Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/87fa50e2-7f2b-3ba4-841a-7168b303cc8e.roa
File:                     87fa50e2-7f2b-3ba4-841a-7168b303cc8e.roa (raw, json)
Hash identifier:          F+JDD2aqatgrmid3QfRzCzbNMic4t4C1QiBNZqom1+0=
Subject key identifier:   8C:14:82:D8:66:EF:7B:66:9B:E1:23:E4:DF:20:61:94:4B:BD:4D:F2
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F4328584863CB04B6F5B1E9301DCE9580
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/87fa50e2-7f2b-3ba4-841a-7168b303cc8e.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     393238
IP address blocks:        204.144.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:04:b6:f5:b1:e9:30:1d:ce:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=f51ffac1-3451-43ba-a03d-416cce7a3b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:dc:a2:35:2c:a1:90:67:66:a7:c3:14:09:
                    ce:92:97:f0:60:f5:37:c9:d9:2e:6d:c2:a5:c0:bc:
                    a7:e5:bd:51:2f:a9:b6:27:d3:0e:4a:08:53:0e:ab:
                    a4:c7:4b:ed:5f:8d:80:7e:ba:91:93:f9:47:06:79:
                    76:b7:bf:84:e7:ea:5f:4a:d5:6a:9d:b2:39:71:00:
                    ee:a5:ae:65:0d:ec:c4:38:20:22:74:8b:4b:01:1d:
                    5b:b7:c8:18:a5:b6:de:48:0b:42:fe:7d:29:aa:4e:
                    f3:a4:36:1b:1c:92:3b:5b:13:7b:05:e0:5f:33:ea:
                    8f:74:2d:c1:f1:98:31:da:32:50:70:2c:44:33:94:
                    e8:f3:b5:f1:3e:d5:5e:77:5b:b1:ca:cf:69:9f:8c:
                    9a:36:c0:46:b4:2f:c3:2f:e7:e6:9c:5d:0d:23:66:
                    73:4f:86:b0:c7:29:62:6b:c7:ff:c9:a5:76:32:73:
                    78:ca:98:0f:2a:ae:75:15:bf:34:6e:d7:44:1f:7b:
                    fd:b1:0a:17:6d:d1:ca:00:1b:72:2b:8d:58:1c:dd:
                    24:da:e1:9c:df:fb:ce:2d:6c:7a:49:63:c0:d8:9a:
                    f0:21:fc:a1:dd:6d:03:1f:db:b9:7d:fc:c3:0c:21:
                    d8:ee:f1:4e:7d:47:49:5f:4d:c4:8d:a4:cc:9d:fe:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:14:82:D8:66:EF:7B:66:9B:E1:23:E4:DF:20:61:94:4B:BD:4D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/87fa50e2-7f2b-3ba4-841a-7168b303cc8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.144.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d9:84:90:03:a4:24:d0:db:15:fb:49:bf:c8:a1:20:00:e7:
         d8:f3:ca:5b:dd:45:20:ae:85:a0:78:05:2d:cf:62:8e:bb:d7:
         db:64:90:ce:b0:49:1e:a6:30:b1:1e:e3:32:b4:23:b2:10:49:
         15:bf:70:60:f2:3d:eb:f4:bb:f2:85:8d:c4:0e:d1:b1:5f:6d:
         5a:9e:0e:34:4f:6d:d6:2b:4f:19:38:1e:8c:d9:fa:11:24:01:
         e8:4c:77:3c:1b:cf:ff:9d:81:71:d7:b8:aa:ab:48:a6:40:d7:
         27:6e:b9:67:90:29:90:5e:2c:17:c9:1d:ea:39:fb:e4:cf:9c:
         37:57:7d:8a:42:bf:82:28:15:c4:49:f6:27:2d:85:0d:19:97:
         78:86:ff:b2:bd:f6:17:97:16:ad:4d:64:88:e9:d3:93:fa:09:
         1c:cf:49:19:9f:b9:b3:4b:ef:c0:d4:4d:ab:30:29:1d:79:cc:
         f6:7d:8f:d4:87:55:39:32:47:9b:ad:bf:f6:be:dc:9b:04:7b:
         04:3d:f6:77:e2:c3:91:e1:c2:bc:83:eb:aa:9e:27:bd:d0:cf:
         ad:c7:cd:36:a2:14:26:81:52:c8:ae:0b:ca:41:d3:11:19:da:
         7f:dd:57:d2:1c:19:fd:2b:18:88:a2:4e:19:cf:fe:64:a5:08:
         f0:7e:0a:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywS29bHpMB3OlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE5MDM4ZDktNjkyMy00ZTI5LThiMzYtZjQ1YjA2Y2Ux
MmY4MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZjUxZmZhYzEtMzQ1MS00M2JhLWEwM2QtNDE2Y2NlN2EzYjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYHcojUsoZBnZqfDFAnOkpfwYPU3ydkubcKl
wLyn5b1RL6m2J9MOSghTDqukx0vtX42AfrqRk/lHBnl2t7+E5+pfStVqnbI5cQDu
pa5lDezEOCAidItLAR1bt8gYpbbeSAtC/n0pqk7zpDYbHJI7WxN7BeBfM+qPdC3B
8Zgx2jJQcCxEM5To87XxPtVed1uxys9pn4yaNsBGtC/DL+fmnF0NI2ZzT4awxyli
a8f/yaV2MnN4ypgPKq51Fb80btdEH3v9sQoXbdHKABtyK41YHN0k2uGc3/vOLWx6
SWPA2JrwIfyh3W0DH9u5ffzDDCHY7vFOfUdJX03EjaTMnf7DbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwUgthm73tmm+Ej5N8gYZRLvU3yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MTkw
MzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZjZTEyZjgvODdmYTUwZTItN2YyYi0z
YmE0LTg0MWEtNzE2OGIzMDNjYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzE5MDM4ZDktNjkyMy00ZTI5LThi
MzYtZjQ1YjA2Y2UxMmY4LzcxOTAzOGQ5LTY5MjMtNGUyOS04YjM2LWY0NWIwNmNl
MTJmOC5jcmwwHwYDVR0jBBgwFoAUd7Dtd6dLz91nSrrpZ2b4HS5vbQMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDVi
MDZjZTEyZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzJDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfZhJADpCTQ2xX7Sb/IoSAA59jzylvdRSCuhaB4BS3PYo6719tkkM6w
SR6mMLEe4zK0I7IQSRW/cGDyPev0u/KFjcQO0bFfbVqeDjRPbdYrTxk4HozZ+hEk
AehMdzwbz/+dgXHXuKqrSKZA1yduuWeQKZBeLBfJHeo5++TPnDdXfYpCv4IoFcRJ
9icthQ0Zl3iG/7K99heXFq1NZIjp05P6CRzPSRmfubNL78DUTaswKR15zPZ9j9SH
VTkyR5utv/a+3JsEewQ99nfiw5HhwryD66qeJ73Qz63HzTaiFCaBUsiuC8pB0xEZ
2n/dV9IcGf0rGIiiThnP/mSlCPB+Cis=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:00 2025 by rpki-client