Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/60a1323c-203e-3098-b964-667c4099d08a.roa
File:                     60a1323c-203e-3098-b964-667c4099d08a.roa (raw, json)
Hash identifier:          rSDRemIxRAMhCLh62cs9VWngVC1CN9dlorcsnXEQRrU=
Subject key identifier:   14:CE:32:42:4A:1C:4C:B4:E9:4F:C2:92:24:4B:49:70:62:79:AC:05
Certificate issuer:       /CN=0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee
Certificate serial:       010D0C9F4328584819CFD731CF968C71019BD700
Authority key identifier: 0F:F8:40:D1:FC:82:C8:78:6A:6D:E0:A6:1C:8A:B2:BF:72:F1:9D:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/60a1323c-203e-3098-b964-667c4099d08a.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     40350
IP address blocks:        158.51.226.0/23 maxlen: 23
                          158.51.226.0/24 maxlen: 24
                          158.51.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d7:31:cf:96:8c:71:01:9b:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=e1e7cdb7-19cf-41f8-80fd-f8cb7faaacae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:a4:7b:ba:76:c2:a1:48:e1:ca:25:5f:4b:
                    8a:e5:46:02:5e:40:86:9d:70:5c:31:34:f8:71:f6:
                    09:02:0a:ae:f3:53:dd:d7:bb:ec:7b:7e:63:32:db:
                    0b:1e:59:f4:4d:19:f9:9c:85:3c:41:72:35:f9:da:
                    b8:46:9e:cf:d9:78:24:8e:3a:ed:32:5a:39:ce:90:
                    2c:63:3a:06:a2:e5:14:4b:26:1f:ef:4b:7d:c6:74:
                    e1:c6:05:e4:b4:d2:18:f4:b3:72:ef:e8:11:78:ab:
                    62:ba:f4:cf:61:13:b9:31:40:40:c9:ef:f9:3e:c9:
                    34:d6:f7:e5:82:ee:ca:b5:0a:4d:86:b2:f6:48:e0:
                    98:c8:ad:c0:11:65:27:e3:e6:f9:2d:8e:a6:1d:b3:
                    f0:60:6e:50:d2:0f:77:81:cb:61:8f:81:1f:6a:cf:
                    62:fd:6b:2e:34:ab:81:5f:28:8a:63:5e:bc:85:db:
                    62:69:b6:32:d8:5a:a6:27:dc:5a:0a:24:77:3b:91:
                    29:f4:66:89:ef:98:c9:0f:b4:01:0b:97:4f:b1:87:
                    76:02:9b:24:6b:3c:ed:65:84:41:10:39:ec:4f:79:
                    07:21:60:96:c0:3e:80:3a:9d:1a:c1:94:65:b1:cf:
                    36:15:db:1a:6f:4c:46:9e:d3:b7:b4:94:8f:19:a4:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:32:42:4A:1C:4C:B4:E9:4F:C2:92:24:4B:49:70:62:79:AC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/60a1323c-203e-3098-b964-667c4099d08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.crl

            X509v3 Authority Key Identifier:
                keyid:0F:F8:40:D1:FC:82:C8:78:6A:6D:E0:A6:1C:8A:B2:BF:72:F1:9D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:c4:18:d7:c9:70:8b:67:00:8e:71:cc:14:ac:19:6c:95:
         b4:7f:c0:7d:ba:c9:75:f7:f6:7c:bd:7c:09:f5:f2:7a:8d:f4:
         99:1b:24:ed:99:0a:53:31:5a:38:a9:ff:53:07:1d:06:80:d3:
         7a:65:c0:14:cb:7b:d0:39:d1:b3:c6:29:73:5e:4f:5d:fc:a8:
         c7:59:41:79:33:e9:40:d7:24:71:38:ad:0e:58:4f:b8:e4:04:
         53:ed:f2:ec:ed:8f:89:b0:01:78:9e:75:e8:b1:19:3a:98:f6:
         ab:d3:ab:27:53:8b:a1:96:d6:93:24:6c:2a:6a:17:05:b9:e5:
         2a:a7:d0:2e:88:e3:59:37:ea:8a:f3:18:bb:45:ac:42:46:24:
         94:7d:af:e0:16:ec:ba:f9:98:cf:0e:08:65:ae:e7:21:c1:9e:
         0b:77:f4:17:b6:d1:d4:8c:8d:ad:28:3a:09:da:0c:a6:7f:dd:
         d2:23:86:7d:0d:0d:05:4a:8e:c8:26:e9:5e:7a:df:94:47:0f:
         bb:ce:1e:d1:4a:8d:e9:cc:96:62:dc:fd:e6:ce:87:82:39:c2:
         16:98:db:ba:39:af:14:1a:e2:fc:e4:89:1a:38:82:3c:1f:17:
         ec:29:fb:14:d6:b6:54:67:1e:4f:84:67:e7:5c:7e:53:73:69:
         68:fa:64:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz9cxz5aMcQGb1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzUxZjMtZDJhNS00NWViLTlmYjgtNjlmOGQ0ZmMy
N2VlMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZTFlN2NkYjctMTljZi00MWY4LTgwZmQtZjhjYjdmYWFhY2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNWke7p2wqFI4colX0uK5UYCXkCGnXBcMTT4
cfYJAgqu81Pd17vse35jMtsLHln0TRn5nIU8QXI1+dq4Rp7P2XgkjjrtMlo5zpAs
YzoGouUUSyYf70t9xnThxgXktNIY9LNy7+gReKtiuvTPYRO5MUBAye/5Psk01vfl
gu7KtQpNhrL2SOCYyK3AEWUn4+b5LY6mHbPwYG5Q0g93gcthj4Efas9i/WsuNKuB
XyiKY168hdtiabYy2FqmJ9xaCiR3O5Ep9GaJ75jJD7QBC5dPsYd2ApskazztZYRB
EDnsT3kHIWCWwD6AOp0awZRlsc82Fdsab0xGntO3tJSPGaRUuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBTOMkJKHEy06U/CkiRLSXBieawFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wYWJj
NTFmMy1kMmE1LTQ1ZWItOWZiOC02OWY4ZDRmYzI3ZWUvNjBhMTMyM2MtMjAzZS0z
MDk4LWI5NjQtNjY3YzQwOTlkMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGFiYzUxZjMtZDJhNS00NWViLTlm
YjgtNjlmOGQ0ZmMyN2VlLzBhYmM1MWYzLWQyYTUtNDVlYi05ZmI4LTY5ZjhkNGZj
MjdlZS5jcmwwHwYDVR0jBBgwFoAUD/hA0fyCyHhqbeCmHIqyv3LxnUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wYWJjNTFmMy1kMmE1LTQ1ZWItOWZiOC02OWY4
ZDRmYzI3ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjPiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBpxBjXyXCLZwCOccwUrBlslbR/wH26yXX39ny9fAn18nqN9JkbJO2Z
ClMxWjip/1MHHQaA03plwBTLe9A50bPGKXNeT138qMdZQXkz6UDXJHE4rQ5YT7jk
BFPt8uztj4mwAXiedeixGTqY9qvTqydTi6GW1pMkbCpqFwW55Sqn0C6I41k36orz
GLtFrEJGJJR9r+AW7Lr5mM8OCGWu5yHBngt39Be20dSMja0oOgnaDKZ/3dIjhn0N
DQVKjsgm6V5635RHD7vOHtFKjenMlmLc/ebOh4I5whaY27o5rxQa4vzkiRo4gjwf
F+wp+xTWtlRnHk+EZ+dcflNzaWj6ZNI=
-----END CERTIFICATE-----
Generated at Thu May 8 21:21:46 2025 by rpki-client