Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa
File:                     8c0cf3f7-33fa-3591-ab58-960d708c9989.roa (raw, json)
Hash identifier:          RhObVfSaMtj3Xw02EDYiFBq2k0ItovTHoPM80zHKHQI=
Subject key identifier:   9F:8B:64:47:B7:C3:7A:DC:55:E2:D8:1B:E7:A5:80:32:62:E4:A7:96
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584819CFCD35D281FF81A91AED80
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        209.142.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:cd:35:d2:81:ff:81:a9:1a:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=45ebc216-7a37-4ab5-9f57-67755b9ce8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:e4:0f:15:9b:9d:ce:be:26:30:4a:f5:ea:
                    b2:e0:e1:29:c7:7b:a2:2b:61:c0:0d:0b:4d:9a:e3:
                    17:ce:59:e0:c8:29:be:cf:d4:36:8e:0c:46:78:e2:
                    71:eb:5f:8d:a0:88:0a:51:fe:b8:1a:bd:63:58:a7:
                    12:50:50:c3:a1:67:40:76:b9:c8:38:58:07:70:82:
                    92:63:c6:b7:05:ae:99:a5:fb:4f:48:12:48:f5:78:
                    d0:f9:65:e8:0c:00:58:04:4b:8b:8f:1e:0a:10:da:
                    80:e9:07:64:9d:c9:dd:16:13:1d:12:99:83:c5:3d:
                    03:31:27:40:57:a1:6f:f7:97:75:b0:b7:19:e0:69:
                    63:4e:05:ba:fa:f4:d4:bf:1b:5a:ba:d0:3e:f6:b0:
                    d1:52:54:5a:a4:10:09:52:5b:ac:b8:cc:4f:57:58:
                    e7:80:b0:ff:df:cf:03:f3:2f:9c:10:5f:59:67:d4:
                    b3:70:d4:38:b2:e9:4b:69:8c:b4:86:1a:45:ab:80:
                    60:cc:c9:1e:fa:55:c7:22:75:d8:b3:27:7e:6b:a0:
                    e5:86:e7:af:d4:00:89:3a:f7:e5:9a:83:ed:c2:42:
                    26:77:ff:4a:0e:88:e7:e2:b5:76:2d:f1:c2:9c:8f:
                    d2:08:8f:26:19:f4:1f:09:1e:52:5d:9f:5b:d2:6f:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8B:64:47:B7:C3:7A:DC:55:E2:D8:1B:E7:A5:80:32:62:E4:A7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:77:b6:d2:56:c2:9d:2e:28:df:00:2c:87:a3:59:fd:94:
         9d:f5:03:6f:c6:e3:e5:d5:a2:f0:39:14:c3:bd:66:74:cf:b9:
         50:c6:de:81:c8:25:ea:b6:79:a3:b1:ca:a7:a0:14:27:37:9e:
         98:74:f6:d7:64:5e:8b:0e:fc:3a:6e:cd:67:9d:80:7f:08:f9:
         e1:97:5b:8d:4c:69:9d:23:36:22:e1:a7:c7:05:12:23:09:3b:
         d7:a2:c7:fa:c5:60:af:21:19:4f:0e:44:0e:76:fa:d8:22:87:
         01:b9:24:57:52:70:74:93:8c:78:02:23:33:e3:f8:a7:29:e0:
         9c:b0:aa:f1:f9:f7:1b:e2:c8:88:3b:5a:30:92:7b:f1:98:c5:
         5c:0d:4e:5b:6c:26:3c:3c:14:92:a8:a5:d8:d7:ff:1f:c3:74:
         a7:58:1a:6a:f9:58:53:55:ec:e9:a8:ea:ee:cd:2b:3a:0c:20:
         0d:1e:5b:a9:29:ba:b7:fa:e7:54:cc:a0:a0:30:77:0e:1d:81:
         2b:7d:b8:85:f8:0d:1b:08:69:e6:2a:14:9b:eb:e9:ed:e4:4c:
         6d:56:a2:fb:65:a0:84:78:7a:4f:ad:c6:ad:87:a6:ef:9d:b9:
         2e:38:36:dc:ef:81:b4:cb:7b:06:eb:20:c8:85:26:f0:62:88:
         15:2f:19:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz8010oH/gaka7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz
ZWExMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
NDVlYmMyMTYtN2EzNy00YWI1LTlmNTctNjc3NTViOWNlOGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmnkDxWbnc6+JjBK9eqy4OEpx3uiK2HADQtN
muMXzlngyCm+z9Q2jgxGeOJx61+NoIgKUf64Gr1jWKcSUFDDoWdAdrnIOFgHcIKS
Y8a3Ba6ZpftPSBJI9XjQ+WXoDABYBEuLjx4KENqA6QdkncndFhMdEpmDxT0DMSdA
V6Fv95d1sLcZ4GljTgW6+vTUvxtautA+9rDRUlRapBAJUlusuMxPV1jngLD/388D
8y+cEF9ZZ9SzcNQ4sulLaYy0hhpFq4BgzMke+lXHInXYsyd+a6Dlhuev1ACJOvfl
moPtwkImd/9KDojn4rV2LfHCnI/SCI8mGfQfCR5SXZ9b0m9DnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+LZEe3w3rcVeLYG+elgDJi5KeWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz
MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvOGMwY2YzZjctMzNmYS0z
NTkxLWFiNTgtOTYwZDcwOGM5OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3
MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3
M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0
NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXkd7bSVsKdLijfACyHo1n9lJ31A2/G4+XVovA5FMO9ZnTPuVDG3oHI
Jeq2eaOxyqegFCc3nph09tdkXosO/DpuzWedgH8I+eGXW41MaZ0jNiLhp8cFEiMJ
O9eix/rFYK8hGU8ORA52+tgihwG5JFdScHSTjHgCIzPj+Kcp4JywqvH59xviyIg7
WjCSe/GYxVwNTltsJjw8FJKopdjX/x/DdKdYGmr5WFNV7Omo6u7NKzoMIA0eW6kp
urf651TMoKAwdw4dgSt9uIX4DRsIaeYqFJvr6e3kTG1WovtloIR4ek+txq2Hpu+d
uS44NtzvgbTLewbrIMiFJvBiiBUvGY0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:47 2025 by rpki-client