Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e21fc35-9cea-3245-8fdf-3b9d235bddb7.roa
File:                     2e21fc35-9cea-3245-8fdf-3b9d235bddb7.roa (raw, json)
Hash identifier:          j3GFuHwzYwTgmLpC7QAxbFnrQ+odqTRoude/BnDfL60=
Subject key identifier:   8C:3E:50:C4:35:DF:99:00:CB:E3:5D:F8:EB:C2:7D:CD:01:27:F3:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F04D02A0246879BECE8480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e21fc35-9cea-3245-8fdf-3b9d235bddb7.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        71.245.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:4d:02:a0:24:68:79:be:ce:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=c50a0a1c-388f-4ced-b02a-6fc3c4a7d2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:6f:e8:19:a0:10:72:aa:7c:59:c4:ae:f5:
                    0e:f2:2c:24:f7:30:c4:8b:c7:7c:b4:3d:af:90:cf:
                    95:d6:1f:2b:9f:9b:82:da:48:90:08:13:9e:29:d1:
                    a9:c3:e8:44:9b:8b:39:23:5b:67:bc:1c:a2:71:ea:
                    1c:f7:49:aa:46:be:87:e6:02:c3:bc:c5:c0:7f:c6:
                    02:cc:b1:09:5b:23:8f:bb:4b:62:ab:d5:97:10:ac:
                    95:7b:50:36:39:ee:ba:6b:48:f4:33:8f:38:f5:97:
                    19:03:4e:25:c0:ff:eb:41:12:e9:99:26:b1:17:69:
                    60:36:fa:a5:cc:19:a7:9a:a5:30:09:4f:18:cd:c8:
                    31:da:79:9f:8a:14:8e:c2:aa:04:59:bd:d5:bb:cd:
                    44:b2:59:c1:90:77:1e:01:38:3d:63:18:a9:ed:88:
                    d2:09:eb:77:5a:06:2b:09:e8:d2:05:5f:1e:6a:a7:
                    c5:8d:06:cd:82:b1:d7:3a:bd:5c:74:a8:4f:56:1f:
                    8b:0d:f7:97:b6:d9:af:0e:53:7c:3c:9f:00:9e:f9:
                    0f:dd:13:0a:0a:ce:74:19:7f:19:2c:f5:16:0a:99:
                    cc:30:18:8e:08:51:e2:92:e0:36:95:7c:7b:7d:37:
                    7f:48:6b:10:5a:f6:b7:af:86:19:2d:b4:37:ad:6c:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3E:50:C4:35:DF:99:00:CB:E3:5D:F8:EB:C2:7D:CD:01:27:F3:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e21fc35-9cea-3245-8fdf-3b9d235bddb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.245.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:74:b1:11:b6:29:d5:64:08:99:6a:7e:06:58:bc:90:82:20:
         57:54:54:f6:6d:e3:9e:95:a9:f1:cb:23:b5:cb:e5:84:a7:b9:
         c4:a2:83:be:36:55:1a:11:fc:34:43:44:a1:b2:75:85:ca:ca:
         3b:98:8e:69:9c:24:97:de:8f:9a:66:23:57:5d:1e:5c:72:5b:
         6c:2d:e1:8d:18:df:8f:50:a2:16:21:3a:3f:48:18:7d:8b:59:
         6b:f1:49:99:aa:d7:5e:a7:c3:dc:ea:7e:c9:49:08:5a:34:1f:
         1d:c4:0f:e5:20:a7:2c:8b:50:5d:ff:4d:eb:c6:ec:e8:da:43:
         c5:ef:93:16:af:06:c2:5e:a6:aa:5d:d4:d6:cd:53:13:03:f9:
         54:cc:37:0e:99:b4:8d:aa:64:ad:85:66:cf:2b:1e:87:dd:e8:
         f4:23:69:f8:7d:30:d6:22:af:c6:16:0d:be:b1:6f:99:b1:9a:
         58:2f:73:c3:da:f9:5c:cd:ad:dd:8c:df:dc:fa:82:53:7e:51:
         a6:f2:2e:3d:ce:e7:89:17:1f:44:50:3d:b2:0e:98:50:8a:96:
         79:b6:d9:54:83:88:4c:c2:69:41:a1:0c:3c:47:5b:cf:e4:0f:
         10:81:c5:41:fd:90:d4:1e:2b:9d:19:5f:c7:94:eb:1e:64:44:
         b0:38:f5:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8E0CoCRoeb7OhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YzUwYTBhMWMtMzg4Zi00Y2VkLWIwMmEtNmZjM2M0YTdkMmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYJv6BmgEHKqfFnErvUO8iwk9zDEi8d8tD2v
kM+V1h8rn5uC2kiQCBOeKdGpw+hEm4s5I1tnvByiceoc90mqRr6H5gLDvMXAf8YC
zLEJWyOPu0tiq9WXEKyVe1A2Oe66a0j0M4849ZcZA04lwP/rQRLpmSaxF2lgNvql
zBmnmqUwCU8Yzcgx2nmfihSOwqoEWb3Vu81EslnBkHceATg9Yxip7YjSCet3WgYr
CejSBV8eaqfFjQbNgrHXOr1cdKhPVh+LDfeXttmvDlN8PJ8AnvkP3RMKCs50GX8Z
LPUWCpnMMBiOCFHikuA2lXx7fTd/SGsQWva3r4YZLbQ3rWyOOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIw+UMQ135kAy+Nd+OvCfc0BJ/MOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmUyMWZjMzUtOWNlYS0z
MjQ1LThmZGYtM2I5ZDIzNWJkZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/VAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHh0sRG2KdVkCJlqfgZYvJCCIFdUVPZt456VqfHLI7XL5YSnucSig742
VRoR/DRDRKGydYXKyjuYjmmcJJfej5pmI1ddHlxyW2wt4Y0Y349QohYhOj9IGH2L
WWvxSZmq116nw9zqfslJCFo0Hx3ED+UgpyyLUF3/TevG7OjaQ8XvkxavBsJepqpd
1NbNUxMD+VTMNw6ZtI2qZK2FZs8rHofd6PQjafh9MNYir8YWDb6xb5mxmlgvc8Pa
+VzNrd2M39z6glN+UabyLj3O54kXH0RQPbIOmFCKlnm22VSDiEzCaUGhDDxHW8/k
DxCBxUH9kNQeK50ZX8eU6x5kRLA49Yc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:30:36 2025 by rpki-client