Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc3cc323-7019-3119-81e2-f83f1f0ab7b5.roa
File:                     dc3cc323-7019-3119-81e2-f83f1f0ab7b5.roa (raw, json)
Hash identifier:          Z7NVQyA54HcYJWvSw6529IKPAusz3P1F7lEaIXvdI6I=
Subject key identifier:   3E:FB:E2:BB:B7:A4:8B:5F:E8:03:70:7D:92:AF:A9:C0:53:6C:E5:26
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858487777D7D5779D88AEC585B340
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc3cc323-7019-3119-81e2-f83f1f0ab7b5.roa
Signing time:             Tue 07 Jan 2025 15:09:33 +0000
ROA not before:           Tue 07 Jan 2025 15:09:33 +0000
ROA not after:            Mon 07 Apr 2025 14:09:33 +0000
asID:                     203724
IP address blocks:        161.69.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:77:d7:d5:77:9d:88:ae:c5:85:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jan  7 15:09:33 2025 GMT
            Not After : Apr  7 14:09:33 2025 GMT
        Subject: CN=62592e0c-452f-4749-a521-1608598feb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:75:a8:f4:38:73:5c:5a:fd:ba:7b:0c:19:49:
                    fb:7b:ae:d6:2e:3a:74:26:74:11:7c:c8:fd:47:40:
                    4b:70:d2:83:a1:64:2e:0c:48:d0:92:5b:0f:46:38:
                    8e:1d:38:c7:5e:cc:d0:e8:f0:97:f4:b0:34:5c:30:
                    57:cb:d8:76:d5:82:8e:cd:c1:d3:b5:f1:eb:04:ef:
                    14:39:50:f7:ba:ba:40:ca:6d:f5:b2:4c:64:a5:db:
                    2a:c5:e7:db:a7:a6:a2:93:17:5b:d2:42:a2:72:d0:
                    75:22:5f:da:e6:98:9b:5b:89:f7:59:78:7b:47:a8:
                    13:b9:7c:60:58:94:75:f4:5b:f7:47:04:33:ca:c6:
                    8c:23:74:1c:5e:43:fe:88:3e:bd:2c:fa:9d:dc:8c:
                    4d:74:9f:56:1e:83:c7:32:19:12:bf:2e:d5:74:8a:
                    7f:99:5a:58:d7:bd:47:6d:ce:5d:81:83:c2:67:e2:
                    5f:be:7d:94:14:a8:b3:f6:63:f3:3c:e6:f2:fe:64:
                    d5:98:cd:a4:96:ce:e2:d0:17:e5:ac:97:10:e8:20:
                    65:8e:b3:69:8a:c1:e5:16:6d:20:c2:ce:bc:a0:c9:
                    4c:c5:fe:02:72:56:55:21:bc:8c:b9:2a:4d:15:62:
                    f2:a4:b1:52:f9:a2:a0:39:d3:2c:3c:20:3d:d5:a9:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FB:E2:BB:B7:A4:8B:5F:E8:03:70:7D:92:AF:A9:C0:53:6C:E5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc3cc323-7019-3119-81e2-f83f1f0ab7b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:07:27:a0:1c:48:00:33:39:3a:35:84:a5:1c:ec:59:d5:f5:
         bc:5d:40:88:5e:19:a2:20:0c:a4:d7:8e:e4:81:61:50:2d:12:
         75:11:aa:6a:84:56:cf:61:79:e0:6a:21:6d:35:ac:9c:64:5c:
         b2:2d:14:6b:72:0c:5a:7a:8c:0f:21:1d:2e:c7:70:2b:65:d8:
         3e:87:54:3d:77:07:94:ef:21:13:5f:51:0b:53:ab:d7:9c:c7:
         00:75:23:d7:1c:ce:d3:f5:f3:ee:fa:cd:29:6b:1c:8c:a6:ad:
         08:56:b6:40:1d:ac:73:30:dd:71:23:44:6b:1c:69:d1:2b:30:
         84:15:f2:d4:1b:b6:0f:e5:d3:2a:4f:29:80:32:99:f8:8f:c5:
         67:0a:5c:52:08:99:36:b2:bd:11:25:37:ac:63:b1:b2:29:21:
         cf:7f:72:6f:6b:1d:b2:ba:3c:0a:28:81:74:20:f6:87:44:9d:
         1e:cd:9e:6e:d7:fc:bc:ea:c6:48:a2:11:34:6c:21:66:75:40:
         08:ba:c3:75:3e:46:fa:6e:17:dc:47:b8:0e:d0:8f:1c:cc:58:
         62:71:5e:b6:64:61:0b:9a:8b:94:62:29:c3:a5:67:4f:20:15:
         cc:9c:aa:0b:ae:8d:a6:b9:1f:3d:0c:32:b0:65:36:10:7a:63:
         ee:18:22:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3d9fVd52IrsWFs0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDEwNzE1MDkzM1oXDTI1MDQwNzE0MDkzM1owLzEtMCsGA1UEAxMk
NjI1OTJlMGMtNDUyZi00NzQ5LWE1MjEtMTYwODU5OGZlYjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXWo9DhzXFr9unsMGUn7e67WLjp0JnQRfMj9
R0BLcNKDoWQuDEjQklsPRjiOHTjHXszQ6PCX9LA0XDBXy9h21YKOzcHTtfHrBO8U
OVD3urpAym31skxkpdsqxefbp6aikxdb0kKictB1Il/a5pibW4n3WXh7R6gTuXxg
WJR19Fv3RwQzysaMI3QcXkP+iD69LPqd3IxNdJ9WHoPHMhkSvy7VdIp/mVpY171H
bc5dgYPCZ+Jfvn2UFKiz9mPzPOby/mTVmM2kls7i0BflrJcQ6CBljrNpisHlFm0g
ws68oMlMxf4CclZVIbyMuSpNFWLypLFS+aKgOdMsPCA91alO9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD774ru3pItf6ANwfZKvqcBTbOUmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZGMzY2MzMjMtNzAxOS0z
MTE5LTgxZTItZjgzZjFmMGFiN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQHJ6AcSAAzOTo1hKUc7FnV9bxdQIheGaIgDKTXjuSBYVAtEnURqmqE
Vs9heeBqIW01rJxkXLItFGtyDFp6jA8hHS7HcCtl2D6HVD13B5TvIRNfUQtTq9ec
xwB1I9ccztP18+76zSlrHIymrQhWtkAdrHMw3XEjRGscadErMIQV8tQbtg/l0ypP
KYAymfiPxWcKXFIImTayvRElN6xjsbIpIc9/cm9rHbK6PAoogXQg9odEnR7Nnm7X
/LzqxkiiETRsIWZ1QAi6w3U+RvpuF9xHuA7QjxzMWGJxXrZkYQuai5RiKcOlZ08g
Fcycqguujaa5Hz0MMrBlNhB6Y+4YIok=
-----END CERTIFICATE-----
Generated at Mon May 12 16:35:56 2025 by rpki-client