Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/957be407-ce0f-3ed2-ae43-155bb52f79c4.roa
File:                     957be407-ce0f-3ed2-ae43-155bb52f79c4.roa (raw, json)
Hash identifier:          DvmSCYPCKxpq8ZVjML22LGljGAWfmDioG5Fv4GDjmcU=
Subject key identifier:   FA:60:C2:DC:8C:83:B1:31:26:9D:54:56:C1:A8:EE:B9:10:2B:62:2B
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584843B0060015CA084EF959ECC0
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/957be407-ce0f-3ed2-ae43-155bb52f79c4.roa
Signing time:             Fri 20 Dec 2024 02:00:40 +0000
ROA not before:           Fri 20 Dec 2024 02:00:40 +0000
ROA not after:            Thu 20 Mar 2025 01:00:40 +0000
asID:                     46450
IP address blocks:        142.214.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:b0:06:00:15:ca:08:4e:f9:59:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Dec 20 02:00:40 2024 GMT
            Not After : Mar 20 01:00:40 2025 GMT
        Subject: CN=369cc4f4-a556-4607-aa75-e7c3c3dfc01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:10:8f:85:46:0a:2d:ca:d0:32:93:9e:a8:
                    94:42:7d:97:61:ad:18:2c:98:1c:d5:ee:36:03:3b:
                    62:74:49:52:51:a2:e2:e0:af:80:14:46:7f:c0:6b:
                    8c:0e:c0:e5:59:9c:81:b2:a1:f7:a4:fb:10:a2:85:
                    0d:02:df:2d:85:c5:c3:49:03:5b:60:c5:55:47:c2:
                    83:b2:6c:b8:73:ab:c3:75:65:18:1b:1e:36:32:73:
                    ee:08:3d:8e:58:0c:f2:d3:ab:a2:68:40:de:89:50:
                    da:b5:d6:73:f7:02:78:10:bd:e7:b9:c0:bd:21:10:
                    7a:d3:e9:8d:0a:9c:b7:36:85:35:d2:c7:19:b0:a2:
                    ae:0e:03:4a:3f:db:82:95:3a:12:2f:e4:a2:bf:a1:
                    49:60:74:bd:f8:e5:01:04:41:ff:9e:38:a3:a8:e3:
                    c3:5f:2e:b0:c1:a7:4b:7d:ca:37:58:5d:af:9a:3e:
                    99:ec:e6:25:ea:0d:fb:64:15:02:a2:2a:ff:cb:7a:
                    f4:99:ef:26:2f:3f:f2:5c:95:91:01:5f:54:d3:e1:
                    89:fd:d6:07:fe:69:8d:2f:54:06:d7:c8:ef:cf:55:
                    39:21:26:82:53:aa:50:96:bb:90:11:64:bd:11:e2:
                    f7:56:e0:9d:14:56:f7:f8:d4:b0:b8:10:e5:0e:3e:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:60:C2:DC:8C:83:B1:31:26:9D:54:56:C1:A8:EE:B9:10:2B:62:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/957be407-ce0f-3ed2-ae43-155bb52f79c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:43:1b:7b:d9:39:d9:61:09:22:f5:61:cf:66:bb:0a:c4:84:
         70:10:bd:2d:01:66:c7:92:22:eb:a1:33:7c:6c:23:cb:ae:32:
         3f:51:69:e0:84:ef:2f:ae:86:03:c7:2d:af:c4:28:09:85:a3:
         22:84:55:0f:87:56:55:ae:13:e1:5a:14:ac:ee:e0:af:f5:47:
         5c:d7:4d:0c:6d:c0:d7:e5:eb:0f:25:14:35:40:3d:96:4d:d8:
         57:fa:e8:c6:b3:06:0c:20:bd:48:da:b8:3a:a7:db:19:60:8f:
         3c:e9:ef:16:46:1f:52:af:f9:ed:30:ff:97:b0:5c:9f:17:8c:
         8b:c9:79:00:8b:f7:a6:3e:5a:43:86:41:0a:55:32:8b:75:60:
         f3:74:b6:fa:d0:94:18:da:57:c6:e9:84:dd:27:16:d9:46:d6:
         97:19:16:1a:b6:9a:56:db:f6:92:93:5b:c9:af:50:64:8f:83:
         e0:61:a5:5d:4c:cc:de:55:5f:40:ef:ec:ed:59:d2:c9:33:16:
         c3:bf:17:10:bb:9e:de:0e:a6:3b:89:25:22:76:aa:af:1e:83:
         95:b1:db:51:ea:c0:8f:30:42:7d:54:18:eb:a1:1b:3e:bb:28:
         bc:62:68:6c:e3:e1:fd:c0:be:31:8a:cd:b0:88:02:d9:34:ec:
         ec:de:02:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhDsAYAFcoITvlZ7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3
ODYxMB4XDTI0MTIyMDAyMDA0MFoXDTI1MDMyMDAxMDA0MFowLzEtMCsGA1UEAxMk
MzY5Y2M0ZjQtYTU1Ni00NjA3LWFhNzUtZTdjM2MzZGZjMDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5UQj4VGCi3K0DKTnqiUQn2XYa0YLJgc1e42
AztidElSUaLi4K+AFEZ/wGuMDsDlWZyBsqH3pPsQooUNAt8thcXDSQNbYMVVR8KD
smy4c6vDdWUYGx42MnPuCD2OWAzy06uiaEDeiVDatdZz9wJ4EL3nucC9IRB60+mN
Cpy3NoU10scZsKKuDgNKP9uClToSL+Siv6FJYHS9+OUBBEH/njijqOPDXy6wwadL
fco3WF2vmj6Z7OYl6g37ZBUCoir/y3r0me8mLz/yXJWRAV9U0+GJ/dYH/mmNL1QG
18jvz1U5ISaCU6pQlruQEWS9EeL3VuCdFFb3+NSwuBDlDj4iKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPpgwtyMg7ExJp1UVsGo7rkQK2IrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk
YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvOTU3YmU0MDctY2UwZi0z
ZWQyLWFlNDMtMTU1YmI1MmY3OWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi
MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3
Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4
ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtaQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhDG3vZOdlhCSL1Yc9muwrEhHAQvS0BZseSIuuhM3xsI8uuMj9RaeCE
7y+uhgPHLa/EKAmFoyKEVQ+HVlWuE+FaFKzu4K/1R1zXTQxtwNfl6w8lFDVAPZZN
2Ff66MazBgwgvUjauDqn2xlgjzzp7xZGH1Kv+e0w/5ewXJ8XjIvJeQCL96Y+WkOG
QQpVMot1YPN0tvrQlBjaV8bphN0nFtlG1pcZFhq2mlbb9pKTW8mvUGSPg+BhpV1M
zN5VX0Dv7O1Z0skzFsO/FxC7nt4OpjuJJSJ2qq8eg5Wx21HqwI8wQn1UGOuhGz67
KLxiaGzj4f3AvjGKzbCIAtk07OzeAnE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:57 2025 by rpki-client