Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa
File:                     13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa (raw, json)
Hash identifier:          9AsioyvTAUQQqwZoXNMAGr5806BcEnVOn2/27/k4nNE=
Subject key identifier:   5D:0A:33:6D:83:6B:77:F9:70:16:B1:64:6E:E3:F7:95:6A:FE:D0:EE
Certificate issuer:       /CN=5a060f48-6584-4864-ba80-2bac55c51550
Certificate serial:       010D0C9F43285847E094C3396F58F5B0C9972400
Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     22363
IP address blocks:        216.168.20.0/24 maxlen: 24
                          216.168.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c3:39:6f:58:f5:b0:c9:97:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=baddebe5-f780-4ca7-bf2a-bedb52b3322f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e3:e2:d2:37:d0:7d:36:f9:0a:98:08:85:f7:
                    60:b8:2f:14:bf:7e:83:86:ad:fc:6d:2c:8e:20:c1:
                    69:db:f7:c9:21:79:48:54:a6:f1:3e:95:53:6e:33:
                    60:60:d4:0d:33:80:a7:a4:98:49:92:7e:7c:69:f8:
                    a0:d6:ac:38:4f:97:c6:a7:15:8a:36:03:65:2d:9d:
                    c1:f1:54:a5:d2:7d:de:6b:9b:9d:0d:cc:ba:ea:46:
                    2b:a0:24:ee:99:29:9d:88:1b:e1:c8:0a:21:97:9e:
                    84:f8:c8:9a:66:c7:19:c2:e7:bb:9a:1e:c0:96:e2:
                    56:a0:f8:9f:14:00:66:8d:2f:7c:be:44:42:4e:7c:
                    a1:95:07:ba:73:e1:af:6e:49:0d:07:b8:f4:26:b3:
                    58:c9:c0:17:40:a4:3f:02:6c:94:8f:99:ed:3e:1d:
                    1d:e7:a2:6c:9a:58:86:ee:79:15:88:a7:2d:21:eb:
                    c0:1b:b7:f7:51:37:f7:6e:cb:5c:fc:64:09:b3:4d:
                    4f:fd:c9:5c:45:c2:cb:0e:59:48:06:ef:2c:8a:ab:
                    32:e2:a3:7a:a3:a6:a4:9c:35:4c:27:45:de:c9:72:
                    8a:07:25:55:57:00:5f:fe:71:f1:c9:74:f8:f7:1b:
                    b7:39:1b:2b:f1:60:91:3d:73:a2:3c:cf:5c:31:64:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0A:33:6D:83:6B:77:F9:70:16:B1:64:6E:E3:F7:95:6A:FE:D0:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl

            X509v3 Authority Key Identifier:
                keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:09:4e:76:3b:77:72:94:f8:92:b8:58:a1:40:d9:75:28:14:
         08:b6:10:53:2e:a8:d8:e2:e2:f5:19:6d:18:d1:eb:e2:a1:c4:
         4e:42:77:d2:01:d0:7f:9e:90:b2:7f:b6:94:cd:23:25:d4:4f:
         b5:14:5d:e0:b2:c2:fa:39:13:8e:71:51:03:97:b6:de:ed:8d:
         9a:ea:5c:68:28:c1:d0:90:72:d6:6c:00:25:96:7c:d8:ba:0a:
         ea:8a:52:1d:d4:55:b5:7f:91:7c:c3:df:7e:2c:75:15:7b:79:
         fb:83:9e:f2:67:ab:f3:42:81:b1:81:af:50:55:a9:bf:5a:47:
         2a:a8:46:9b:46:61:62:15:63:13:78:0f:79:e3:b4:5e:f4:76:
         5a:49:e5:e5:70:7b:a9:ea:ad:dd:30:ac:e9:37:ab:5c:32:45:
         da:ad:a1:a1:40:ca:9b:c3:a5:64:75:99:77:46:e8:c4:bf:b8:
         04:0b:8e:ba:9c:40:a9:f5:3a:6b:e0:9b:2a:af:49:b6:76:47:
         63:c0:3d:ae:f3:85:84:78:3e:2e:b3:ac:f1:4a:90:b3:75:51:
         68:fb:00:7e:3b:c8:ea:41:e0:8d:c2:6f:a2:67:77:e6:d0:fb:
         a4:b8:3b:ce:21:8b:f1:9e:8e:4b:26:2e:e9:d6:5e:53:e9:e7:
         1e:2c:79:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMM5b1j1sMmXJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWEwNjBmNDgtNjU4NC00ODY0LWJhODAtMmJhYzU1YzUx
NTUwMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
YmFkZGViZTUtZjc4MC00Y2E3LWJmMmEtYmVkYjUyYjMzMjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuPi0jfQfTb5CpgIhfdguC8Uv36Dhq38bSyO
IMFp2/fJIXlIVKbxPpVTbjNgYNQNM4CnpJhJkn58afig1qw4T5fGpxWKNgNlLZ3B
8VSl0n3ea5udDcy66kYroCTumSmdiBvhyAohl56E+MiaZscZwue7mh7AluJWoPif
FABmjS98vkRCTnyhlQe6c+GvbkkNB7j0JrNYycAXQKQ/AmyUj5ntPh0d56JsmliG
7nkViKctIevAG7f3UTf3bstc/GQJs01P/clcRcLLDllIBu8siqsy4qN6o6aknDVM
J0XeyXKKByVVVwBf/nHxyXT49xu3ORsr8WCRPXOiPM9cMWQvJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0KM22Da3f5cBaxZG7j95Vq/tDuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTA2
MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFjNTVjNTE1NTAvMTNhZDljNTMtMmJlYS0z
ZDBiLWFmMWYtMDljMThmZGZlYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWEwNjBmNDgtNjU4NC00ODY0LWJh
ODAtMmJhYzU1YzUxNTUwLzVhMDYwZjQ4LTY1ODQtNDg2NC1iYTgwLTJiYWM1NWM1
MTU1MC5jcmwwHwYDVR0jBBgwFoAUPxfSXY53djI6hokJ3aRnjedM7wwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81YTA2MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFj
NTVjNTE1NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KgUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsJTnY7d3KU+JK4WKFA2XUoFAi2EFMuqNji4vUZbRjR6+KhxE5Cd9IB
0H+ekLJ/tpTNIyXUT7UUXeCywvo5E45xUQOXtt7tjZrqXGgowdCQctZsACWWfNi6
CuqKUh3UVbV/kXzD334sdRV7efuDnvJnq/NCgbGBr1BVqb9aRyqoRptGYWIVYxN4
D3njtF70dlpJ5eVwe6nqrd0wrOk3q1wyRdqtoaFAypvDpWR1mXdG6MS/uAQLjrqc
QKn1OmvgmyqvSbZ2R2PAPa7zhYR4Pi6zrPFKkLN1UWj7AH47yOpB4I3Cb6Jnd+bQ
+6S4O84hi/GejksmLunWXlPp5x4sebk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:04:09 2025 by rpki-client