Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/75824587-e641-391b-83b7-af610267e2b8.roa
File:                     75824587-e641-391b-83b7-af610267e2b8.roa (raw, json)
Hash identifier:          yOq67aELC+KDruukRb8vOJ0zkIUBBEQ0tvSmAVrBxOk=
Subject key identifier:   51:ED:0C:02:BE:C3:AB:09:A5:53:1D:D0:65:B5:C9:53:73:3E:BE:78
Certificate issuer:       /CN=b04e46d2-7952-4fd4-ae9f-045de0e84497
Certificate serial:       010D0C9F4328584827C53FD58FC44D8FF3661540
Authority key identifier: F9:4D:A4:40:5C:D5:22:D0:43:E1:5F:4A:EB:D3:0C:1D:17:D5:03:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/75824587-e641-391b-83b7-af610267e2b8.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     31764
IP address blocks:        104.192.8.0/21 maxlen: 24
                          2606:6140::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:3f:d5:8f:c4:4d:8f:f3:66:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04e46d2-7952-4fd4-ae9f-045de0e84497
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=a727180c-1a66-4305-bf89-4d8b5f68d41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:9c:af:56:3b:cb:52:c6:db:c9:bd:ee:ec:
                    ca:a6:40:0a:11:68:a3:53:79:3e:4d:13:f0:b1:7a:
                    04:fc:02:2d:f7:95:8c:ff:e7:cb:20:0f:b8:d2:2e:
                    ae:79:0a:87:81:5d:b5:30:8d:38:5d:d0:f7:1a:2c:
                    e7:c9:f2:ba:d5:04:9d:87:c3:da:a3:c6:b1:b1:53:
                    ef:99:89:8d:eb:31:46:c4:ec:1c:2a:5a:61:a3:b4:
                    da:c4:44:71:a2:25:6b:25:aa:43:56:4f:0a:28:a5:
                    04:47:29:0e:15:f9:2a:12:9f:5c:d5:f3:78:d4:c3:
                    96:5c:6e:80:03:f9:d7:71:10:dc:19:c4:16:03:67:
                    3a:d0:21:ea:54:60:ec:e1:77:24:6c:e6:25:1a:bf:
                    86:20:c8:a3:6b:36:78:e1:74:29:5a:98:12:10:40:
                    45:ee:7a:bd:c0:08:ba:00:e2:bd:e8:8a:29:d2:43:
                    79:ac:f8:63:1a:e7:71:1f:9c:c7:cc:04:b2:61:94:
                    c8:40:c4:19:e8:4a:05:0b:c4:0e:68:c8:80:68:ea:
                    14:b9:ce:b7:38:43:0d:10:a5:87:76:cc:42:98:8b:
                    17:a2:04:a5:7f:e2:da:46:85:3e:ce:f7:c2:01:eb:
                    ad:51:bc:4a:ca:1e:c1:bb:61:7e:49:7c:ee:18:8f:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:ED:0C:02:BE:C3:AB:09:A5:53:1D:D0:65:B5:C9:53:73:3E:BE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/75824587-e641-391b-83b7-af610267e2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/b04e46d2-7952-4fd4-ae9f-045de0e84497.crl

            X509v3 Authority Key Identifier:
                keyid:F9:4D:A4:40:5C:D5:22:D0:43:E1:5F:4A:EB:D3:0C:1D:17:D5:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.8.0/21
                IPv6:
                  2606:6140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:09:3b:06:0a:38:93:d0:04:65:e7:75:0d:0f:a1:e2:59:28:
         f5:71:48:0b:25:13:dc:6b:ac:ce:ea:8f:fa:44:bc:b0:ce:c3:
         78:eb:c5:ac:b3:40:8b:09:a6:24:0c:6d:c8:57:66:80:06:dc:
         de:92:73:25:cd:c3:35:fe:b0:40:a5:28:72:ee:ad:0a:f4:b2:
         0d:d1:9f:20:38:ff:93:57:07:64:1b:66:3f:4d:38:f4:26:77:
         09:ea:29:82:96:3f:6c:8d:db:46:75:e6:48:d2:69:c6:b0:39:
         80:36:85:81:aa:e7:f3:b3:38:78:8d:dc:2a:53:d9:f6:b3:7d:
         1c:95:b9:65:cb:5a:36:0d:e8:49:3c:1f:c4:4a:da:2d:96:71:
         64:65:43:26:e9:48:be:ce:dc:66:51:9e:ed:8c:f4:7d:b1:46:
         14:76:03:2a:1b:79:1a:29:76:70:b4:03:73:c2:0d:35:c1:8a:
         a5:3b:a4:eb:f6:49:96:42:f2:d4:b4:c5:72:d4:24:0d:27:e0:
         db:b0:79:75:b2:16:b8:12:64:17:4f:9e:f3:ac:af:21:0f:02:
         c2:de:f3:e2:d5:d4:c4:61:9a:f1:89:82:db:69:f3:54:e8:bc:
         d6:be:18:28:ab:e4:86:d8:2a:4c:b9:dc:04:56:0a:b0:31:ff:
         9f:3d:23:6b
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEgnxT/Vj8RNj/NmFUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA0ZTQ2ZDItNzk1Mi00ZmQ0LWFlOWYtMDQ1ZGUwZTg0
NDk3MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
YTcyNzE4MGMtMWE2Ni00MzA1LWJmODktNGQ4YjVmNjhkNDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7mcr1Y7y1LG28m97uzKpkAKEWijU3k+TRPw
sXoE/AIt95WM/+fLIA+40i6ueQqHgV21MI04XdD3GiznyfK61QSdh8Pao8axsVPv
mYmN6zFGxOwcKlpho7TaxERxoiVrJapDVk8KKKUERykOFfkqEp9c1fN41MOWXG6A
A/nXcRDcGcQWA2c60CHqVGDs4XckbOYlGr+GIMijazZ44XQpWpgSEEBF7nq9wAi6
AOK96Iop0kN5rPhjGudxH5zHzASyYZTIQMQZ6EoFC8QOaMiAaOoUuc63OEMNEKWH
dsxCmIsXogSlf+LaRoU+zvfCAeutUbxKyh7Bu2F+SXzuGI+MlQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFFHtDAK+w6sJpVMd0GW1yVNzPr54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMDRl
NDZkMi03OTUyLTRmZDQtYWU5Zi0wNDVkZTBlODQ0OTcvNzU4MjQ1ODctZTY0MS0z
OTFiLTgzYjctYWY2MTAyNjdlMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjA0ZTQ2ZDItNzk1Mi00ZmQ0LWFl
OWYtMDQ1ZGUwZTg0NDk3L2IwNGU0NmQyLTc5NTItNGZkNC1hZTlmLTA0NWRlMGU4
NDQ5Ny5jcmwwHwYDVR0jBBgwFoAU+U2kQFzVItBD4V9K69MMHRfVA18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMDRlNDZkMi03OTUyLTRmZDQtYWU5Zi0wNDVk
ZTBlODQ0OTcuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaMAIMA0E
AgACMAcDBQAmBmFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAAEJOwYKOJPQBGXndQ0PoeJZKPVxSAslE9xr
rM7qj/pEvLDOw3jrxayzQIsJpiQMbchXZoAG3N6ScyXNwzX+sEClKHLurQr0sg3R
nyA4/5NXB2QbZj9NOPQmdwnqKYKWP2yN20Z15kjSacawOYA2hYGq5/OzOHiN3CpT
2fazfRyVuWXLWjYN6Ek8H8RK2i2WcWRlQybpSL7O3GZRnu2M9H2xRhR2AyobeRop
dnC0A3PCDTXBiqU7pOv2SZZC8tS0xXLUJA0n4NuweXWyFrgSZBdPnvOsryEPAsLe
8+LV1MRhmvGJgttp81TovNa+GCir5IbYKky53ARWCrAx/589I2s=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:12:18 2025 by rpki-client