Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/015aacab-b734-38ec-ac38-108c123cdc49.roa
File:                     015aacab-b734-38ec-ac38-108c123cdc49.roa (raw, json)
Hash identifier:          kbDDdIDXBPub+EoMuIIUmk1FZDe79nsB5o3+6nMdO/A=
Subject key identifier:   72:69:3C:19:A8:17:37:03:BF:57:A2:32:78:D1:A4:6D:78:26:59:A3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584863CB17751D4404BD17BADE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/015aacab-b734-38ec-ac38-108c123cdc49.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     59953
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:17:75:1d:44:04:bd:17:ba:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=1a93baf8-cc4d-4801-88ff-7f244cc43b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:eb:95:ad:70:0f:59:cf:b6:f9:ad:c6:67:
                    84:be:87:ac:40:38:02:46:11:67:56:c4:89:fa:de:
                    0f:72:9d:86:d3:fd:33:e5:ec:b2:fe:aa:4b:6c:e3:
                    88:08:16:1c:89:04:6d:ff:6c:aa:8e:c9:8d:1c:2d:
                    b4:da:ed:90:40:e1:54:4e:a6:84:03:85:ef:b4:3f:
                    f5:99:60:ad:8b:c2:6d:6a:84:a0:37:62:d0:6d:3a:
                    e9:1c:c1:c9:2a:7b:5f:4d:ce:c1:e2:8c:27:3a:08:
                    75:48:8b:64:4c:5f:f3:d8:a0:9e:92:34:62:de:31:
                    11:60:75:c5:77:ed:be:83:d7:10:a8:5a:33:47:87:
                    09:e2:26:da:c9:21:90:39:6c:4e:00:56:24:e7:7a:
                    5e:c1:da:a7:ac:43:6d:4c:7b:3e:6a:7b:5a:b6:23:
                    2e:fe:b6:e7:d0:93:19:f3:39:5a:ad:52:01:97:70:
                    23:65:79:e6:ff:d4:86:8b:a5:43:d7:75:7e:fe:c4:
                    78:69:9f:e6:78:96:70:54:75:d0:8e:c4:92:0c:72:
                    1a:6b:04:51:33:67:e8:49:2c:67:3c:58:66:bd:4d:
                    68:d3:da:ea:71:74:9b:87:4d:8a:f8:2c:84:66:a2:
                    88:84:7c:d1:17:1c:4b:b2:ca:b6:5b:63:3e:40:d8:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:69:3C:19:A8:17:37:03:BF:57:A2:32:78:D1:A4:6D:78:26:59:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/015aacab-b734-38ec-ac38-108c123cdc49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d7:1a:79:53:6a:19:80:9d:ee:5f:b8:d7:b2:1b:35:79:5f:
         49:80:98:04:d8:43:ec:9a:74:03:40:57:1a:80:db:6c:eb:f2:
         d8:f2:ca:0b:00:d5:26:c2:a7:86:36:78:61:9d:c7:6d:0c:da:
         d1:73:3c:ca:4e:64:98:61:8a:e4:9b:5a:99:1e:19:9a:ed:88:
         43:56:d7:cc:e7:7a:ce:18:fc:bf:0a:64:b9:bd:34:44:cc:d5:
         39:3e:97:7f:ff:f8:73:e9:11:7c:40:ce:b9:c0:4a:e6:76:ea:
         3c:8b:f3:39:ab:59:85:76:4f:11:c8:1b:87:4d:48:8c:c7:c2:
         3d:f6:dc:6f:46:b5:b0:9d:3d:74:49:ca:31:87:38:9e:d5:ad:
         ff:39:61:4b:c8:41:77:45:ea:3d:c4:34:4b:08:9e:e4:34:d0:
         f5:92:50:54:b0:b6:dd:5b:4a:53:bd:42:2c:71:ed:9b:d0:77:
         21:8b:54:5a:f6:58:90:aa:ec:c6:3c:04:dc:6d:9d:37:e4:6f:
         7a:6d:3b:a8:13:7d:09:68:cf:53:80:57:ab:5d:5f:37:8e:41:
         1e:98:88:b5:af:05:47:4d:fe:c5:76:45:f4:d7:88:22:fc:a2:
         0c:00:91:8f:2d:23:18:80:a4:31:03:cd:c4:03:fd:4f:54:72:
         01:f5:54:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhjyxd1HUQEvRe63oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
MWE5M2JhZjgtY2M0ZC00ODAxLTg4ZmYtN2YyNDRjYzQzYjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2jrla1wD1nPtvmtxmeEvoesQDgCRhFnVsSJ
+t4Pcp2G0/0z5eyy/qpLbOOICBYciQRt/2yqjsmNHC202u2QQOFUTqaEA4XvtD/1
mWCti8JtaoSgN2LQbTrpHMHJKntfTc7B4ownOgh1SItkTF/z2KCekjRi3jERYHXF
d+2+g9cQqFozR4cJ4ibaySGQOWxOAFYk53pewdqnrENtTHs+antatiMu/rbn0JMZ
8zlarVIBl3AjZXnm/9SGi6VD13V+/sR4aZ/meJZwVHXQjsSSDHIaawRRM2foSSxn
PFhmvU1o09rqcXSbh02K+CyEZqKIhHzRFxxLssq2W2M+QNi2AwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHJpPBmoFzcDv1eiMnjRpG14JlmjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDE1YWFjYWItYjczNC0z
OGVjLWFjMzgtMTA4YzEyM2NkYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKbXGnlTahmAne5fuNeyGzV5X0mAmATYQ+yadANAVxqA22zr8tjy
ygsA1SbCp4Y2eGGdx20M2tFzPMpOZJhhiuSbWpkeGZrtiENW18znes4Y/L8KZLm9
NETM1Tk+l3//+HPpEXxAzrnASuZ26jyL8zmrWYV2TxHIG4dNSIzHwj323G9GtbCd
PXRJyjGHOJ7Vrf85YUvIQXdF6j3ENEsInuQ00PWSUFSwtt1bSlO9Qixx7ZvQdyGL
VFr2WJCq7MY8BNxtnTfkb3ptO6gTfQloz1OAV6tdXzeOQR6YiLWvBUdN/sV2RfTX
iCL8ogwAkY8tIxiApDEDzcQD/U9UcgH1VJ4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:03 2025 by rpki-client