Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d506ba94-7e00-38d8-b96d-776e25372f11.roa
File:                     d506ba94-7e00-38d8-b96d-776e25372f11.roa (raw, json)
Hash identifier:          44wzMb1aF3UXYsauy9z+fset8oaVjp8L5Gk4TapBZpM=
Subject key identifier:   6B:F0:D3:A4:C7:CB:4F:E3:13:31:2D:4F:D2:3C:90:CA:3B:07:62:88
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AD2C5653F810E615BC980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d506ba94-7e00-38d8-b96d-776e25372f11.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        192.62.88.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:d2:c5:65:3f:81:0e:61:5b:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=2b3a2088-2002-45fb-a8ba-64deec737472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:dc:8a:ad:7e:2e:77:37:b0:0b:e4:53:5f:
                    36:32:40:34:ab:85:de:00:2f:69:03:be:6e:7c:36:
                    4e:dd:7c:c8:d3:56:65:64:03:ac:1f:41:71:b8:78:
                    a6:b7:db:d3:58:43:dd:62:c8:66:61:24:70:7c:6e:
                    89:be:ff:1e:96:93:82:c9:43:f1:92:fc:03:98:74:
                    35:53:84:ab:6b:e0:52:c2:b9:cf:cf:13:b9:7c:a5:
                    6e:29:fb:ae:ab:00:95:5b:a2:7c:c5:2f:42:18:3f:
                    b6:2b:a7:46:f3:70:d1:70:ed:10:3e:7f:18:08:cb:
                    1b:ce:fb:a2:d4:d0:bb:5d:04:cf:5b:7f:d4:3c:4e:
                    23:65:40:49:65:67:5c:80:3a:68:ca:51:af:b3:51:
                    63:47:65:46:72:dd:b1:56:63:b6:ce:ae:ff:a3:ab:
                    0a:fc:fd:8a:83:e4:87:69:ae:33:21:8a:c9:78:1e:
                    51:5a:9d:fd:b1:c8:8e:43:01:9e:80:b1:7c:e3:f8:
                    03:37:a0:73:22:2f:89:5c:43:bd:78:02:97:9c:9a:
                    0f:ee:6b:ad:58:37:42:96:4b:f4:dd:0e:68:5f:9e:
                    f9:90:24:e5:80:0c:cb:90:26:79:68:b2:b8:c6:1e:
                    34:68:ba:c9:1d:47:e3:a5:a8:47:f5:c0:7c:e2:d8:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F0:D3:A4:C7:CB:4F:E3:13:31:2D:4F:D2:3C:90:CA:3B:07:62:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d506ba94-7e00-38d8-b96d-776e25372f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.62.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:15:79:1f:1b:10:40:ae:d3:29:a5:f7:c3:e5:ee:57:e5:
         54:9c:29:fb:ce:5f:c0:ec:62:89:da:ce:35:69:32:59:26:63:
         29:43:36:6d:2e:6b:de:93:06:1f:a7:90:ec:85:8e:71:a0:ca:
         70:fe:4c:94:02:23:a0:0c:a7:46:af:41:40:d4:50:c6:1c:7f:
         1d:75:2a:e5:94:7f:15:1d:cd:85:45:31:8c:90:3a:7f:10:e6:
         1b:f9:2b:2e:ae:c7:88:ba:e0:40:89:fe:4f:b4:34:b5:67:df:
         94:86:82:7e:01:b9:b6:dd:a2:6d:c2:3d:a2:e2:49:77:dd:29:
         3f:b1:04:34:55:cc:4f:2a:0a:0b:f9:71:7c:29:80:95:78:b4:
         b4:82:1e:37:39:5a:a4:a0:61:72:fd:20:1c:14:a7:eb:b4:a4:
         75:c4:b8:d6:60:5a:ef:6a:eb:e2:40:7c:6c:62:bb:3b:97:78:
         eb:af:45:b0:f5:5d:72:9c:b5:3b:1c:a2:f6:0a:69:4f:1a:7b:
         0d:63:06:b8:e7:4a:d0:dd:43:cb:71:8b:04:53:4b:89:c7:5f:
         aa:80:1d:2c:c2:f5:7c:de:53:12:ea:d1:3b:5d:3c:32:dc:5f:
         5d:51:17:3d:ff:eb:75:51:01:f6:53:75:34:32:b3:20:9b:d0:
         32:89:0d:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDetLFZT+BDmFbyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MmIzYTIwODgtMjAwMi00NWZiLWE4YmEtNjRkZWVjNzM3NDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkavciq1+Lnc3sAvkU182MkA0q4XeAC9pA75u
fDZO3XzI01ZlZAOsH0FxuHimt9vTWEPdYshmYSRwfG6Jvv8elpOCyUPxkvwDmHQ1
U4Sra+BSwrnPzxO5fKVuKfuuqwCVW6J8xS9CGD+2K6dG83DRcO0QPn8YCMsbzvui
1NC7XQTPW3/UPE4jZUBJZWdcgDpoylGvs1FjR2VGct2xVmO2zq7/o6sK/P2Kg+SH
aa4zIYrJeB5RWp39sciOQwGegLF84/gDN6BzIi+JXEO9eAKXnJoP7mutWDdClkv0
3Q5oX575kCTlgAzLkCZ5aLK4xh40aLrJHUfjpahH9cB84th90wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvw06THy0/jEzEtT9I8kMo7B2KIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDUwNmJhOTQtN2UwMC0z
OGQ4LWI5NmQtNzc2ZTI1MzcyZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwD5YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHI/FXkfGxBArtMppffD5e5X5VScKfvOX8DsYonazjVpMlkmYylDNm0u
a96TBh+nkOyFjnGgynD+TJQCI6AMp0avQUDUUMYcfx11KuWUfxUdzYVFMYyQOn8Q
5hv5Ky6ux4i64ECJ/k+0NLVn35SGgn4Bubbdom3CPaLiSXfdKT+xBDRVzE8qCgv5
cXwpgJV4tLSCHjc5WqSgYXL9IBwUp+u0pHXEuNZgWu9q6+JAfGxiuzuXeOuvRbD1
XXKctTscovYKaU8aew1jBrjnStDdQ8txiwRTS4nHX6qAHSzC9XzeUxLq0TtdPDLc
X11RFz3/63VRAfZTdTQysyCb0DKJDQ8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:31 2025 by rpki-client