Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/fa95f29a-142c-36cf-a9b4-614c7af1346c.roa
File:                     fa95f29a-142c-36cf-a9b4-614c7af1346c.roa (raw, json)
Hash identifier:          UvV+un26Qo91AEg5ac+r1KnJOlKWSiFCzNubjRnFHZM=
Subject key identifier:   A3:C1:FA:9C:F3:1A:B9:97:23:EC:84:22:7D:AA:93:D1:FF:EB:DE:BC
Certificate issuer:       /CN=66367942-14b9-49ce-b2d4-9472107e8402
Certificate serial:       010D0C9F432858484C1019FF459D69092080A1A0
Authority key identifier: 75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/fa95f29a-142c-36cf-a9b4-614c7af1346c.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     53831
IP address blocks:        142.202.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:19:ff:45:9d:69:09:20:80:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66367942-14b9-49ce-b2d4-9472107e8402
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=27eafb74-196d-43cf-84b1-8a7f525334b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:dc:a9:49:cd:98:bc:53:70:88:c1:54:c5:
                    49:41:d4:51:03:71:15:aa:eb:37:1f:52:86:1d:63:
                    04:89:32:88:9f:e9:88:93:c9:3e:2b:80:3d:09:92:
                    21:02:07:cc:fb:8e:b5:c7:79:f6:0d:2a:51:5f:1c:
                    81:ef:15:67:e6:5e:3b:e8:10:75:66:ce:0b:1d:8b:
                    76:1a:d2:0e:80:e6:8a:ac:d7:a2:43:d4:01:b7:8c:
                    a6:6e:9d:b9:f0:3e:fe:35:3d:6d:53:15:bb:d0:d0:
                    34:27:9c:a5:b3:e7:91:d1:22:7c:08:79:1d:e6:41:
                    82:65:df:cd:12:02:e5:6b:a9:db:34:26:6a:d0:4f:
                    45:3e:cf:0f:88:7c:1f:7a:90:a9:e3:d7:c7:64:72:
                    f7:b5:c5:68:49:c1:c8:3a:29:26:4a:0a:60:0e:1f:
                    57:b6:80:04:83:aa:ba:75:94:9b:e1:95:ed:72:a1:
                    da:37:6c:c8:82:e6:93:b2:c1:17:51:a5:5f:20:eb:
                    41:40:2c:9f:91:91:18:a9:f1:0c:01:7f:3b:9f:ca:
                    80:e2:ea:06:e5:1c:bd:80:c2:1e:65:ab:6e:35:28:
                    fb:13:15:48:97:c1:6c:3e:e0:06:7e:2b:5f:b8:84:
                    81:dd:5d:47:6c:8b:25:66:f4:ed:d7:60:c3:b2:f6:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:FA:9C:F3:1A:B9:97:23:EC:84:22:7D:AA:93:D1:FF:EB:DE:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/fa95f29a-142c-36cf-a9b4-614c7af1346c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl

            X509v3 Authority Key Identifier:
                keyid:75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:21:cd:c4:52:56:93:27:e6:18:8a:37:18:b5:19:09:e5:bc:
         d3:92:a5:46:0b:6e:d2:3e:ed:86:1c:38:8a:7e:d5:b7:1a:94:
         a4:1b:5b:a2:74:20:75:ef:25:37:0b:0d:42:1c:b0:13:ff:db:
         77:fb:70:a3:50:50:6f:6e:d0:2c:d8:24:bc:61:b4:0d:f3:27:
         db:00:9c:29:63:e0:b2:22:0e:b5:9f:0e:7e:f2:b5:a1:26:c2:
         e6:e1:18:fa:2d:8f:fd:e9:61:ac:b3:2f:70:35:65:8b:c7:c9:
         1a:0e:e5:f3:15:1e:5c:a2:e1:58:0a:11:2d:41:e4:0e:8e:2b:
         03:cf:d0:5b:9a:35:fe:40:8b:79:27:75:3d:20:7a:30:b9:2e:
         11:bb:e8:a0:2a:fe:92:5c:cc:66:53:7c:08:66:de:47:ee:65:
         ee:e7:a3:fc:a1:1c:64:7f:86:91:ab:2b:bc:21:65:c3:3c:bf:
         e4:1a:50:84:89:2c:81:8d:cd:6e:12:30:e3:05:7e:cc:bd:be:
         f1:17:3e:39:62:17:15:d9:cb:55:1e:fe:bd:79:be:2c:6d:bb:
         1f:3f:93:58:22:de:f7:2a:37:62:ed:6e:67:3b:08:1d:e8:da:
         5b:e7:2d:b0:e1:63:72:dd:65:91:e3:0e:85:7e:93:ae:22:25:
         66:f4:e4:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBn/RZ1pCSCAoaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYzNjc5NDItMTRiOS00OWNlLWIyZDQtOTQ3MjEwN2U4
NDAyMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MjdlYWZiNzQtMTk2ZC00M2NmLTg0YjEtOGE3ZjUyNTMzNGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvjcqUnNmLxTcIjBVMVJQdRRA3EVqus3H1KG
HWMEiTKIn+mIk8k+K4A9CZIhAgfM+461x3n2DSpRXxyB7xVn5l476BB1Zs4LHYt2
GtIOgOaKrNeiQ9QBt4ymbp258D7+NT1tUxW70NA0J5yls+eR0SJ8CHkd5kGCZd/N
EgLla6nbNCZq0E9FPs8PiHwfepCp49fHZHL3tcVoScHIOikmSgpgDh9XtoAEg6q6
dZSb4ZXtcqHaN2zIguaTssEXUaVfIOtBQCyfkZEYqfEMAX87n8qA4uoG5Ry9gMIe
ZatuNSj7ExVIl8FsPuAGfitfuISB3V1HbIslZvTt12DDsvbTXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPB+pzzGrmXI+yEIn2qk9H/6968MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NjM2
Nzk0Mi0xNGI5LTQ5Y2UtYjJkNC05NDcyMTA3ZTg0MDIvZmE5NWYyOWEtMTQyYy0z
NmNmLWE5YjQtNjE0YzdhZjEzNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjYzNjc5NDItMTRiOS00OWNlLWIy
ZDQtOTQ3MjEwN2U4NDAyLzY2MzY3OTQyLTE0YjktNDljZS1iMmQ0LTk0NzIxMDdl
ODQwMi5jcmwwHwYDVR0jBBgwFoAUdeFU6GjTBb4aK/RAfLUGIh+UCdcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NjM2Nzk0Mi0xNGI5LTQ5Y2UtYjJkNC05NDcy
MTA3ZTg0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsoQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMhzcRSVpMn5hiKNxi1GQnlvNOSpUYLbtI+7YYcOIp+1bcalKQbW6J0
IHXvJTcLDUIcsBP/23f7cKNQUG9u0CzYJLxhtA3zJ9sAnClj4LIiDrWfDn7ytaEm
wubhGPotj/3pYayzL3A1ZYvHyRoO5fMVHlyi4VgKES1B5A6OKwPP0FuaNf5Ai3kn
dT0gejC5LhG76KAq/pJczGZTfAhm3kfuZe7no/yhHGR/hpGrK7whZcM8v+QaUISJ
LIGNzW4SMOMFfsy9vvEXPjliFxXZy1Ue/r15vixtux8/k1gi3vcqN2Ltbmc7CB3o
2lvnLbDhY3LdZZHjDoV+k64iJWb05Fo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:53:08 2025 by rpki-client