Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3de75213-8d88-3eed-9106-dbbb38bc2c18.roa
File:                     3de75213-8d88-3eed-9106-dbbb38bc2c18.roa (raw, json)
Hash identifier:          +tBF2PTwIS2hhg6bmOINOyGKYa8mq83/WWkP0v7uXtI=
Subject key identifier:   20:DA:92:21:7D:D7:D2:FA:24:B7:E8:6D:72:B3:61:48:B8:A7:B8:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F045CDD18400E22A48AEA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3de75213-8d88-3eed-9106-dbbb38bc2c18.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        96.255.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:45:cd:d1:84:00:e2:2a:48:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=130f9c47-05a6-4f3e-ba19-39166a797d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:c2:e9:d8:73:44:0b:6b:f2:1f:02:9e:b6:
                    27:ee:82:d2:ab:e2:fc:32:2a:1c:1b:b4:2d:ab:53:
                    1e:ca:71:4f:5d:95:f7:3c:94:f3:f3:2e:46:57:2f:
                    95:da:d0:1c:df:a3:03:1d:f1:5b:c8:77:da:8b:c5:
                    9d:02:ce:b3:5d:ec:ed:f9:4e:8d:23:f8:a6:79:2b:
                    bb:32:9e:d4:37:1f:ec:66:46:98:49:af:07:60:df:
                    d7:ba:d7:7c:88:1c:46:5d:48:f2:66:06:3c:f5:98:
                    f6:4a:2b:04:ae:c5:c0:02:41:d5:8f:1f:5a:7e:ba:
                    c2:cf:f8:de:e6:0d:7a:f1:43:f2:f3:c6:4d:e7:4a:
                    07:c8:40:56:f0:de:fb:f1:30:ca:68:92:3d:c9:a5:
                    be:99:44:57:2c:96:5f:1e:57:82:ad:cc:46:32:6e:
                    2b:0a:c3:90:04:60:b3:6c:a0:d1:51:b2:e3:7b:33:
                    24:bd:b8:5b:a5:8a:0b:aa:15:44:f8:f9:96:1e:ad:
                    d9:85:92:11:4c:c3:62:44:93:6a:2f:27:bb:7e:c1:
                    05:a6:1f:d3:8b:37:7e:47:51:05:23:5f:46:ca:39:
                    b9:96:97:60:b2:31:5b:df:77:97:63:d7:d2:73:e6:
                    92:54:3b:4e:54:42:9c:a9:8b:63:1c:da:ac:a3:ad:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DA:92:21:7D:D7:D2:FA:24:B7:E8:6D:72:B3:61:48:B8:A7:B8:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3de75213-8d88-3eed-9106-dbbb38bc2c18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.255.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:65:a3:ad:c8:d2:b0:31:92:a5:08:49:b4:33:58:a0:53:35:
         3b:85:73:f5:bd:da:8a:c4:e1:35:36:8d:80:63:3d:82:60:93:
         cb:7e:9b:45:b2:fb:e6:14:c4:80:e9:03:80:99:fb:04:ba:87:
         84:ec:58:24:82:53:5a:59:69:e9:03:56:07:fe:58:39:f3:ce:
         ab:ec:bf:e2:cb:9c:41:96:ef:db:e3:39:8a:44:11:f8:ce:50:
         bb:15:e3:44:3a:5b:3d:a4:da:8b:5a:60:11:2f:df:b1:cd:02:
         a4:4b:1c:f3:60:5b:2d:76:15:2a:c8:da:3e:bf:8e:b3:a9:83:
         ab:81:b1:1c:f3:2e:16:c9:16:32:00:60:0d:bd:1e:7f:52:68:
         2c:bb:9e:97:34:d3:d4:1c:bf:1e:5a:4e:e5:62:32:be:6e:ed:
         e0:e5:72:f6:b3:b0:75:61:2b:f4:34:01:f1:91:ab:17:9f:f4:
         8d:6f:a4:13:30:00:fe:9c:7b:d7:75:5f:03:b0:e8:13:d4:d8:
         7f:0d:44:21:c7:61:01:78:95:2d:3b:4d:72:1a:97:6f:fe:fa:
         ad:61:01:9a:42:13:97:a4:23:e4:84:91:c4:5a:1d:f5:24:ac:
         1e:2a:8b:05:3b:42:92:08:03:3a:48:94:40:79:33:d2:99:ed:
         00:8b:8f:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgy8EXN0YQA4ipIrqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTMwZjljNDctMDVhNi00ZjNlLWJhMTktMzkxNjZhNzk3ZDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FDC6dhzRAtr8h8CnrYn7oLSq+L8MiocG7Qt
q1MeynFPXZX3PJTz8y5GVy+V2tAc36MDHfFbyHfai8WdAs6zXezt+U6NI/imeSu7
Mp7UNx/sZkaYSa8HYN/Xutd8iBxGXUjyZgY89Zj2SisErsXAAkHVjx9afrrCz/je
5g168UPy88ZN50oHyEBW8N778TDKaJI9yaW+mURXLJZfHleCrcxGMm4rCsOQBGCz
bKDRUbLjezMkvbhbpYoLqhVE+PmWHq3ZhZIRTMNiRJNqLye7fsEFph/Tizd+R1EF
I19Gyjm5lpdgsjFb33eXY9fSc+aSVDtOVEKcqYtjHNqso63XywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCDakiF919L6JLfobXKzYUi4p7jLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2RlNzUyMTMtOGQ4OC0z
ZWVkLTkxMDYtZGJiYjM4YmMyYzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYP8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAY2WjrcjSsDGSpQhJtDNYoFM1O4Vz9b3aisThNTaNgGM9gmCTy36bRbL7
5hTEgOkDgJn7BLqHhOxYJIJTWllp6QNWB/5YOfPOq+y/4sucQZbv2+M5ikQR+M5Q
uxXjRDpbPaTai1pgES/fsc0CpEsc82BbLXYVKsjaPr+Os6mDq4GxHPMuFskWMgBg
Db0ef1JoLLuelzTT1By/HlpO5WIyvm7t4OVy9rOwdWEr9DQB8ZGrF5/0jW+kEzAA
/px713VfA7DoE9TYfw1EIcdhAXiVLTtNchqXb/76rWEBmkITl6Qj5ISRxFod9SSs
HiqLBTtCkggDOkiUQHkz0pntAIuPWw==
-----END CERTIFICATE-----