Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9ab758e-ecdc-367c-a080-38f2cf0a9db1.roa
File:                     f9ab758e-ecdc-367c-a080-38f2cf0a9db1.roa (raw, json)
Hash identifier:          VCrORkoddqHaPHKJKVhZJuX2pAKTSdiGVF02bBxaND4=
Subject key identifier:   21:2E:07:11:5D:D7:7D:B2:6B:35:9E:1C:EA:19:3E:A5:9F:92:BD:28
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584800AFC4F9AE708D64BC8D88C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9ab758e-ecdc-367c-a080-38f2cf0a9db1.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     16625
IP address blocks:        184.26.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c4:f9:ae:70:8d:64:bc:8d:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=149ce23d-391b-49af-a5e0-8bc68e001864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:4b:d8:7e:c5:03:dd:5e:93:6b:22:ee:d8:
                    c2:29:2f:e7:26:78:46:79:c5:e7:a6:c6:df:8d:c6:
                    62:98:f3:30:90:80:be:96:dc:24:20:c6:31:fa:4e:
                    45:3d:8a:bf:da:d1:05:d9:9c:17:ad:54:3e:ac:9c:
                    a2:84:e6:1b:e8:7c:2a:05:1f:3f:45:71:aa:ab:fd:
                    b9:34:2c:4b:00:79:66:18:35:74:b7:6e:8a:f6:68:
                    b5:b7:8a:65:de:68:04:99:6c:60:91:76:88:6b:16:
                    ee:2a:58:3b:c3:8b:b5:e9:03:e7:a6:27:a0:da:32:
                    48:c0:2c:9b:0c:e5:50:d2:6e:c7:1b:b8:9c:2a:ac:
                    3a:6b:a4:bc:df:64:e9:28:7c:02:a8:6f:b5:07:3a:
                    ac:25:b8:38:7d:cd:fd:f3:d8:3e:9a:74:45:25:66:
                    4a:a7:ce:e8:44:25:cc:02:24:af:82:5f:ac:24:a8:
                    3a:b6:0c:2d:cd:3d:35:a8:d1:57:0b:c4:8f:81:59:
                    e1:e8:06:6a:7c:49:c6:da:5d:c6:af:4a:43:d1:89:
                    66:80:25:e5:53:e7:fa:91:e0:6d:9f:4e:ae:38:24:
                    89:c0:39:65:d5:ee:d4:4e:08:4a:d3:64:03:1e:9b:
                    2c:c1:3d:eb:f8:a3:af:27:2c:5b:c4:98:82:f8:41:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:07:11:5D:D7:7D:B2:6B:35:9E:1C:EA:19:3E:A5:9F:92:BD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9ab758e-ecdc-367c-a080-38f2cf0a9db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:7b:e0:0b:20:07:b1:8b:f9:7c:f1:db:dc:04:b1:a1:0f:60:
         e4:1c:13:72:32:ef:c9:be:34:1d:97:82:9a:c1:6c:76:f6:2b:
         76:cd:98:6c:ff:27:1f:b0:d0:6c:ca:b8:2d:55:af:54:47:aa:
         bf:77:be:88:72:05:99:95:45:06:7a:9e:d6:69:5b:e8:75:15:
         08:c8:e2:8b:14:46:37:eb:62:1f:5d:b4:51:e4:96:77:15:5d:
         35:f6:f7:10:20:d7:b2:98:98:7e:db:46:71:ff:73:ad:bf:bd:
         14:cf:cf:45:61:b2:30:9b:27:1a:ef:05:cf:5f:91:dd:a7:23:
         87:4c:9f:0d:cf:df:cf:87:7a:4b:1f:ca:20:28:7a:37:04:e1:
         66:ac:9b:99:de:e2:8c:4e:6d:e3:df:05:7c:31:74:b7:1f:9a:
         20:36:57:7e:03:07:d9:50:df:7c:b3:b3:8d:59:f3:c6:a3:03:
         76:39:e4:e1:e7:33:9e:1f:bc:68:c8:1c:30:1c:28:07:b8:5d:
         b8:05:e0:7d:8d:d4:ba:d7:9d:69:8d:57:bb:f7:2b:93:f9:78:
         df:47:6d:34:f3:6e:67:b2:b6:ba:d6:92:20:e6:2d:5b:db:19:
         34:ec:0b:12:8b:c0:5a:d1:57:7c:a6:2c:2a:ee:be:16:0a:06:
         7d:ba:01:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr8T5rnCNZLyNiMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
MTQ5Y2UyM2QtMzkxYi00OWFmLWE1ZTAtOGJjNjhlMDAxODY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvFL2H7FA91ek2si7tjCKS/nJnhGecXnpsbf
jcZimPMwkIC+ltwkIMYx+k5FPYq/2tEF2ZwXrVQ+rJyihOYb6HwqBR8/RXGqq/25
NCxLAHlmGDV0t26K9mi1t4pl3mgEmWxgkXaIaxbuKlg7w4u16QPnpieg2jJIwCyb
DOVQ0m7HG7icKqw6a6S832TpKHwCqG+1BzqsJbg4fc3989g+mnRFJWZKp87oRCXM
AiSvgl+sJKg6tgwtzT01qNFXC8SPgVnh6AZqfEnG2l3Gr0pD0YlmgCXlU+f6keBt
n06uOCSJwDll1e7UTghK02QDHpsswT3r+KOvJyxbxJiC+EFddwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCEuBxFd132yazWeHOoZPqWfkr0oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjlhYjc1OGUtZWNkYy0z
NjdjLWEwODAtMzhmMmNmMGE5ZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBq8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABx74AsgB7GL+Xzx29wEsaEPYOQcE3Iy78m+NB2XgprBbHb2K3bNmGz/
Jx+w0GzKuC1Vr1RHqr93vohyBZmVRQZ6ntZpW+h1FQjI4osURjfrYh9dtFHklncV
XTX29xAg17KYmH7bRnH/c62/vRTPz0VhsjCbJxrvBc9fkd2nI4dMnw3P38+Heksf
yiAoejcE4Wasm5ne4oxObePfBXwxdLcfmiA2V34DB9lQ33yzs41Z88ajA3Y55OHn
M54fvGjIHDAcKAe4XbgF4H2N1LrXnWmNV7v3K5P5eN9HbTTzbmeytrrWkiDmLVvb
GTTsCxKLwFrRV3ymLCruvhYKBn26AT8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:27 2025 by rpki-client