Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/3acff935-390a-35f4-8b00-7267d2b359be.roa
File:                     3acff935-390a-35f4-8b00-7267d2b359be.roa (raw, json)
Hash identifier:          k1GELKpm8i8LuFpVRDBMb/IU+Rgp0ykgQP575HQVW98=
Subject key identifier:   02:DC:C4:60:A2:55:2A:0C:45:E5:61:24:7A:CB:66:D4:CC:7F:1E:C5
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F432858487A208044E7AD2D012AD52B00
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/3acff935-390a-35f4-8b00-7267d2b359be.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     399045
IP address blocks:        64.112.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:80:44:e7:ad:2d:01:2a:d5:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=5ca56886-3ebe-4fbe-986c-b4b841895b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:6a:e5:17:f5:85:b6:c0:27:fe:83:39:24:
                    ed:17:3c:73:60:3e:83:4d:3b:43:d2:23:db:14:d8:
                    3a:bf:ec:4c:12:4d:98:6a:9c:de:51:15:b5:3a:06:
                    21:e7:1d:08:34:3b:0b:62:a4:7a:97:66:cf:8d:8d:
                    29:b2:24:25:e4:5e:b4:8f:4a:2f:8e:49:54:b6:d5:
                    10:ef:47:0f:ce:f4:bc:c7:35:ce:bb:4f:67:ce:55:
                    32:ee:a1:4f:80:37:37:44:ec:60:02:be:83:9e:7b:
                    7d:57:0f:26:33:b0:17:18:36:b3:63:d7:ea:f5:6e:
                    43:08:5d:b9:77:f0:79:f5:a0:46:93:64:96:c6:65:
                    5d:1d:a7:7d:88:76:78:d8:52:51:66:d2:97:44:28:
                    6c:ae:77:ec:ac:32:9c:7d:e2:35:75:5f:b7:68:91:
                    f5:d3:5d:45:27:eb:91:02:c9:dd:3b:d1:6b:e8:69:
                    d0:e7:e3:51:d3:9c:57:7e:4a:b5:88:9c:d5:80:79:
                    51:6d:44:d9:fa:5b:ca:5e:48:47:10:31:4f:85:6d:
                    87:a4:9c:e5:bd:1e:07:f9:2d:f7:75:a9:81:33:bc:
                    a7:8e:42:a7:59:c9:a0:7f:53:8b:10:26:83:8a:09:
                    a0:e8:2d:7e:d7:bd:c8:d2:e2:c9:17:c7:9b:2b:0a:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DC:C4:60:A2:55:2A:0C:45:E5:61:24:7A:CB:66:D4:CC:7F:1E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/3acff935-390a-35f4-8b00-7267d2b359be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:ed:1a:04:0f:36:7a:a8:49:2f:d9:8f:f7:55:bf:25:62:
         fb:64:4d:16:3b:2b:ad:2c:40:74:9b:56:1e:28:b9:d2:62:2b:
         f1:d0:3e:77:bc:60:0b:7a:da:29:c8:70:d7:c1:2f:98:65:45:
         46:56:68:36:12:e5:e8:0d:5e:db:f4:ef:72:05:a6:ea:dc:d4:
         cf:a5:23:65:95:3f:c5:cc:04:72:54:2e:b2:97:be:24:14:30:
         11:38:78:e0:ca:33:db:a2:c3:bb:d9:19:2c:05:1c:c5:b5:22:
         95:14:9b:67:09:fc:f3:2b:d3:d2:07:82:77:3f:22:c2:87:da:
         fe:ee:bb:5f:ef:2c:e4:db:78:4e:65:95:1b:49:5b:cb:04:06:
         d2:1d:66:b9:6e:3f:4c:5e:3e:ed:eb:37:ec:0e:e9:f2:ee:08:
         60:f7:9c:54:dc:bc:81:f3:94:02:b5:1d:0a:b9:ee:f0:01:12:
         c5:ee:35:75:76:52:22:dd:59:8b:78:95:46:e0:b3:13:4c:2e:
         ca:dc:44:0a:64:4e:9d:13:d9:d6:d4:85:91:7b:32:5f:7d:f3:
         84:a5:67:26:c0:dd:65:68:8b:f8:4b:55:51:cf:9f:e0:d4:12:
         3b:c5:27:9a:cb:d7:cc:13:e0:09:86:17:ed:43:7f:98:15:fb:
         73:4e:2a:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IIBE560tASrVKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
NWNhNTY4ODYtM2ViZS00ZmJlLTk4NmMtYjRiODQxODk1YjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b1q5Rf1hbbAJ/6DOSTtFzxzYD6DTTtD0iPb
FNg6v+xMEk2YapzeURW1OgYh5x0INDsLYqR6l2bPjY0psiQl5F60j0ovjklUttUQ
70cPzvS8xzXOu09nzlUy7qFPgDc3ROxgAr6Dnnt9Vw8mM7AXGDazY9fq9W5DCF25
d/B59aBGk2SWxmVdHad9iHZ42FJRZtKXRChsrnfsrDKcfeI1dV+3aJH1011FJ+uR
AsndO9Fr6GnQ5+NR05xXfkq1iJzVgHlRbUTZ+lvKXkhHEDFPhW2HpJzlvR4H+S33
damBM7ynjkKnWcmgf1OLECaDigmg6C1+173I0uLJF8ebKwpqXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFALcxGCiVSoMReVhJHrLZtTMfx7FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvM2FjZmY5MzUtMzkwYS0z
NWY0LThiMDAtNzI2N2QyYjM1OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHBIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4k7RoEDzZ6qEkv2Y/3Vb8lYvtkTRY7K60sQHSbVh4oudJiK/HQPne8
YAt62inIcNfBL5hlRUZWaDYS5egNXtv073IFpurc1M+lI2WVP8XMBHJULrKXviQU
MBE4eODKM9uiw7vZGSwFHMW1IpUUm2cJ/PMr09IHgnc/IsKH2v7uu1/vLOTbeE5l
lRtJW8sEBtIdZrluP0xePu3rN+wO6fLuCGD3nFTcvIHzlAK1HQq57vABEsXuNXV2
UiLdWYt4lUbgsxNMLsrcRApkTp0T2dbUhZF7Ml9984SlZybA3WVoi/hLVVHPn+DU
EjvFJ5rL18wT4AmGF+1Df5gV+3NOKvY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:24:55 2025 by rpki-client