Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/6555333b-d2c7-3512-ac66-f7eb934c3107.roa
File:                     6555333b-d2c7-3512-ac66-f7eb934c3107.roa (raw, json)
Hash identifier:          Knq+F42HOxEaGnDgnnPK3TbKWD9s15DTBRiEa8fFpl8=
Subject key identifier:   8E:1B:80:35:FC:9C:73:02:FC:15:90:2D:C5:66:A7:F9:61:B0:E7:9A
Certificate issuer:       /CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
Certificate serial:       010D0C9F4328584829806F87F09C28CBCEA7EE80
Authority key identifier: 67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/6555333b-d2c7-3512-ac66-f7eb934c3107.roa
Signing time:             Tue 10 Dec 2024 16:53:49 +0000
ROA not before:           Tue 10 Dec 2024 16:53:49 +0000
ROA not after:            Mon 10 Mar 2025 15:53:49 +0000
asID:                     18530
IP address blocks:        198.29.64.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:29:80:6f:87:f0:9c:28:cb:ce:a7:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
        Validity
            Not Before: Dec 10 16:53:49 2024 GMT
            Not After : Mar 10 15:53:49 2025 GMT
        Subject: CN=34feeb9f-5b6a-45f7-8d5d-4d4892052786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b2:40:38:04:09:85:96:ea:ba:ec:15:e1:22:
                    d6:1f:67:0a:ba:f5:89:ea:e5:62:00:41:6d:06:3f:
                    96:b6:4a:9f:86:5b:be:1c:f3:69:11:22:d4:15:b8:
                    c5:75:e1:9c:63:4b:bd:f3:c8:47:1f:bb:23:f9:4a:
                    ce:a2:ed:9d:4c:69:48:98:ab:3d:86:c0:6e:7b:25:
                    92:ad:e4:77:1d:b3:0a:3d:f7:61:48:0c:62:b9:b1:
                    ac:2e:ba:24:a6:b2:39:56:f6:fc:d1:7c:cd:ad:16:
                    11:0d:a9:f0:d8:f1:82:d0:dc:6d:32:6b:4f:b8:8c:
                    1a:3f:74:45:c2:1f:0a:95:77:83:5a:44:98:45:b1:
                    44:9b:39:2c:34:eb:9d:e3:fb:ff:86:fb:9e:79:22:
                    c8:4f:0f:a1:3e:e2:e2:e8:28:8c:cf:ce:50:90:07:
                    a6:ac:fa:af:4b:c7:cf:6f:25:58:0e:be:f2:26:a2:
                    f5:9b:8a:42:49:7b:bd:fd:1a:ac:f0:d0:ae:e1:68:
                    ec:c1:ed:d7:a0:f8:2b:22:e1:a6:8c:8d:9e:34:55:
                    ae:94:1a:7a:f2:da:61:51:64:f3:dc:04:b0:e4:a6:
                    d4:3c:5d:37:50:5b:36:54:05:85:40:95:f9:8c:29:
                    56:9b:75:01:d8:0f:58:c8:54:6a:fa:8c:e6:36:13:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1B:80:35:FC:9C:73:02:FC:15:90:2D:C5:66:A7:F9:61:B0:E7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/6555333b-d2c7-3512-ac66-f7eb934c3107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl

            X509v3 Authority Key Identifier:
                keyid:67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:dd:7e:53:ee:5e:18:40:72:4b:03:0e:a3:bb:19:1e:f9:0d:
         2c:da:4f:d6:46:b0:90:9b:05:c9:fe:fb:4f:bd:4b:5c:4e:5c:
         9f:76:1a:3f:7b:75:b8:f2:df:2c:cc:8b:0e:30:ba:a3:c8:0f:
         8f:a4:3a:0b:d8:cd:3e:5f:78:03:34:2d:be:26:a8:d6:80:b6:
         73:fd:e7:4c:b4:c9:20:b4:52:87:98:6a:a1:76:6e:a6:a9:67:
         4f:d3:6e:30:f0:82:bb:ee:8e:62:c3:34:5b:32:ae:8f:f9:34:
         0c:74:71:d8:33:33:d8:25:64:9b:fc:68:bb:cd:e3:e4:15:48:
         9f:e6:64:ff:c3:a8:60:9f:cb:72:5f:61:92:4c:f6:62:73:73:
         9a:7b:1e:65:43:02:ce:33:e2:a8:8c:c8:4f:10:31:91:f5:56:
         da:77:58:5e:6b:b2:cb:e7:67:02:bb:20:a2:99:f2:24:ca:23:
         95:2e:4f:a3:a2:39:6c:f3:d4:0e:a8:21:92:22:8c:01:05:bc:
         12:c2:e0:5a:14:16:f9:5a:9f:97:17:9b:c3:cc:50:26:a6:33:
         ea:ef:8e:50:2a:c6:57:65:1e:54:52:48:fb:d2:2b:34:5a:22:
         ed:12:1b:93:e0:04:e9:f3:64:9d:0e:88:cf:e2:01:d8:d3:65:
         2c:52:14:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgpgG+H8Jwoy86n7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDEzYTBhNzgtN2RmYi00NjNkLWJhMGUtYzEzMTgyMGE2
ZjRiMB4XDTI0MTIxMDE2NTM0OVoXDTI1MDMxMDE1NTM0OVowLzEtMCsGA1UEAxMk
MzRmZWViOWYtNWI2YS00NWY3LThkNWQtNGQ0ODkyMDUyNzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbJAOAQJhZbquuwV4SLWH2cKuvWJ6uViAEFt
Bj+Wtkqfhlu+HPNpESLUFbjFdeGcY0u988hHH7sj+UrOou2dTGlImKs9hsBueyWS
reR3HbMKPfdhSAxiubGsLrokprI5Vvb80XzNrRYRDanw2PGC0NxtMmtPuIwaP3RF
wh8KlXeDWkSYRbFEmzksNOud4/v/hvueeSLITw+hPuLi6CiMz85QkAemrPqvS8fP
byVYDr7yJqL1m4pCSXu9/Rqs8NCu4Wjswe3XoPgrIuGmjI2eNFWulBp68tphUWTz
3ASw5KbUPF03UFs2VAWFQJX5jClWm3UB2A9YyFRq+ozmNhNCdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4bgDX8nHMC/BWQLcVmp/lhsOeaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMTNh
MGE3OC03ZGZiLTQ2M2QtYmEwZS1jMTMxODIwYTZmNGIvNjU1NTMzM2ItZDJjNy0z
NTEyLWFjNjYtZjdlYjkzNGMzMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDEzYTBhNzgtN2RmYi00NjNkLWJh
MGUtYzEzMTgyMGE2ZjRiLzAxM2EwYTc4LTdkZmItNDYzZC1iYTBlLWMxMzE4MjBh
NmY0Yi5jcmwwHwYDVR0jBBgwFoAUZ/GqiFj0pVsqvThdZBFUjpF9ChkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wMTNhMGE3OC03ZGZiLTQ2M2QtYmEwZS1jMTMx
ODIwYTZmNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxh1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbdflPuXhhAcksDDqO7GR75DSzaT9ZGsJCbBcn++0+9S1xOXJ92Gj97
dbjy3yzMiw4wuqPID4+kOgvYzT5feAM0Lb4mqNaAtnP950y0ySC0UoeYaqF2bqap
Z0/TbjDwgrvujmLDNFsyro/5NAx0cdgzM9glZJv8aLvN4+QVSJ/mZP/DqGCfy3Jf
YZJM9mJzc5p7HmVDAs4z4qiMyE8QMZH1Vtp3WF5rssvnZwK7IKKZ8iTKI5UuT6Oi
OWzz1A6oIZIijAEFvBLC4FoUFvlan5cXm8PMUCamM+rvjlAqxldlHlRSSPvSKzRa
Iu0SG5PgBOnzZJ0OiM/iAdjTZSxSFLk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:14 2025 by rpki-client