Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa
File:                     1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa (raw, json)
Hash identifier:          U2hRma8JRBWu6mAH3U2n464BSCs3I4/dhGHg6nVlipA=
Subject key identifier:   A1:ED:AE:77:43:8E:F0:6F:47:89:D2:A1:54:1A:01:3E:0E:54:79:87
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00C3216F1500D04B33E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     394127
IP address blocks:        2001:470:149::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:0c:32:16:f1:50:0d:04:b3:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=7c8a3e96-a107-45ab-a561-c2f519c62c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4d:30:74:ae:0c:39:be:bb:1b:59:32:5c:75:
                    11:aa:a0:23:4e:3c:fc:ef:69:cc:e9:c4:6a:41:28:
                    92:9c:fe:27:9e:98:50:57:2c:e3:fb:7c:25:94:4c:
                    ac:a2:66:0e:e1:8d:72:28:1e:4d:f1:21:c3:f2:48:
                    49:db:42:3d:93:a5:a9:12:c6:0b:13:f9:1d:70:0d:
                    5e:fc:e1:af:d4:4e:0c:01:0d:bf:bc:b8:49:cc:16:
                    e3:4c:73:02:d9:74:7d:f4:0a:9e:55:28:fe:a8:c7:
                    f7:74:eb:93:18:00:21:97:2c:91:17:64:f3:3e:c7:
                    01:82:12:09:81:50:49:e8:26:e5:b6:f3:77:06:7f:
                    1d:2e:a1:a9:df:76:c4:82:a9:90:73:38:db:c8:40:
                    62:cc:1b:84:f7:4d:4b:d4:65:3c:75:57:fa:4d:43:
                    96:0e:c2:10:aa:6f:29:86:cb:ba:a9:75:f7:a3:5c:
                    9e:f9:01:dd:27:55:70:91:ef:61:61:fe:d3:1e:06:
                    20:24:88:b1:12:c9:62:86:43:6b:d5:55:b9:28:16:
                    7f:ed:39:50:fc:d0:62:9d:a7:36:2d:e9:cb:9d:bb:
                    8f:1c:e3:36:b5:07:d6:59:9a:2b:4a:4f:a6:e9:03:
                    1a:8e:de:17:f3:06:d5:b7:6f:cd:57:a6:a8:92:de:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:ED:AE:77:43:8E:F0:6F:47:89:D2:A1:54:1A:01:3E:0E:54:79:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3e:7c:81:f3:81:ec:95:36:56:a5:34:55:7b:7a:55:92:4b:
         8e:b4:5d:9a:c2:b8:e6:2a:70:4f:24:ef:b0:96:25:fa:5e:ed:
         c0:32:59:9f:24:2b:0c:f3:d8:4e:64:09:f6:ff:e2:e2:8e:97:
         84:f2:ca:a4:5e:be:ad:31:78:b7:d3:88:b6:28:9e:ac:2f:3a:
         0f:32:dc:38:e7:5f:12:59:14:39:89:33:82:a6:41:2c:f6:26:
         2b:04:29:5a:42:96:74:9f:70:bf:40:22:0b:ca:fd:9d:d3:2a:
         83:8e:af:d2:99:dd:b8:37:03:b9:8c:4a:62:ac:5a:49:18:d1:
         93:f7:f9:3d:2b:04:50:6a:88:fd:7c:ea:da:24:83:ac:21:2f:
         72:3f:70:4d:fd:4b:ce:12:ad:33:ba:99:f1:11:a0:53:4c:8e:
         2d:50:e4:38:08:10:b1:d4:e3:a5:99:1f:c5:0c:70:21:a8:d3:
         06:b6:27:26:30:3b:67:8d:c5:bf:02:3a:73:7c:ce:2e:ae:71:
         55:84:1a:14:8f:00:b8:85:09:82:e6:43:40:61:94:3c:87:14:
         ec:ee:2a:85:19:cc:74:e4:e7:a0:1c:37:f5:95:ca:54:98:22:
         11:d2:0f:d8:88:8b:9a:41:09:a8:ab:85:f9:85:2b:ca:69:0c:
         27:7d:eb:f4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0AwyFvFQDQSzPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
N2M4YTNlOTYtYTEwNy00NWFiLWE1NjEtYzJmNTE5YzYyYzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU0wdK4MOb67G1kyXHURqqAjTjz872nM6cRq
QSiSnP4nnphQVyzj+3wllEysomYO4Y1yKB5N8SHD8khJ20I9k6WpEsYLE/kdcA1e
/OGv1E4MAQ2/vLhJzBbjTHMC2XR99AqeVSj+qMf3dOuTGAAhlyyRF2TzPscBghIJ
gVBJ6CbltvN3Bn8dLqGp33bEgqmQczjbyEBizBuE901L1GU8dVf6TUOWDsIQqm8p
hsu6qXX3o1ye+QHdJ1Vwke9hYf7THgYgJIixEslihkNr1VW5KBZ/7TlQ/NBinac2
LenLnbuPHOM2tQfWWZorSk+m6QMajt4X8wbVt2/NV6aokt6bmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKHtrndDjvBvR4nSoVQaAT4OVHmHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWU4YjlmNjktNDc3Zi0z
MmE3LWIxZDEtYjUxYjlhZDQwM2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIc+fIHzgeyVNlalNFV7elWSS460XZrCuOYqcE8k77CWJfpe7cAy
WZ8kKwzz2E5kCfb/4uKOl4TyyqRevq0xeLfTiLYonqwvOg8y3DjnXxJZFDmJM4Km
QSz2JisEKVpClnSfcL9AIgvK/Z3TKoOOr9KZ3bg3A7mMSmKsWkkY0ZP3+T0rBFBq
iP186tokg6whL3I/cE39S84SrTO6mfERoFNMji1Q5DgIELHU46WZH8UMcCGo0wa2
JyYwO2eNxb8COnN8zi6ucVWEGhSPALiFCYLmQ0BhlDyHFOzuKoUZzHTk56AcN/WV
ylSYIhHSD9iIi5pBCairhfmFK8ppDCd96/Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:40 2025 by rpki-client