Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e9d917f2-b8b7-394c-a19d-c732e93a0605.roa
File:                     e9d917f2-b8b7-394c-a19d-c732e93a0605.roa (raw, json)
Hash identifier:          R7OhKnl4QB+FRlPxN4w3lAVwqxlBDLhPlUpkqAzAEY4=
Subject key identifier:   63:6F:86:E9:90:C0:D3:D9:C5:58:61:48:E2:8A:13:2D:06:23:E1:0F
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858486D9054B2686FF5743D7ECA00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e9d917f2-b8b7-394c-a19d-c732e93a0605.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     20016
IP address blocks:        198.145.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:54:b2:68:6f:f5:74:3d:7e:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=45192d7a-91ee-43be-b352-5a770bf66b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:13:81:1b:77:c1:66:74:42:66:4e:3f:fc:cd:
                    98:0b:41:04:00:22:e5:ca:bf:a3:9a:8b:df:56:84:
                    54:57:58:17:7d:41:11:e6:86:15:60:76:80:7a:61:
                    c8:c5:0d:80:8a:6e:c9:a3:f5:25:76:68:21:83:6c:
                    e9:34:cb:74:b6:5e:4a:38:cb:85:89:aa:c8:55:a6:
                    53:62:ce:d6:3c:7b:52:a7:69:bc:21:e6:fd:66:57:
                    e4:37:37:aa:45:c6:6e:f6:1f:34:0f:ad:11:de:79:
                    b7:d3:06:c3:8a:d2:2c:c8:c1:67:c2:f3:8c:ad:0c:
                    23:a4:7c:6c:65:7a:f5:58:67:52:ec:a2:50:0c:32:
                    d5:5c:7d:6d:64:0b:38:9e:ea:40:a6:d1:99:08:64:
                    14:a0:c4:fe:02:cb:5f:c1:56:85:2c:ad:06:f8:46:
                    84:36:f5:10:a3:88:53:aa:d7:52:44:d3:ba:fe:6e:
                    b7:11:c6:0a:47:8c:5c:b5:d8:79:bf:b5:da:79:e8:
                    03:e5:54:fe:f6:ab:70:a3:29:41:d0:b2:03:72:86:
                    a4:ec:b1:67:d8:50:f5:f0:28:19:ae:78:45:fc:71:
                    ae:3f:9d:95:53:1e:40:16:33:65:bc:74:9f:27:b8:
                    0a:fc:4f:e0:d7:1b:e0:11:1c:8c:b9:a7:d1:f8:c5:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6F:86:E9:90:C0:D3:D9:C5:58:61:48:E2:8A:13:2D:06:23:E1:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e9d917f2-b8b7-394c-a19d-c732e93a0605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:51:6b:fa:7b:8f:6b:9f:d4:be:c1:33:fe:44:55:2c:ab:b9:
         7c:33:d1:b9:4c:50:84:0d:f4:0e:93:c5:34:1f:21:3c:3b:b8:
         59:94:27:71:ff:7f:fc:aa:1a:59:e4:96:f1:5c:36:64:b5:84:
         6f:fa:96:9e:41:3b:9d:28:e3:84:06:40:84:6e:7d:64:1b:5b:
         aa:8a:e4:ad:72:44:54:38:16:3f:f4:28:b0:ae:f6:14:c1:37:
         dd:80:e6:6c:24:52:09:ca:48:7c:5c:eb:c8:d3:fd:8b:a8:06:
         a0:19:05:94:20:60:24:df:1f:5b:8e:66:ac:b4:7a:85:94:d4:
         2e:0a:71:ea:a6:91:a9:2e:fa:20:11:2d:a3:72:78:0b:5e:43:
         c0:2c:57:8c:87:c2:62:38:ce:9c:f7:0c:da:0b:04:a4:c1:71:
         98:52:48:db:44:ab:89:6d:48:9d:fe:e7:e0:b9:e2:70:07:ef:
         b3:c9:f9:91:ee:b9:e5:05:d3:d4:2b:66:b1:cf:96:88:9f:93:
         c3:54:03:7c:a4:97:59:81:60:de:15:99:9e:1c:a0:dd:0b:d6:
         5e:da:f0:68:f2:ab:74:68:74:59:09:cf:f5:a1:82:d1:41:8c:
         ba:97:13:f4:70:4a:6c:c7:51:7a:23:00:fd:1e:89:de:c5:30:
         e5:bd:e7:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFSyaG/1dD1+ygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDUxOTJkN2EtOTFlZS00M2JlLWIzNTItNWE3NzBiZjY2YjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBOBG3fBZnRCZk4//M2YC0EEACLlyr+jmovf
VoRUV1gXfUER5oYVYHaAemHIxQ2Aim7Jo/Uldmghg2zpNMt0tl5KOMuFiarIVaZT
Ys7WPHtSp2m8Ieb9ZlfkNzeqRcZu9h80D60R3nm30wbDitIsyMFnwvOMrQwjpHxs
ZXr1WGdS7KJQDDLVXH1tZAs4nupAptGZCGQUoMT+AstfwVaFLK0G+EaENvUQo4hT
qtdSRNO6/m63EcYKR4xctdh5v7XaeegD5VT+9qtwoylB0LIDcoak7LFn2FD18CgZ
rnhF/HGuP52VUx5AFjNlvHSfJ7gK/E/g1xvgERyMuafR+MWMHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGNvhumQwNPZxVhhSOKKEy0GI+EPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZTlkOTE3ZjItYjhiNy0z
OTRjLWExOWQtYzczMmU5M2EwNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9Ra/p7j2uf1L7BM/5EVSyruXwz0blMUIQN9A6TxTQfITw7uFmUJ3H/
f/yqGlnklvFcNmS1hG/6lp5BO50o44QGQIRufWQbW6qK5K1yRFQ4Fj/0KLCu9hTB
N92A5mwkUgnKSHxc68jT/YuoBqAZBZQgYCTfH1uOZqy0eoWU1C4Kceqmkaku+iAR
LaNyeAteQ8AsV4yHwmI4zpz3DNoLBKTBcZhSSNtEq4ltSJ3+5+C54nAH77PJ+ZHu
ueUF09QrZrHPloifk8NUA3ykl1mBYN4VmZ4coN0L1l7a8Gjyq3RodFkJz/WhgtFB
jLqXE/RwSmzHUXojAP0eid7FMOW95wg=
-----END CERTIFICATE-----
Generated at Mon May 5 16:03:12 2025 by rpki-client