LvNyA5c
lIgGenAkgLyAdM3E0MIuA7p04awSOryigF55tvR4VGkpEGer35F/3WB4WSKQyUcG
kU/h0ESGe4+fSSWSPU42Im65MnUOUpqOlRqMww06mLP12sk9+ZdsQeFduJf1BU6g
X5pktMt0RBvRz0pcn7ELQLzqKPcDC+/gcE4w0IbJCrFbGaFhkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuigMhqn4zqR5pVBWp/DYYx3Gk1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjBmYTRkMjItNTBhZS0z
MjBiLThlNDQtNGZiZDNlNDQzODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQj24MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXj8pbzG86ylTm0cp6JSZVhFf+vQY0j059tlr8Dy5gLYzxpsgnTrSCz
B68wECkTAWtxYtLO4Wzc5fkmKR7TVhK9JpxMllVFJehsdgQg5LV8HX3pT90e4AkZ
NwBcYHURuVyfIJS2Aene8Ip9bJBtkQbA2o9S0AUVXWHdrJP5xHHQFruK8O6F2mL3
YuDFFak8W10mucs1O5PlR4P1N3vWgu0tr3NKTda91ESKY8j7UIzUjlkW9koklHix
HFGvDAEVJkTo0bXiP0JKq2bYrckrAc4E4lpzj9C5dMNV49YObmjuDRAXs56f2YqJ
US8F77Roy8Qwwq0QmLAOPrzlFKDtioM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:24 2025 by rpki-client