Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d975a817-1fd8-3e06-9028-360f3da64162.roa
File:                     d975a817-1fd8-3e06-9028-360f3da64162.roa (raw, json)
Hash identifier:          oiwlhuoSGjE+wEVKzb369GNZUp40BdkMCBsqnyiNlS4=
Subject key identifier:   E1:8F:70:CB:5E:04:C1:29:74:29:3F:61:DF:30:BB:10:4C:02:AA:83
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848143CDDE31E45090C4EA45800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d975a817-1fd8-3e06-9028-360f3da64162.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     36183
IP address blocks:        172.224.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3c:dd:e3:1e:45:09:0c:4e:a4:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=210dea27-9edf-4ce0-80c5-61227e677eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:55:72:f3:b3:5a:fe:9e:77:9b:d3:39:06:
                    45:9d:5d:2b:32:c1:2c:f0:e8:16:96:71:1d:f7:70:
                    07:ff:20:ff:5e:b8:99:b3:bf:40:58:42:5b:3c:dd:
                    fe:3b:50:58:35:0f:8a:0d:47:b3:12:d3:76:bf:d6:
                    17:a3:9d:65:16:f6:4e:eb:2b:5c:2c:03:13:22:d9:
                    42:42:2a:86:aa:dc:ba:ca:da:0f:c9:d5:24:a5:24:
                    a8:e4:b6:38:f9:c0:d6:bc:6e:f9:14:2a:b9:b4:01:
                    d7:19:9f:de:e7:be:fb:99:80:b0:0a:9c:25:93:c1:
                    38:b8:1f:de:cf:dd:59:c3:b9:c4:4c:d8:4d:e4:32:
                    7b:43:ae:c2:8d:3f:dd:a4:50:b6:0f:cc:49:ea:59:
                    4a:5d:58:65:91:1c:9e:78:08:20:4f:78:dc:da:2d:
                    62:f5:32:16:4d:b9:81:0e:e8:8b:d6:e0:6b:b3:d8:
                    fb:45:2d:db:87:3b:53:13:9f:83:a5:49:24:e9:11:
                    7a:62:14:cd:0c:35:6d:15:72:17:01:27:cd:07:ec:
                    fe:a8:71:ec:0d:94:c6:49:7b:5a:65:d4:fc:48:b9:
                    87:11:75:8e:8d:0e:1b:ac:8d:0c:96:93:02:63:44:
                    e4:33:21:13:1d:ee:12:46:fd:a2:f4:12:d2:e5:2a:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:70:CB:5E:04:C1:29:74:29:3F:61:DF:30:BB:10:4C:02:AA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d975a817-1fd8-3e06-9028-360f3da64162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:a2:ce:53:bf:59:e0:b3:b8:03:dc:94:7f:2e:03:e2:34:
         2e:38:c9:f3:b0:1b:cf:f0:4c:d2:24:ec:9b:92:d4:e5:7c:00:
         f0:24:47:ea:20:32:15:62:78:2a:7a:71:5a:f9:9d:36:59:14:
         ca:3f:63:e9:dd:40:6a:43:c1:d6:50:91:d1:e7:d6:70:a0:a5:
         cd:e2:9d:2d:4a:c4:8f:83:8c:8e:f8:f1:58:dd:d7:a1:5c:d8:
         a3:52:77:51:ff:b9:24:f4:89:fb:80:ba:a7:0e:88:9d:66:24:
         f3:9c:f2:45:43:c4:3b:f4:23:ab:7d:c6:a4:70:cc:7c:60:7d:
         21:9a:fd:2d:98:5e:fa:2c:e3:76:c4:65:56:06:26:af:f4:98:
         0d:53:44:26:4d:1f:7d:da:50:ed:e3:c9:0b:1a:94:12:ff:72:
         52:26:a4:df:f0:42:fa:ab:94:3d:01:61:5b:6c:28:a3:c2:f8:
         54:b0:95:a7:c5:af:5e:ad:c3:04:9e:14:c1:92:2b:d6:bd:12:
         d5:e9:79:f2:f4:49:2a:27:b8:34:f7:fc:7d:1b:48:c2:72:01:
         45:47:05:ac:f4:bd:11:b5:aa:08:e8:bd:0f:c9:a2:cf:13:9a:
         7b:48:c2:b4:0e:ba:a8:67:a6:e0:ca:7e:c6:27:c7:58:ca:96:
         8f:db:a1:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPN3jHkUJDE6kWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MjEwZGVhMjctOWVkZi00Y2UwLTgwYzUtNjEyMjdlNjc3ZWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSlVcvOzWv6ed5vTOQZFnV0rMsEs8OgWlnEd
93AH/yD/XriZs79AWEJbPN3+O1BYNQ+KDUezEtN2v9YXo51lFvZO6ytcLAMTItlC
QiqGqty6ytoPydUkpSSo5LY4+cDWvG75FCq5tAHXGZ/e5777mYCwCpwlk8E4uB/e
z91Zw7nETNhN5DJ7Q67CjT/dpFC2D8xJ6llKXVhlkRyeeAggT3jc2i1i9TIWTbmB
DuiL1uBrs9j7RS3bhztTE5+DpUkk6RF6YhTNDDVtFXIXASfNB+z+qHHsDZTGSXta
ZdT8SLmHEXWOjQ4brI0MlpMCY0TkMyETHe4SRv2i9BLS5SoK7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGPcMteBMEpdCk/Yd8wuxBMAqqDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk3NWE4MTctMWZkOC0z
ZTA2LTkwMjgtMzYwZjNkYTY0MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUKos5Tv1ngs7gD3JR/LgPiNC44yfOwG8/wTNIk7JuS1OV8APAkR+og
MhVieCp6cVr5nTZZFMo/Y+ndQGpDwdZQkdHn1nCgpc3inS1KxI+DjI748Vjd16Fc
2KNSd1H/uST0ifuAuqcOiJ1mJPOc8kVDxDv0I6t9xqRwzHxgfSGa/S2YXvos43bE
ZVYGJq/0mA1TRCZNH33aUO3jyQsalBL/clImpN/wQvqrlD0BYVtsKKPC+FSwlafF
r16twwSeFMGSK9a9EtXpefL0SSonuDT3/H0bSMJyAUVHBaz0vRG1qgjovQ/Jos8T
mntIwrQOuqhnpuDKfsYnx1jKlo/boUU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:36 2025 by rpki-client