Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7084e4b4-4670-3f1b-852b-592bf7f44a1f.roa
File:                     7084e4b4-4670-3f1b-852b-592bf7f44a1f.roa (raw, json)
Hash identifier:          n0qi4ieeWWvCD7ySm2IR8o92sqx7Mx2rgbWPVxEyhxw=
Subject key identifier:   A0:53:4C:6D:0E:1E:56:89:FE:FE:2D:EC:1B:DB:7E:E8:38:15:E5:D1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847FC7F9E6400971E620F5E2280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7084e4b4-4670-3f1b-852b-592bf7f44a1f.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     214314
IP address blocks:        216.66.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:9e:64:00:97:1e:62:0f:5e:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=cd7cbee0-85df-46a4-b981-4849279db7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3d:60:15:4c:90:49:e1:94:15:92:16:1b:ae:
                    7f:27:93:f1:56:cc:46:a5:92:63:94:4c:84:1f:8d:
                    a5:4b:75:79:34:03:9d:41:f3:d9:1d:d9:2d:c6:75:
                    e7:6e:3a:57:b3:16:74:2d:89:73:0b:66:4f:18:66:
                    bc:46:17:a6:7f:e7:8d:58:9e:b2:e7:1f:41:2c:7d:
                    de:ba:1f:40:ff:4b:51:64:b7:27:a7:98:fe:b7:b2:
                    6d:93:2c:05:c3:2d:0a:4b:4b:5c:d1:aa:e3:a3:8e:
                    64:5d:5d:b6:6d:a9:80:6e:6c:37:80:91:1d:d8:0a:
                    c6:08:2c:0f:59:4b:67:8f:bc:e6:70:d9:ce:34:24:
                    aa:ce:42:7f:ab:40:3f:dd:d5:85:f8:4c:65:c8:30:
                    b6:28:83:ae:93:ce:76:99:dd:3d:e4:2f:4a:41:52:
                    7d:42:49:8a:a3:38:3a:6a:8e:ca:2d:29:6f:2b:a4:
                    37:d6:b6:7c:99:f9:67:c5:9a:29:11:fe:8a:51:2d:
                    d4:e5:fc:38:30:56:f0:00:80:39:a2:a0:22:03:4b:
                    1b:f9:54:4f:68:b8:82:ea:cd:9f:42:61:d8:75:97:
                    63:1a:5d:07:a6:ea:60:45:9b:61:f2:91:61:cc:a0:
                    e4:33:29:cf:ee:bf:0f:a5:b1:45:73:ca:47:3d:41:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:53:4C:6D:0E:1E:56:89:FE:FE:2D:EC:1B:DB:7E:E8:38:15:E5:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7084e4b4-4670-3f1b-852b-592bf7f44a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:87:6e:4d:12:1e:45:03:bd:b7:2d:ce:3d:53:6d:98:1b:
         6b:a1:e2:5e:04:d8:56:2c:e4:fe:5e:84:17:4a:3a:4d:68:78:
         6b:24:ed:74:da:b5:4d:b9:af:f4:87:a6:fc:bb:eb:f0:25:d2:
         61:fa:72:2e:01:af:fd:c2:8c:bc:3e:1e:5a:9a:52:2e:8a:70:
         9b:87:19:96:04:5d:9b:ab:b3:ac:25:24:53:ed:53:8d:48:15:
         56:72:33:27:66:17:3b:44:be:fa:c0:0a:22:2e:bc:a9:c8:dc:
         c4:99:ba:fe:14:5c:fc:c4:d2:7b:da:24:e6:c3:2a:89:c5:2c:
         54:f4:ab:4b:37:cc:6e:68:04:ff:85:90:a6:e7:f6:90:d4:db:
         f8:ff:75:03:b1:de:69:ce:74:b9:4c:af:ee:73:e5:b0:47:2c:
         1d:c1:4f:00:23:f1:24:60:e9:7f:a9:aa:e6:ac:45:08:bd:5a:
         47:1c:1a:cf:dc:5b:a8:27:58:c5:db:04:ea:5b:4f:a2:3c:29:
         87:ad:68:9e:0b:79:59:92:34:27:a9:c7:62:eb:96:f9:15:e2:
         c7:b5:c6:19:be:2f:0d:7d:f7:a0:14:cc:41:1b:22:76:66:1f:
         73:14:98:aa:31:37:b4:1c:aa:b6:91:15:ed:18:9b:16:da:4a:
         83:a2:0c:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf8f55kAJceYg9eIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk
Y2Q3Y2JlZTAtODVkZi00NmE0LWI5ODEtNDg0OTI3OWRiN2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT1gFUyQSeGUFZIWG65/J5PxVsxGpZJjlEyE
H42lS3V5NAOdQfPZHdktxnXnbjpXsxZ0LYlzC2ZPGGa8Rhemf+eNWJ6y5x9BLH3e
uh9A/0tRZLcnp5j+t7JtkywFwy0KS0tc0arjo45kXV22bamAbmw3gJEd2ArGCCwP
WUtnj7zmcNnONCSqzkJ/q0A/3dWF+ExlyDC2KIOuk852md095C9KQVJ9QkmKozg6
ao7KLSlvK6Q31rZ8mflnxZopEf6KUS3U5fw4MFbwAIA5oqAiA0sb+VRPaLiC6s2f
QmHYdZdjGl0HpupgRZth8pFhzKDkMynP7r8PpbFFc8pHPUEJAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKBTTG0OHlaJ/v4t7Bvbfug4FeXRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzA4NGU0YjQtNDY3MC0z
ZjFiLTg1MmItNTkyYmY3ZjQ0YTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlLh25NEh5FA723Lc49U22YG2uh4l4E2FYs5P5ehBdKOk1oeGsk7XTa
tU25r/SHpvy76/Al0mH6ci4Br/3CjLw+HlqaUi6KcJuHGZYEXZurs6wlJFPtU41I
FVZyMydmFztEvvrACiIuvKnI3MSZuv4UXPzE0nvaJObDKonFLFT0q0s3zG5oBP+F
kKbn9pDU2/j/dQOx3mnOdLlMr+5z5bBHLB3BTwAj8SRg6X+pquasRQi9WkccGs/c
W6gnWMXbBOpbT6I8KYetaJ4LeVmSNCepx2LrlvkV4se1xhm+Lw1996AUzEEbInZm
H3MUmKoxN7QcqraRFe0YmxbaSoOiDJo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:54:51 2025 by rpki-client