Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/797d0558-3392-3475-9d07-0ff7f7d35106.roa
File:                     797d0558-3392-3475-9d07-0ff7f7d35106.roa (raw, json)
Hash identifier:          Ifr2FnWahZYKHuipgAc1vMGqlFsjXiXqiF9wTrfMDbQ=
Subject key identifier:   8B:37:EF:AF:C4:D8:AD:51:06:D6:41:4F:24:00:2C:5A:9B:35:28:F6
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F432858483FAA03776FBA664BE7D8E400
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/797d0558-3392-3475-9d07-0ff7f7d35106.roa
Signing time:             Wed 18 Dec 2024 15:25:22 +0000
ROA not before:           Wed 18 Dec 2024 15:25:22 +0000
ROA not after:            Tue 18 Mar 2025 14:25:22 +0000
asID:                     13335
IP address blocks:        170.176.163.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:aa:03:77:6f:ba:66:4b:e7:d8:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Dec 18 15:25:22 2024 GMT
            Not After : Mar 18 14:25:22 2025 GMT
        Subject: CN=b19992e1-4503-47cd-95bf-a2abb7877405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:08:60:c2:c6:a2:20:4e:36:c5:35:77:1e:
                    d8:ed:e1:6f:da:3a:d9:3b:1c:20:32:16:3a:c8:40:
                    14:e3:b5:32:f4:d4:f0:4e:a5:0b:80:b4:16:26:d9:
                    2a:45:35:e3:aa:6f:43:66:2a:a4:db:95:a2:4e:48:
                    bb:52:c6:71:c0:ee:c9:ca:83:e2:35:a7:8b:06:e7:
                    37:c5:e9:2b:f7:45:f3:7e:a8:01:b5:4c:53:29:4c:
                    87:00:91:d2:e4:e9:2b:10:13:1c:1f:63:a9:91:a2:
                    bf:e9:43:82:9f:0b:6d:b3:44:2d:c7:e1:d9:70:79:
                    4a:84:ec:f3:5a:29:c9:b0:c2:a9:4a:8b:9d:03:b8:
                    cd:44:27:b5:66:63:a5:9d:0c:af:ed:fb:50:19:79:
                    d4:eb:b0:5a:32:c3:af:1c:aa:8c:5a:e6:5e:82:6f:
                    62:b2:44:19:48:53:69:f1:27:7a:32:a1:06:11:b5:
                    78:06:9f:4d:c2:58:dc:e2:02:13:ea:df:78:63:aa:
                    73:10:09:3c:98:03:61:51:9f:a9:7a:c3:09:f4:27:
                    1f:1b:f2:f2:ef:b9:e6:e7:20:0e:ee:a4:a4:04:03:
                    d0:b7:41:d6:0c:d2:2a:04:c8:6c:e1:6d:4e:20:8e:
                    67:92:3e:e4:41:d2:a0:ae:d5:2b:94:15:1c:11:91:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:37:EF:AF:C4:D8:AD:51:06:D6:41:4F:24:00:2C:5A:9B:35:28:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/797d0558-3392-3475-9d07-0ff7f7d35106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7f:1b:13:7a:df:30:d5:d2:87:9f:48:1c:c9:43:b3:47:c0:
         7f:5a:9a:73:68:59:36:43:69:e4:44:22:55:e4:ea:18:6c:b9:
         ef:4d:68:e3:9f:de:41:f1:f0:46:e9:fa:1b:a7:cb:86:23:74:
         ef:24:ff:f2:48:f5:ec:84:7a:4d:ff:8f:34:67:d0:51:7e:1c:
         49:b6:97:40:dc:0c:a1:ba:9f:41:df:96:20:74:dd:fd:a4:fd:
         d4:88:00:24:7e:7b:05:63:43:5f:48:8a:cc:9d:60:db:d2:99:
         22:3a:94:c9:92:36:c0:b9:c9:13:f7:62:74:5f:f6:e7:75:b8:
         70:2e:b8:2e:b2:38:33:04:36:a5:39:fd:d8:50:2a:52:46:03:
         e4:27:66:82:fb:95:ff:02:b1:d9:49:08:03:bb:28:90:cf:e4:
         c9:a0:d1:ff:49:ac:cd:94:63:6c:61:01:f9:b5:f7:df:fb:00:
         d5:fb:6d:57:42:56:db:bc:25:f3:74:6a:0e:52:85:0d:b8:7d:
         cf:87:c2:cb:8a:45:01:59:80:51:b8:26:2a:38:c5:79:08:1e:
         2d:e8:e2:07:7d:fb:5d:02:06:b6:7a:9b:0f:f6:df:ff:6f:5d:
         cd:ff:d9:3f:77:be:74:81:69:d0:76:2a:7b:22:82:b8:bf:3c:
         c3:2a:da:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/qgN3b7pmS+fY5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI0MTIxODE1MjUyMloXDTI1MDMxODE0MjUyMlowLzEtMCsGA1UEAxMk
YjE5OTkyZTEtNDUwMy00N2NkLTk1YmYtYTJhYmI3ODc3NDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCAIYMLGoiBONsU1dx7Y7eFv2jrZOxwgMhY6
yEAU47Uy9NTwTqULgLQWJtkqRTXjqm9DZiqk25WiTki7UsZxwO7JyoPiNaeLBuc3
xekr90XzfqgBtUxTKUyHAJHS5OkrEBMcH2OpkaK/6UOCnwtts0Qtx+HZcHlKhOzz
WinJsMKpSoudA7jNRCe1ZmOlnQyv7ftQGXnU67BaMsOvHKqMWuZegm9iskQZSFNp
8Sd6MqEGEbV4Bp9Nwljc4gIT6t94Y6pzEAk8mANhUZ+pesMJ9CcfG/Ly77nm5yAO
7qSkBAPQt0HWDNIqBMhs4W1OII5nkj7kQdKgrtUrlBUcEZFRcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIs376/E2K1RBtZBTyQALFqbNSj2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNzk3ZDA1NTgtMzM5Mi0z
NDc1LTlkMDctMGZmN2Y3ZDM1MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABN/GxN63zDV0oefSBzJQ7NHwH9amnNoWTZDaeREIlXk6hhsue9NaOOf
3kHx8Ebp+huny4YjdO8k//JI9eyEek3/jzRn0FF+HEm2l0DcDKG6n0HfliB03f2k
/dSIACR+ewVjQ19IisydYNvSmSI6lMmSNsC5yRP3YnRf9ud1uHAuuC6yODMENqU5
/dhQKlJGA+QnZoL7lf8CsdlJCAO7KJDP5Mmg0f9JrM2UY2xhAfm199/7ANX7bVdC
Vtu8JfN0ag5ShQ24fc+HwsuKRQFZgFG4Jio4xXkIHi3o4gd9+10CBrZ6mw/23/9v
Xc3/2T93vnSBadB2Knsigri/PMMq2jU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:51 2025 by rpki-client