Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa
File:                     8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa (raw, json)
Hash identifier:          tMBW/j7nnHbmVMuuXrZJkvLLSKNueHDpFmN/gjlcHKM=
Subject key identifier:   5B:F3:B3:42:24:81:B4:FC:FF:E5:0E:6B:08:F7:77:1B:F1:7B:28:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F04A12BA5BB42A19A95880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        100.15.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:4a:12:ba:5b:b4:2a:19:a9:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=e461f924-0e36-4e24-b125-3dbdc0d83250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:44:a3:2f:33:26:cb:9a:30:82:65:48:4d:
                    f9:93:10:a5:a6:77:bc:59:0d:4a:d7:2b:e3:88:36:
                    8d:51:d2:f0:40:6c:99:be:fb:ff:f1:c1:a1:5b:70:
                    4a:6f:19:20:2e:a9:76:82:e6:77:80:66:b7:35:07:
                    75:0f:7f:35:9d:de:c2:74:79:4b:1e:b9:67:19:55:
                    b6:37:95:b8:ba:ac:8f:8f:c7:72:22:99:3a:f3:63:
                    c6:58:bd:5b:41:0e:e7:09:d5:d1:fe:91:a9:1a:6a:
                    5d:38:e2:48:c9:6a:da:63:fe:a6:af:09:6c:9e:56:
                    7a:4b:a7:96:8f:0f:3a:2f:e3:42:e7:95:4a:dc:bb:
                    a6:84:ab:f3:85:dd:30:c6:a4:de:71:55:fe:cc:97:
                    63:f5:e9:2a:ec:43:af:95:60:cc:22:b8:5b:7a:96:
                    62:75:5c:f7:7d:d7:47:c7:23:4b:f5:1b:be:31:ac:
                    3c:f0:b1:6f:fd:59:17:31:a0:b3:04:e0:16:52:c8:
                    18:fe:64:3d:c0:ed:3b:2a:0b:68:1e:ab:73:89:c0:
                    34:2f:a6:a1:ac:e1:a9:7b:43:d4:1a:50:56:be:28:
                    d7:59:5c:51:71:05:ca:bc:84:7d:65:a6:bd:07:3b:
                    73:71:2f:0f:ca:2f:a2:c9:fc:fc:0e:97:74:c3:fc:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F3:B3:42:24:81:B4:FC:FF:E5:0E:6B:08:F7:77:1B:F1:7B:28:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:fe:52:2e:57:13:8e:4d:df:69:1d:d4:7e:e2:0d:4d:1b:85:
         d5:b6:72:f5:87:31:d2:3f:5e:48:de:55:66:80:75:50:56:39:
         e2:61:7d:66:d3:29:cb:5e:a2:ec:da:33:cf:b7:19:cf:a9:1b:
         39:3b:8e:9e:c1:96:29:ca:78:0a:06:e7:26:b5:bf:96:75:f7:
         27:aa:b3:46:9b:f1:62:5b:e7:45:2e:eb:d5:0f:db:1e:8b:51:
         08:16:6e:be:a0:52:a3:fb:7d:62:47:3b:15:13:83:51:f6:47:
         d7:d4:b3:b8:ad:4d:a0:76:0c:b6:e0:12:d2:7e:8a:ff:c4:db:
         ac:31:06:36:63:0f:a4:fb:15:af:4a:e0:97:6d:4a:99:f9:e9:
         d7:4d:18:40:a6:4d:4a:86:21:ff:ad:a1:b8:2f:71:76:e5:0e:
         30:c3:0e:78:0e:24:46:0b:01:9d:01:b4:99:b4:9e:f0:55:c7:
         78:a4:55:f9:f2:46:e7:b8:91:51:19:6d:92:93:26:48:4d:73:
         a0:07:75:88:cf:7c:47:d7:d6:00:68:a2:bc:67:80:63:e0:7e:
         e5:29:85:ff:cb:58:cc:fb:e7:72:9c:72:98:17:db:db:89:3f:
         0e:70:cd:4d:aa:ad:0c:f5:26:2d:88:46:a4:11:81:76:bc:42:
         1a:e1:5f:75
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgy8EoSulu0KhmpWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZTQ2MWY5MjQtMGUzNi00ZTI0LWIxMjUtM2RiZGMwZDgzMjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/dEoy8zJsuaMIJlSE35kxClpne8WQ1K1yvj
iDaNUdLwQGyZvvv/8cGhW3BKbxkgLql2guZ3gGa3NQd1D381nd7CdHlLHrlnGVW2
N5W4uqyPj8dyIpk682PGWL1bQQ7nCdXR/pGpGmpdOOJIyWraY/6mrwlsnlZ6S6eW
jw86L+NC55VK3LumhKvzhd0wxqTecVX+zJdj9ekq7EOvlWDMIrhbepZidVz3fddH
xyNL9Ru+Maw88LFv/VkXMaCzBOAWUsgY/mQ9wO07KgtoHqtzicA0L6ahrOGpe0PU
GlBWvijXWVxRcQXKvIR9Zaa9BztzcS8Pyi+iyfz8Dpd0w/y/zQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFvzs0IkgbT8/+UOawj3dxvxeyi/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGM0NTRmMzYtMDRmNy0z
MmZiLWI3NmUtZWIzN2Y3NDBiMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZA8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjP5SLlcTjk3faR3UfuINTRuF1bZy9Ycx0j9eSN5VZoB1UFY54mF9ZtMp
y16i7Nozz7cZz6kbOTuOnsGWKcp4CgbnJrW/lnX3J6qzRpvxYlvnRS7r1Q/bHotR
CBZuvqBSo/t9Ykc7FRODUfZH19SzuK1NoHYMtuAS0n6K/8TbrDEGNmMPpPsVr0rg
l21Kmfnp100YQKZNSoYh/62huC9xduUOMMMOeA4kRgsBnQG0mbSe8FXHeKRV+fJG
57iRURltkpMmSE1zoAd1iM98R9fWAGiivGeAY+B+5SmF/8tYzPvncpxymBfb24k/
DnDNTaqtDPUmLYhGpBGBdrxCGuFfdQ==
-----END CERTIFICATE-----