Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22984eb9-604f-3beb-ae3c-7380b8eb284d.roa
File:                     22984eb9-604f-3beb-ae3c-7380b8eb284d.roa (raw, json)
Hash identifier:          ury1pfr36izuOo3OEEbMP2BpHvBtUwStha8xsapLKlY=
Subject key identifier:   98:BB:0B:45:72:BF:17:58:6F:83:F3:7E:86:09:7E:88:07:F9:49:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848187EFD10CCA738E92BAB2C3C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22984eb9-604f-3beb-ae3c-7380b8eb284d.roa
Signing time:             Wed 04 Dec 2024 14:42:09 +0000
ROA not before:           Wed 04 Dec 2024 14:42:09 +0000
ROA not after:            Tue 04 Mar 2025 14:42:09 +0000
asID:                     15169
IP address blocks:        34.2.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:7e:fd:10:cc:a7:38:e9:2b:ab:2c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Dec  4 14:42:09 2024 GMT
            Not After : Mar  4 14:42:09 2025 GMT
        Subject: CN=bb808c45-3088-453c-8913-c5842e3dbe63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:29:cd:70:86:a6:f9:54:03:ae:9d:a4:bd:
                    49:79:8e:d5:77:d3:51:e5:03:5b:11:b0:f1:86:55:
                    35:5a:41:a3:cc:fc:c9:a1:18:54:8b:0c:46:9c:98:
                    52:6b:46:bd:fe:53:90:79:8d:8d:91:4a:57:e7:8f:
                    12:56:e4:39:24:41:91:43:44:a3:a2:ce:36:0f:e2:
                    a0:9b:bd:9b:7a:5a:36:f4:e7:c6:ad:51:a7:1b:79:
                    f9:46:64:de:f2:94:2a:cb:10:22:db:e9:22:71:87:
                    bf:21:fb:03:0b:e7:29:91:ec:ca:e9:d1:48:09:a7:
                    29:9d:71:cd:95:c6:70:a0:37:4a:86:21:97:fe:4e:
                    be:a7:3b:fb:9e:59:2f:0a:80:1e:97:8e:0e:1a:f7:
                    2d:24:96:23:d7:fd:3d:02:f5:13:11:a1:95:41:6e:
                    b4:e4:fc:71:42:6b:c7:f2:20:2d:70:cc:2a:bd:71:
                    7a:76:0d:9f:1b:71:1b:47:bf:3a:ac:a2:1a:5c:6a:
                    cb:74:c7:6f:e3:29:05:c3:68:ff:fc:41:04:af:f8:
                    d1:71:d7:54:f9:00:90:7d:6e:6f:45:54:f4:f9:00:
                    05:5b:0b:7f:7b:8e:f7:d7:55:ab:40:e3:66:6a:34:
                    f5:a0:e1:56:47:17:e7:84:9a:83:ab:0f:89:48:a1:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:0B:45:72:BF:17:58:6F:83:F3:7E:86:09:7E:88:07:F9:49:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22984eb9-604f-3beb-ae3c-7380b8eb284d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:93:27:f9:d1:a2:84:72:ca:e0:3c:29:e6:35:44:49:f8:82:
         9b:ae:3c:e4:32:ad:71:8e:7b:32:f8:f6:18:1e:3b:de:86:4d:
         6d:db:c2:ab:45:57:80:e5:dd:9c:e0:99:d3:2f:16:c3:6b:bb:
         63:80:76:32:7d:8b:86:62:82:f1:8e:57:dd:49:cd:46:b5:44:
         d9:3a:c8:fb:3b:47:bc:ec:2f:46:fd:70:f0:d4:c8:04:a5:d0:
         90:4f:45:2d:ca:78:1d:64:33:b0:43:89:28:03:30:5c:f4:86:
         3b:b9:43:d3:9b:86:5b:ed:da:d1:e0:4c:22:23:95:e6:6d:1a:
         b1:a9:d7:91:6b:94:46:06:c0:3a:46:c9:46:2f:02:f3:d8:9f:
         8a:9e:af:33:cb:3c:36:cb:a0:f5:84:7f:2a:d3:a8:0b:76:22:
         a3:9f:17:50:8a:81:1d:85:5b:a6:f2:36:19:b1:2f:c6:07:21:
         08:cc:31:5e:ae:f1:45:e6:71:3f:42:8d:da:74:e9:02:4c:b9:
         25:6e:44:64:cd:ea:3b:2d:64:01:12:66:25:ba:f1:85:94:75:
         46:71:e9:04:3d:fd:3f:58:88:75:f3:ac:05:14:84:69:b0:64:
         ec:aa:02:bf:c8:06:c6:bd:8d:50:9a:0c:f0:ba:40:9c:81:5c:
         27:6c:20:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgYfv0QzKc46SurLDwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTIwNDE0NDIwOVoXDTI1MDMwNDE0NDIwOVowLzEtMCsGA1UEAxMk
YmI4MDhjNDUtMzA4OC00NTNjLTg5MTMtYzU4NDJlM2RiZTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1opzXCGpvlUA66dpL1JeY7Vd9NR5QNbEbDx
hlU1WkGjzPzJoRhUiwxGnJhSa0a9/lOQeY2NkUpX548SVuQ5JEGRQ0Sjos42D+Kg
m72belo29OfGrVGnG3n5RmTe8pQqyxAi2+kicYe/IfsDC+cpkezK6dFICacpnXHN
lcZwoDdKhiGX/k6+pzv7nlkvCoAel44OGvctJJYj1/09AvUTEaGVQW605PxxQmvH
8iAtcMwqvXF6dg2fG3EbR786rKIaXGrLdMdv4ykFw2j//EEEr/jRcddU+QCQfW5v
RVT0+QAFWwt/e47311WrQONmajT1oOFWRxfnhJqDqw+JSKEwfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJi7C0VyvxdYb4PzfoYJfogH+UmTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjI5ODRlYjktNjA0Zi0z
YmViLWFlM2MtNzM4MGI4ZWIyODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICTJ/nRooRyyuA8KeY1REn4gpuuPOQyrXGOezL49hgeO96GTW3bwqtF
V4Dl3ZzgmdMvFsNru2OAdjJ9i4ZigvGOV91JzUa1RNk6yPs7R7zsL0b9cPDUyASl
0JBPRS3KeB1kM7BDiSgDMFz0hju5Q9Obhlvt2tHgTCIjleZtGrGp15FrlEYGwDpG
yUYvAvPYn4qerzPLPDbLoPWEfyrTqAt2IqOfF1CKgR2FW6byNhmxL8YHIQjMMV6u
8UXmcT9Cjdp06QJMuSVuRGTN6jstZAESZiW68YWUdUZx6QQ9/T9YiHXzrAUUhGmw
ZOyqAr/IBsa9jVCaDPC6QJyBXCdsIMc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:40 2025 by rpki-client