Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2c7835ed-71f5-3bf7-8a93-4473a895c021.roa
File:                     2c7835ed-71f5-3bf7-8a93-4473a895c021.roa (raw, json)
Hash identifier:          s9a5VRPjnRpol08X5b35CWFC91Nmq8SHmvcCPEKAM5I=
Subject key identifier:   86:72:E2:81:2A:A6:32:E7:4A:DF:31:D9:DC:DE:1C:42:9D:E0:C3:1F
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584869605C2F29B9CC172A5DC208
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2c7835ed-71f5-3bf7-8a93-4473a895c021.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     19437
IP address blocks:        67.43.44.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:5c:2f:29:b9:cc:17:2a:5d:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=b0d7a5b6-bffa-48a3-92a2-24f0d757b6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:96:7c:66:20:c8:4b:cf:20:b2:7e:d3:eb:
                    19:ec:76:43:bf:e3:50:92:14:e1:08:96:c1:c5:e4:
                    46:5c:8e:f9:1c:dc:20:f5:43:f3:f8:59:40:4c:5b:
                    d9:30:7e:62:a7:27:56:8b:9c:4e:d6:9b:ca:f6:61:
                    26:03:8f:f2:c6:cb:dc:63:84:ca:77:f4:74:6a:0e:
                    49:c0:7c:23:36:fe:46:a2:bd:dc:57:a6:c7:16:22:
                    91:97:65:64:ba:46:12:34:69:35:b9:52:c3:b9:95:
                    b6:fb:e3:7d:6f:e9:12:0c:ab:2a:e9:33:62:ad:8a:
                    3d:fd:6d:9e:9d:55:38:9f:6e:3a:a8:02:ee:45:1f:
                    ce:27:40:a3:cf:27:51:b0:c4:8f:b3:50:3a:30:3f:
                    4c:09:eb:74:14:32:38:4b:d9:9e:56:05:cf:67:90:
                    95:09:d0:81:d0:b0:3b:e7:3d:d2:75:e6:69:92:95:
                    47:87:9d:a4:fc:a7:ce:5c:51:06:aa:12:b6:09:92:
                    ac:fb:b5:a5:22:8a:d7:50:aa:29:4c:83:2e:8d:33:
                    00:03:ff:78:21:31:af:38:86:34:74:05:ca:f1:aa:
                    6b:66:3c:a4:af:f1:36:55:55:7e:42:dc:69:ce:97:
                    dd:00:3b:0b:c1:df:03:d1:6b:55:f7:25:df:6d:31:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:72:E2:81:2A:A6:32:E7:4A:DF:31:D9:DC:DE:1C:42:9D:E0:C3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2c7835ed-71f5-3bf7-8a93-4473a895c021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:bf:bc:78:13:65:bd:af:92:2f:2c:2e:b8:0e:94:e3:c3:0a:
         56:a8:b7:3e:98:98:21:a2:1a:c6:d6:fa:a5:b1:c0:72:5f:c4:
         da:e4:3e:6e:ee:ab:04:85:16:c8:0e:b3:a1:bf:a3:ab:f5:ed:
         42:37:7b:e6:c7:7f:37:2a:e1:f6:fe:5a:e1:51:d0:b8:ff:66:
         7b:04:61:33:b6:00:74:4e:56:47:5e:70:ec:c9:e7:b3:60:6d:
         be:68:b7:8e:09:9b:4d:8a:49:cb:97:4d:ec:53:ef:44:df:58:
         4a:6e:06:46:97:3a:74:61:16:b6:1f:52:4c:13:e9:37:90:ec:
         b8:6d:41:a2:b6:c0:0b:cb:2f:3d:43:08:9e:1b:a3:c7:a0:bb:
         a4:e8:46:aa:a3:73:24:36:81:80:83:1b:a3:58:2c:f8:7a:aa:
         6c:78:91:4f:41:7f:64:d6:fc:7b:d0:ab:a8:4f:e3:b8:a1:5a:
         95:bf:85:15:a3:0a:9a:c7:f9:11:09:0c:14:6a:4f:16:b0:bc:
         89:b7:89:73:e1:ec:7e:8a:d8:0c:a2:a2:ef:a9:0c:31:84:3d:
         e5:3e:cf:f0:ad:01:2f:36:29:02:54:9c:c1:f1:4a:77:2d:2b:
         02:9d:81:ec:f2:24:64:83:21:55:23:00:60:03:de:6a:90:b4:
         9f:f6:d4:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYFwvKbnMFypdwggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YjBkN2E1YjYtYmZmYS00OGEzLTkyYTItMjRmMGQ3NTdiNmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5aWfGYgyEvPILJ+0+sZ7HZDv+NQkhThCJbB
xeRGXI75HNwg9UPz+FlATFvZMH5ipydWi5xO1pvK9mEmA4/yxsvcY4TKd/R0ag5J
wHwjNv5Gor3cV6bHFiKRl2VkukYSNGk1uVLDuZW2++N9b+kSDKsq6TNirYo9/W2e
nVU4n246qALuRR/OJ0CjzydRsMSPs1A6MD9MCet0FDI4S9meVgXPZ5CVCdCB0LA7
5z3SdeZpkpVHh52k/KfOXFEGqhK2CZKs+7WlIorXUKopTIMujTMAA/94ITGvOIY0
dAXK8aprZjykr/E2VVV+QtxpzpfdADsLwd8D0WtV9yXfbTEeawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZy4oEqpjLnSt8x2dzeHEKd4MMfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMmM3ODM1ZWQtNzFmNS0z
YmY3LThhOTMtNDQ3M2E4OTVjMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQyssMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGa/vHgTZb2vki8sLrgOlOPDClaotz6YmCGiGsbW+qWxwHJfxNrkPm7u
qwSFFsgOs6G/o6v17UI3e+bHfzcq4fb+WuFR0Lj/ZnsEYTO2AHROVkdecOzJ57Ng
bb5ot44Jm02KScuXTexT70TfWEpuBkaXOnRhFrYfUkwT6TeQ7LhtQaK2wAvLLz1D
CJ4bo8egu6ToRqqjcyQ2gYCDG6NYLPh6qmx4kU9Bf2TW/HvQq6hP47ihWpW/hRWj
CprH+REJDBRqTxawvIm3iXPh7H6K2Ayiou+pDDGEPeU+z/CtAS82KQJUnMHxSnct
KwKdgezyJGSDIVUjAGAD3mqQtJ/21PI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:16:08 2025 by rpki-client