Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fd2fd86d-7573-332c-9100-4768a61017a7.roa
File:                     fd2fd86d-7573-332c-9100-4768a61017a7.roa (raw, json)
Hash identifier:          aXwDm3N7gWCNfVzDK6U7E9O59JiC7wxP/9TbiJo/tm4=
Subject key identifier:   89:92:C9:47:6D:1E:10:79:DD:EC:77:E0:88:B7:5B:50:16:9A:29:11
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848055E6722144FD1585B948E00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fd2fd86d-7573-332c-9100-4768a61017a7.roa
Signing time:             Wed 27 Nov 2024 18:16:08 +0000
ROA not before:           Wed 27 Nov 2024 18:16:08 +0000
ROA not after:            Tue 25 Feb 2025 18:16:08 +0000
asID:                     30058
IP address blocks:        2001:49f0:d00a::/48 maxlen: 48
                          2001:49f0:d00d::/48 maxlen: 48
                          2001:49f0:d023::/48 maxlen: 48
                          2001:49f0:d0ae::/48 maxlen: 48
                          2001:49f0:d0f6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:05:5e:67:22:14:4f:d1:58:5b:94:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Nov 27 18:16:08 2024 GMT
            Not After : Feb 25 18:16:08 2025 GMT
        Subject: CN=25513987-b631-4cfb-8365-6d4b77db4e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b5:28:9c:d7:e8:3d:de:f6:86:1a:5b:31:55:
                    a0:5d:52:54:74:5f:ee:2c:70:39:6e:60:c7:5f:91:
                    c8:cc:2c:c6:5f:0b:4d:2b:bd:fb:7f:6c:ef:57:f3:
                    35:00:19:6b:7c:54:50:08:ca:12:74:8e:f7:85:b1:
                    0b:39:66:0a:ac:30:f3:be:9d:dc:0e:05:74:31:28:
                    89:6a:59:47:7f:ae:23:86:37:8b:fc:0e:a5:dd:83:
                    3f:1d:eb:43:21:9f:b7:e7:f0:d7:2c:73:9c:a9:75:
                    c3:ff:64:8c:97:2b:58:62:df:b3:a5:1c:3a:e2:7e:
                    63:a7:1b:31:e1:17:6c:e4:fc:41:62:1f:a8:82:16:
                    90:ca:02:7f:ba:d4:25:e1:69:f2:8d:83:fc:08:fa:
                    02:5c:8d:b6:94:b2:95:27:62:c0:96:5e:73:47:34:
                    29:ee:9f:7c:3a:1f:16:65:3d:72:b1:f9:8a:92:08:
                    5f:6f:c3:f5:50:f3:01:a6:5e:fe:b4:82:2d:ea:00:
                    76:7e:3c:fb:3f:e9:2f:a2:0f:2d:20:3e:fa:a3:20:
                    ef:68:a7:58:bb:d1:af:c6:4e:22:ac:4e:7e:f8:e0:
                    11:55:dd:cb:a9:fa:85:f1:6b:b7:26:ca:21:02:08:
                    b5:d3:f4:ae:ca:df:8f:bc:01:56:45:35:8f:23:ee:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:92:C9:47:6D:1E:10:79:DD:EC:77:E0:88:B7:5B:50:16:9A:29:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fd2fd86d-7573-332c-9100-4768a61017a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d00a::/48
                  2001:49f0:d00d::/48
                  2001:49f0:d023::/48
                  2001:49f0:d0ae::/48
                  2001:49f0:d0f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d4:1e:65:09:48:17:d6:c5:04:56:60:44:ec:fc:7c:fb:8d:
         f3:95:57:f6:8e:36:2e:fb:67:e2:d2:2e:d1:a0:f4:0a:c4:15:
         5d:10:1e:5c:f1:69:bd:a4:42:03:96:ff:6f:8c:8c:58:ec:67:
         27:b8:29:4c:33:41:3d:c0:bf:b4:4a:b9:1e:07:a4:74:df:e3:
         90:b9:ba:75:b4:cd:34:35:0f:2e:19:06:8a:e4:57:0b:5d:3a:
         f9:81:ba:17:7a:00:b8:32:3e:35:5a:eb:8c:9c:69:62:40:33:
         15:62:1c:5f:2e:ea:43:4a:25:93:4b:4f:13:05:e9:f8:97:bf:
         15:78:3e:0d:d0:d2:9f:6f:90:6b:86:a5:db:83:4f:3f:ff:c3:
         e3:b8:5a:f9:8a:c0:84:8e:6e:a7:67:a2:43:0e:44:cb:25:86:
         82:84:4d:a1:70:d0:3e:d7:dd:3e:f6:30:74:8a:aa:3c:8b:ab:
         c3:57:5f:c8:30:0c:01:9f:8a:b0:cd:e0:1e:03:20:7f:d5:66:
         14:9d:92:e1:8f:10:29:fe:41:7c:80:49:0e:da:0c:46:9c:f8:
         e0:f7:52:58:4f:93:04:dd:8a:21:22:18:bb:e0:4c:91:10:c4:
         84:1f:09:c2:a0:55:d9:19:54:36:41:38:32:4b:67:b3:b0:ef:
         f8:9f:3a:dd
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEgFXmciFE/RWFuUjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTEyNzE4MTYwOFoXDTI1MDIyNTE4MTYwOFowLzEtMCsGA1UEAxMk
MjU1MTM5ODctYjYzMS00Y2ZiLTgzNjUtNmQ0Yjc3ZGI0ZTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbUonNfoPd72hhpbMVWgXVJUdF/uLHA5bmDH
X5HIzCzGXwtNK737f2zvV/M1ABlrfFRQCMoSdI73hbELOWYKrDDzvp3cDgV0MSiJ
allHf64jhjeL/A6l3YM/HetDIZ+35/DXLHOcqXXD/2SMlytYYt+zpRw64n5jpxsx
4Rds5PxBYh+oghaQygJ/utQl4WnyjYP8CPoCXI22lLKVJ2LAll5zRzQp7p98Oh8W
ZT1ysfmKkghfb8P1UPMBpl7+tIIt6gB2fjz7P+kvog8tID76oyDvaKdYu9Gvxk4i
rE5++OARVd3LqfqF8Wu3JsohAgi10/Suyt+PvAFWRTWPI+5qywIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFImSyUdtHhB53ex34Ii3W1AWmikRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZmQyZmQ4NmQtNzU3My0z
MzJjLTkxMDAtNDc2OGE2MTAxN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAIAFJ8NAK
AwcAIAFJ8NANAwcAIAFJ8NAjAwcAIAFJ8NCuAwcAIAFJ8ND2MFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ3U
HmUJSBfWxQRWYETs/Hz7jfOVV/aONi77Z+LSLtGg9ArEFV0QHlzxab2kQgOW/2+M
jFjsZye4KUwzQT3Av7RKuR4HpHTf45C5unW0zTQ1Dy4ZBorkVwtdOvmBuhd6ALgy
PjVa64ycaWJAMxViHF8u6kNKJZNLTxMF6fiXvxV4Pg3Q0p9vkGuGpduDTz//w+O4
WvmKwISObqdnokMORMslhoKETaFw0D7X3T72MHSKqjyLq8NXX8gwDAGfirDN4B4D
IH/VZhSdkuGPECn+QXyASQ7aDEac+OD3UlhPkwTdiiEiGLvgTJEQxIQfCcKgVdkZ
VDZBODJLZ7Ow7/ifOt0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:52:54 2025 by rpki-client