Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa
File:                     30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa (raw, json)
Hash identifier:          o0EJczUyuLj0iu80MdriJ8T5hqtMbaNUpyq80ZnaKT4=
Subject key identifier:   AF:0C:FE:9B:46:E6:3B:03:4E:47:3D:DE:28:31:56:70:61:AC:B8:98
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482D5A8D9E3EAF4A1E2891A380
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     39239
IP address blocks:        131.153.89.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8d:9e:3e:af:4a:1e:28:91:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=e7d17f83-580a-498a-b341-991ef76cb3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:31:17:ec:ef:1a:58:97:ee:5b:0c:bd:34:ad:
                    94:14:3a:cb:4f:a6:36:46:10:78:13:f0:0b:d4:33:
                    75:5d:36:23:9e:cb:93:d2:a6:f5:69:b0:23:ba:95:
                    41:c1:15:55:4c:58:25:ce:b3:74:1a:2c:dd:76:cb:
                    2d:3a:35:f9:28:18:44:97:3d:09:83:bd:19:41:f8:
                    a4:38:ac:18:9c:cc:2d:70:cc:dd:16:a7:ad:7a:95:
                    20:e9:c2:17:40:7d:11:a8:65:f7:33:80:70:8e:bc:
                    97:ba:84:58:43:55:d7:0a:7c:e6:3f:22:67:b6:46:
                    ae:49:ca:1b:d5:68:a2:70:76:ee:81:6f:a5:e0:ba:
                    12:89:62:57:c4:b0:91:43:ea:46:44:0e:30:3d:25:
                    f3:b2:de:0a:c8:48:dd:dc:5e:12:c2:5f:84:22:7f:
                    e3:9a:1b:86:e7:3b:a2:b8:fb:6d:01:92:a6:d9:bc:
                    d7:3f:fe:cc:98:a0:04:70:55:5d:f0:88:50:fb:f6:
                    2f:a3:91:e6:88:ab:0c:7a:13:43:5c:39:13:8a:58:
                    76:00:9a:21:fb:c4:f1:27:40:3f:41:c0:34:7a:aa:
                    65:c3:cb:8d:a0:16:cc:00:b6:2f:f6:01:0d:5e:0c:
                    db:a9:fc:c9:ff:7b:68:13:0a:0c:50:30:2d:4f:4a:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0C:FE:9B:46:E6:3B:03:4E:47:3D:DE:28:31:56:70:61:AC:B8:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:11:ea:72:ed:3b:5a:7d:b3:58:13:4f:a4:5f:47:ba:44:07:
         02:89:6a:3b:08:50:39:f6:44:9e:a0:e5:c9:95:4d:c0:c6:f0:
         3b:82:d6:1c:7c:01:b4:bd:2a:86:e1:a0:0a:b5:98:51:bd:0a:
         17:cb:d8:02:14:ce:ed:6e:a5:70:c7:1c:ba:63:26:a8:15:22:
         ea:e2:f6:2d:8e:38:10:81:3a:98:b0:d4:f6:66:86:88:45:84:
         2a:50:24:43:93:bf:c6:71:d1:5f:9b:5e:fa:69:12:dd:b9:d1:
         e3:83:76:83:52:4d:e1:8e:ba:c6:87:fe:db:22:59:b9:58:e6:
         e9:d0:00:bb:17:95:3d:82:c5:1f:a3:ff:3b:6f:2c:9d:2b:62:
         64:b9:75:66:9f:ac:ef:30:ed:af:f1:8d:60:f7:5b:16:e7:2d:
         f8:e4:a0:8f:d5:42:50:c7:65:12:64:cb:cb:b0:54:f5:8f:ec:
         07:c5:a9:8d:a2:24:af:de:3c:b7:45:73:cd:93:90:88:35:74:
         a1:de:99:c5:2a:18:37:79:3f:5b:7f:30:83:2a:db:80:e0:01:
         cf:72:83:84:dd:38:0a:c8:24:83:2d:67:8b:25:40:30:9c:59:
         ba:26:72:46:ba:19:51:4a:c1:5f:fc:91:89:27:2c:6d:da:7c:
         a4:8c:08:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWo2ePq9KHiiRo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
ZTdkMTdmODMtNTgwYS00OThhLWIzNDEtOTkxZWY3NmNiM2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zEX7O8aWJfuWwy9NK2UFDrLT6Y2RhB4E/AL
1DN1XTYjnsuT0qb1abAjupVBwRVVTFglzrN0GizddsstOjX5KBhElz0Jg70ZQfik
OKwYnMwtcMzdFqetepUg6cIXQH0RqGX3M4BwjryXuoRYQ1XXCnzmPyJntkauScob
1WiicHbugW+l4LoSiWJXxLCRQ+pGRA4wPSXzst4KyEjd3F4Swl+EIn/jmhuG5zui
uPttAZKm2bzXP/7MmKAEcFVd8IhQ+/Yvo5HmiKsMehNDXDkTilh2AJoh+8TxJ0A/
QcA0eqplw8uNoBbMALYv9gENXgzbqfzJ/3toEwoMUDAtT0qNFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8M/ptG5jsDTkc93igxVnBhrLiYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzBjYmUzZmItY2Y4Mi0z
NjkzLTllYjQtOTAzNmY2NTQwZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0R6nLtO1p9s1gTT6RfR7pEBwKJajsIUDn2RJ6g5cmVTcDG8DuC1hx8
AbS9KobhoAq1mFG9ChfL2AIUzu1upXDHHLpjJqgVIuri9i2OOBCBOpiw1PZmhohF
hCpQJEOTv8Zx0V+bXvppEt250eODdoNSTeGOusaH/tsiWblY5unQALsXlT2CxR+j
/ztvLJ0rYmS5dWafrO8w7a/xjWD3WxbnLfjkoI/VQlDHZRJky8uwVPWP7AfFqY2i
JK/ePLdFc82TkIg1dKHemcUqGDd5P1t/MIMq24DgAc9yg4TdOArIJIMtZ4slQDCc
Wbomcka6GVFKwV/8kYknLG3afKSMCMk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:29:43 2025 by rpki-client