Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/26d65c2f-4d65-3eea-a872-f4c9e9f6aaad.roa
File:                     26d65c2f-4d65-3eea-a872-f4c9e9f6aaad.roa (raw, json)
Hash identifier:          +6/oiMxdHNwKaaYg/tLD/uGukqBOsg28gQKea11ZMUQ=
Subject key identifier:   BF:B4:02:BA:69:F2:47:65:49:83:8D:17:9E:33:D1:CD:4D:9F:9F:8D
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F432858486D904ED070BA9B78AF3C0D80
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/26d65c2f-4d65-3eea-a872-f4c9e9f6aaad.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     397004
IP address blocks:        205.157.205.0/24 maxlen: 24
                          205.157.206.0/24 maxlen: 24
                          205.157.208.0/24 maxlen: 24
                          205.157.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:4e:d0:70:ba:9b:78:af:3c:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=d6934149-5c90-49b3-ade3-a1f651ac817d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:46:6a:96:c3:56:8e:7e:08:4e:c0:b6:57:
                    e6:65:a7:6d:12:70:52:0c:f9:6e:ea:82:0d:8d:05:
                    7f:30:19:7f:96:49:19:f6:3c:56:ed:68:b6:20:e6:
                    ad:12:05:d4:33:b8:59:e4:0a:e8:77:ec:6e:bb:68:
                    e5:85:e1:3a:64:df:94:f0:53:5d:57:05:44:de:0b:
                    94:8c:5a:e9:72:bd:43:dc:75:08:b0:ba:1c:b2:f7:
                    ad:77:4b:23:e9:94:ee:78:0e:f9:b6:72:86:da:01:
                    50:fc:65:c7:57:cc:1f:df:d1:30:a1:ef:34:ea:52:
                    73:f0:ca:42:fd:4a:20:86:5e:dc:79:43:3e:65:f7:
                    9c:9c:56:e2:99:b9:6f:f7:b3:25:54:d0:6d:1c:58:
                    1b:02:2c:40:f0:8a:16:92:30:58:f4:48:e8:13:74:
                    6b:6d:0a:50:20:26:88:77:c1:2e:21:27:39:05:df:
                    a6:58:d4:c7:0d:04:f8:10:28:76:a8:6b:d6:f2:11:
                    1f:34:5f:a3:2e:fa:96:f5:99:b1:a3:56:15:10:37:
                    07:3a:5f:12:35:dc:94:1f:26:1c:71:9f:ca:f6:8f:
                    88:c2:c9:65:9e:ed:96:64:01:99:ee:01:3d:27:2a:
                    91:7c:0d:69:3b:be:07:45:29:e8:b7:80:c0:80:5c:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B4:02:BA:69:F2:47:65:49:83:8D:17:9E:33:D1:CD:4D:9F:9F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/26d65c2f-4d65-3eea-a872-f4c9e9f6aaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.205.0-205.157.206.255
                  205.157.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:af:34:76:5d:7b:38:2f:1b:8e:f7:79:91:58:68:14:f7:c7:
         07:6a:84:da:8f:6b:f5:59:5b:d3:4e:56:e6:45:9c:17:a3:3a:
         ce:9f:03:66:e3:19:0f:83:c5:47:67:87:42:d8:62:b1:29:18:
         53:54:63:d2:1a:59:c4:d3:ce:61:f0:2d:7d:ce:d2:62:49:73:
         4f:80:74:26:5f:64:12:50:4b:2a:16:43:6a:7d:e5:f6:53:9e:
         49:3e:26:1f:6a:ff:d8:d8:ef:c1:ba:f7:c8:a8:d1:44:df:f0:
         61:98:a7:84:55:d2:79:7f:86:d2:c5:51:32:40:db:76:12:54:
         bc:81:cb:ec:ee:bd:39:a3:83:cf:03:ed:5b:f6:8e:4c:26:75:
         d0:70:ba:dd:da:2c:bc:db:27:8c:5a:0b:9b:c8:31:b3:26:3f:
         06:d6:5b:f0:c8:4b:d9:32:19:7f:f6:ac:3b:7a:eb:8a:ee:5b:
         b7:38:fe:b2:a3:02:02:9b:28:43:31:6c:85:da:6d:6f:18:f2:
         a3:dc:cd:ab:c2:4e:4c:d3:08:8f:56:d2:a2:fa:87:29:de:7d:
         71:65:95:b7:8f:7d:89:8e:4d:fe:00:3c:6c:04:0f:d7:43:a7:
         df:fc:61:21:be:94:75:4d:1f:6c:68:73:31:e0:84:9c:6c:21:
         fd:6e:34:b7
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEhtkE7QcLqbeK88DYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMw
MjNjMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZDY5MzQxNDktNWM5MC00OWIzLWFkZTMtYTFmNjUxYWM4MTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmhGapbDVo5+CE7AtlfmZadtEnBSDPlu6oIN
jQV/MBl/lkkZ9jxW7Wi2IOatEgXUM7hZ5Arod+xuu2jlheE6ZN+U8FNdVwVE3guU
jFrpcr1D3HUIsLocsvetd0sj6ZTueA75tnKG2gFQ/GXHV8wf39Ewoe806lJz8MpC
/Uoghl7ceUM+ZfecnFbimblv97MlVNBtHFgbAixA8IoWkjBY9EjoE3RrbQpQICaI
d8EuISc5Bd+mWNTHDQT4ECh2qGvW8hEfNF+jLvqW9Zmxo1YVEDcHOl8SNdyUHyYc
cZ/K9o+Iwsllnu2WZAGZ7gE9JyqRfA1pO74HRSnot4DAgFxQlwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFL+0Arpp8kdlSYONF54z0c1Nn5+NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThj
YzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvMjZkNjVjMmYtNGQ2NS0z
ZWVhLWE4NzItZjRjOWU5ZjZhYWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4Y2M4ZTUtMWZjZi00YzI4LTlh
ZGItNDVlMmNjMWMwMjNjL2U5OGNjOGU1LTFmY2YtNGMyOC05YWRiLTQ1ZTJjYzFj
MDIzYy5jcmwwHwYDVR0jBBgwFoAUgLK/cdOkjVQ54bafi7AyMY4ObJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUy
Y2MxYzAyM2MuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADNnc0D
BADNnc4DBAHNndAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAHa80dl17OC8bjvd5kVhoFPfHB2qE2o9r9Vlb
005W5kWcF6M6zp8DZuMZD4PFR2eHQthisSkYU1Rj0hpZxNPOYfAtfc7SYklzT4B0
Jl9kElBLKhZDan3l9lOeST4mH2r/2Njvwbr3yKjRRN/wYZinhFXSeX+G0sVRMkDb
dhJUvIHL7O69OaODzwPtW/aOTCZ10HC63dosvNsnjFoLm8gxsyY/BtZb8MhL2TIZ
f/asO3rriu5btzj+sqMCApsoQzFshdptbxjyo9zNq8JOTNMIj1bSovqHKd59cWWV
t499iY5N/gA8bAQP10On3/xhIb6UdU0fbGhzMeCEnGwh/W40tw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:18 2025 by rpki-client