Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0d504470-f7a7-353b-99fe-145e26284c9d.roa
File:                     0d504470-f7a7-353b-99fe-145e26284c9d.roa (raw, json)
Hash identifier:          veWCIJ/fc2FbyeCmtfU3W06HUHQfHRUEPEE+KW2+s8Y=
Subject key identifier:   CD:D3:75:BF:BD:98:02:A6:22:E8:80:D4:32:BF:59:DA:50:08:A9:BF
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F43285848189388AA7AEB4CE49BB09F40
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0d504470-f7a7-353b-99fe-145e26284c9d.roa
Signing time:             Wed 04 Dec 2024 15:23:33 +0000
ROA not before:           Wed 04 Dec 2024 15:23:33 +0000
ROA not after:            Tue 04 Mar 2025 15:23:33 +0000
asID:                     6312
IP address blocks:        209.151.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:93:88:aa:7a:eb:4c:e4:9b:b0:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Dec  4 15:23:33 2024 GMT
            Not After : Mar  4 15:23:33 2025 GMT
        Subject: CN=42b803d1-e2cf-4299-adb6-a125d3521050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:7f:10:4d:e0:14:d5:2b:d7:4e:4d:3e:33:
                    9c:b5:d7:97:f4:4b:60:63:16:c9:1c:90:8d:3a:93:
                    48:63:12:81:5c:43:89:76:d3:3b:db:5c:db:b3:4c:
                    16:f8:ab:35:62:57:45:1d:11:b2:fd:a1:54:10:fe:
                    5d:88:99:c5:7c:bd:c7:24:05:fc:d1:75:f4:2b:04:
                    7b:df:c1:90:09:61:37:b9:ce:5e:7d:10:a6:5f:49:
                    07:1e:52:16:0b:61:a4:f7:73:89:50:72:55:3e:c6:
                    a4:02:c4:a1:6b:ec:ee:01:6b:f1:74:9e:7b:2c:8c:
                    ce:17:4c:d6:aa:17:52:e2:3b:40:fe:a1:a1:46:7f:
                    72:18:ce:7d:48:7e:87:0b:bb:a0:4e:40:82:1a:3f:
                    b5:03:dd:d5:5f:54:bb:32:eb:72:9a:14:aa:29:cf:
                    81:df:96:9d:44:34:ac:62:79:cc:a6:67:6b:aa:a2:
                    ca:ed:ae:e8:ce:7e:b0:1f:79:3c:a3:89:a1:d6:fc:
                    b3:c8:b8:f5:86:58:23:e3:09:04:7a:c5:e3:d7:d9:
                    49:35:0c:ba:a8:36:56:ad:60:39:ff:60:ba:a6:8a:
                    ec:e1:f0:ba:a9:06:be:52:94:b2:32:1a:2a:b3:25:
                    28:62:d8:a6:79:7e:d7:4a:4a:e7:2f:c7:4a:82:c4:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D3:75:BF:BD:98:02:A6:22:E8:80:D4:32:BF:59:DA:50:08:A9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0d504470-f7a7-353b-99fe-145e26284c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:de:c0:03:5a:2b:73:94:6a:58:02:01:67:f2:df:99:ea:
         6e:65:b6:e9:3e:6d:82:66:38:81:cc:99:2f:d1:72:88:28:8f:
         d9:c7:b8:c8:9f:2a:d9:79:2d:a2:17:84:e5:59:f8:26:b5:07:
         c1:a3:4e:8d:f4:a1:85:ae:60:d3:05:e7:9b:87:8e:fc:b7:98:
         ec:58:ea:8b:db:7a:b6:30:c5:97:c7:02:69:b9:db:06:00:e4:
         41:ab:29:63:a2:40:78:39:5d:74:ee:b8:f5:8f:05:74:aa:6b:
         a7:fc:dd:6e:24:a9:17:51:a9:e3:ee:0d:03:2d:d5:6e:5e:51:
         15:4b:da:bd:68:05:c7:24:78:18:f1:ae:05:57:bb:4c:91:c1:
         37:7b:f8:94:f8:b4:da:a0:77:75:ef:1c:c7:69:75:3c:cf:e9:
         4a:8c:77:75:62:9f:40:cf:0f:a9:6f:f2:6d:89:5c:c3:56:7c:
         b0:61:75:9f:9e:29:32:ce:03:69:c8:37:09:7a:e7:05:5e:58:
         1f:f7:61:49:81:3f:15:6e:11:c0:97:12:8a:eb:b0:95:19:0d:
         e5:49:f3:41:1e:04:0b:a7:92:4f:ce:c4:b4:76:57:e9:ed:e2:
         59:d4:bf:c6:72:c2:15:b1:dd:01:17:71:15:f1:c1:c8:ce:b9:
         3b:73:5e:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgYk4iqeutM5Juwn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTIwNDE1MjMzM1oXDTI1MDMwNDE1MjMzM1owLzEtMCsGA1UEAxMk
NDJiODAzZDEtZTJjZi00Mjk5LWFkYjYtYTEyNWQzNTIxMDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0d/EE3gFNUr105NPjOctdeX9EtgYxbJHJCN
OpNIYxKBXEOJdtM721zbs0wW+Ks1YldFHRGy/aFUEP5diJnFfL3HJAX80XX0KwR7
38GQCWE3uc5efRCmX0kHHlIWC2Gk93OJUHJVPsakAsSha+zuAWvxdJ57LIzOF0zW
qhdS4jtA/qGhRn9yGM59SH6HC7ugTkCCGj+1A93VX1S7MutymhSqKc+B35adRDSs
YnnMpmdrqqLK7a7ozn6wH3k8o4mh1vyzyLj1hlgj4wkEesXj19lJNQy6qDZWrWA5
/2C6pors4fC6qQa+UpSyMhoqsyUoYtimeX7XSkrnL8dKgsRGbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3Tdb+9mAKmIuiA1DK/WdpQCKm/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGQ1MDQ0NzAtZjdhNy0z
NTNiLTk5ZmUtMTQ1ZTI2Mjg0YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZezMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGih3sADWitzlGpYAgFn8t+Z6m5ltuk+bYJmOIHMmS/Rcogoj9nHuMif
Ktl5LaIXhOVZ+Ca1B8GjTo30oYWuYNMF55uHjvy3mOxY6ovberYwxZfHAmm52wYA
5EGrKWOiQHg5XXTuuPWPBXSqa6f83W4kqRdRqePuDQMt1W5eURVL2r1oBcckeBjx
rgVXu0yRwTd7+JT4tNqgd3XvHMdpdTzP6UqMd3Vin0DPD6lv8m2JXMNWfLBhdZ+e
KTLOA2nINwl65wVeWB/3YUmBPxVuEcCXEorrsJUZDeVJ80EeBAunkk/OxLR2V+nt
4lnUv8ZywhWx3QEXcRXxwcjOuTtzXsw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:03:27 2025 by rpki-client