Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/2fcfe011-55ae-3b00-a924-4de556ba925f.roa
File:                     2fcfe011-55ae-3b00-a924-4de556ba925f.roa (raw, json)
Hash identifier:          o6V86LJTU40Gn13ZD/65Svk7jnfuvm9FLuOy/IrdGGo=
Subject key identifier:   5D:CB:6F:B8:FE:D5:1F:53:12:62:F8:C0:D6:CB:32:99:E7:94:96:8D
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848222FEBC7378A56E539B6CB80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/2fcfe011-55ae-3b00-a924-4de556ba925f.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     2734
IP address blocks:        66.35.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:eb:c7:37:8a:56:e5:39:b6:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=3842892e-8c94-48eb-8937-53b09332abfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:79:5c:ed:e8:cc:e3:08:44:2a:9c:74:7e:
                    68:08:19:75:02:a6:17:ea:2b:db:b1:4d:8b:ba:69:
                    97:74:1a:68:17:2b:05:fd:da:f5:3b:58:ac:12:36:
                    92:6f:8c:d1:0a:ae:ad:e5:bf:fa:87:b3:f4:0c:de:
                    81:5b:71:fa:ca:8d:4d:3f:bd:81:1b:8a:fa:86:39:
                    ba:22:6e:1f:d5:71:ea:46:4f:e8:0d:3a:4a:1e:bf:
                    02:73:6a:92:4a:a7:6f:fc:6e:59:17:e6:5f:d8:d9:
                    10:2d:1f:cc:fd:b6:02:1e:5e:50:dd:da:8b:e0:0e:
                    1b:7e:80:a0:03:54:d9:54:3a:ff:2b:18:85:56:ae:
                    c0:45:6c:89:7e:76:b4:05:d1:e0:4a:6d:7c:51:0b:
                    df:e6:eb:3a:7d:62:67:a1:00:81:8d:6e:02:ce:ca:
                    66:c1:51:56:83:33:b6:1e:b3:ea:65:36:eb:de:65:
                    de:c3:45:4b:76:84:fa:fb:be:5d:55:92:74:6f:d1:
                    09:ba:31:d2:2a:78:c3:4c:00:26:01:20:bb:41:51:
                    95:61:21:02:a5:a2:8c:f7:9e:15:0a:88:f5:0a:1c:
                    c4:db:83:85:03:1b:53:0f:2e:67:9d:43:99:ee:91:
                    74:3c:6c:31:86:3f:8f:0c:6d:71:ef:f3:2b:28:1f:
                    0d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CB:6F:B8:FE:D5:1F:53:12:62:F8:C0:D6:CB:32:99:E7:94:96:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/2fcfe011-55ae-3b00-a924-4de556ba925f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:16:33:77:e5:c7:06:d6:98:7a:b3:7b:26:a2:e7:18:07:42:
         4b:e4:55:bd:79:d0:27:11:91:00:59:6c:4a:8e:43:64:39:7a:
         5d:28:67:31:f5:9f:fc:ef:6c:fc:f9:f4:44:f4:15:1c:81:a2:
         ff:26:34:54:f2:db:26:71:a0:fa:7d:ca:a3:8a:69:3c:b9:4a:
         42:78:48:26:65:d6:21:9c:48:fa:49:a4:83:e9:70:73:f4:cf:
         44:5d:99:7e:fc:97:63:54:2d:97:a0:96:4b:eb:ed:a1:b0:37:
         0f:69:5f:e8:d0:40:0c:c4:01:f7:e6:d0:2c:1b:40:31:05:dc:
         90:4e:48:49:8a:d5:86:e3:71:70:28:94:8b:50:06:a7:45:9b:
         d8:c1:67:03:21:79:05:7b:3f:ff:35:af:b2:ee:95:ca:2c:5b:
         52:a4:b3:65:10:08:a7:a4:77:a3:3e:8f:67:e0:35:09:df:2b:
         20:55:68:80:d1:09:e1:9d:3e:db:5e:cd:46:9d:ab:4a:ff:ff:
         e3:59:e7:bf:d7:76:98:13:23:5a:cd:eb:78:e7:f1:fd:ff:a2:
         9c:85:c5:03:c3:80:ec:31:ec:fc:63:70:b7:3d:03:1d:68:d2:
         ab:13:65:ea:07:bc:e6:66:ab:a6:c4:c0:33:f5:3f:f7:a5:da:
         c0:64:86:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+vHN4pW5Tm2y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
Mzg0Mjg5MmUtOGM5NC00OGViLTg5MzctNTNiMDkzMzJhYmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigR5XO3ozOMIRCqcdH5oCBl1AqYX6ivbsU2L
ummXdBpoFysF/dr1O1isEjaSb4zRCq6t5b/6h7P0DN6BW3H6yo1NP72BG4r6hjm6
Im4f1XHqRk/oDTpKHr8Cc2qSSqdv/G5ZF+Zf2NkQLR/M/bYCHl5Q3dqL4A4bfoCg
A1TZVDr/KxiFVq7ARWyJfna0BdHgSm18UQvf5us6fWJnoQCBjW4CzspmwVFWgzO2
HrPqZTbr3mXew0VLdoT6+75dVZJ0b9EJujHSKnjDTAAmASC7QVGVYSECpaKM954V
Coj1ChzE24OFAxtTDy5nnUOZ7pF0PGwxhj+PDG1x7/MrKB8N5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3Lb7j+1R9TEmL4wNbLMpnnlJaNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvMmZjZmUwMTEtNTVhZS0z
YjAwLWE5MjQtNGRlNTU2YmE5MjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiNTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAWM3flxwbWmHqzeyai5xgHQkvkVb150CcRkQBZbEqOQ2Q5el0oZzH1
n/zvbPz59ET0FRyBov8mNFTy2yZxoPp9yqOKaTy5SkJ4SCZl1iGcSPpJpIPpcHP0
z0RdmX78l2NULZeglkvr7aGwNw9pX+jQQAzEAffm0CwbQDEF3JBOSEmK1YbjcXAo
lItQBqdFm9jBZwMheQV7P/81r7LulcosW1Kks2UQCKekd6M+j2fgNQnfKyBVaIDR
CeGdPttezUadq0r//+NZ57/XdpgTI1rN63jn8f3/opyFxQPDgOwx7PxjcLc9Ax1o
0qsTZeoHvOZmq6bEwDP1P/el2sBkhpg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:28:02 2025 by rpki-client