Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/f1b1034a-74af-3571-9e96-e5ff3a551846.roa
File:                     f1b1034a-74af-3571-9e96-e5ff3a551846.roa (raw, json)
Hash identifier:          gVd87xY+9BbIjI4L9pg3q1d9Zzyg804wt9KAw3+z8LM=
Subject key identifier:   34:97:D4:AC:D9:A7:1B:0E:46:EE:FC:03:4C:AA:20:AB:5B:84:03:BE
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F432858488DAB4BFE484C427F32CB3800
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/f1b1034a-74af-3571-9e96-e5ff3a551846.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        64.95.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:4b:fe:48:4c:42:7f:32:cb:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=9be59d02-5756-4a1f-9903-d6311fc60fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:26:82:e1:53:89:4e:85:60:1c:46:91:37:
                    b3:7f:85:89:b5:75:96:47:f4:3d:a3:dc:ba:09:ae:
                    ba:ec:82:47:1e:31:2f:91:10:6e:b6:e1:3c:80:1e:
                    d1:8e:ce:1d:44:9b:05:c0:01:81:b7:bf:ba:0b:64:
                    e3:6d:21:c1:94:13:7c:d7:6a:7c:17:75:f8:ae:36:
                    35:a3:25:72:7e:b6:f7:9e:e4:7d:2a:7b:b8:87:8f:
                    75:d4:52:97:a8:94:0f:b0:34:1e:1b:a8:f9:98:20:
                    b5:20:07:2e:85:89:fa:6b:16:bb:59:bc:f1:a7:c8:
                    2d:cf:c3:17:07:19:1d:a0:a5:ca:4c:ae:b1:5e:0f:
                    fb:5c:02:b1:50:02:4a:65:8e:ee:10:2a:75:11:ce:
                    a3:73:21:a3:ca:1a:20:47:dd:ed:9e:3a:e7:38:18:
                    dc:f6:db:8f:4e:5e:42:d1:ed:6a:f7:a8:e2:f9:02:
                    51:db:68:f2:ef:96:72:a2:d6:0d:90:51:6d:aa:20:
                    1a:bf:b2:41:24:56:f4:6d:f0:2f:85:83:20:4e:9c:
                    17:43:dc:38:86:1a:18:f6:26:f0:13:6e:63:32:08:
                    12:a1:b3:0a:72:04:3b:cb:7b:2f:bf:c8:57:e2:c0:
                    f0:8a:90:d0:57:7c:8f:3e:03:d1:4a:c3:08:39:a8:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:97:D4:AC:D9:A7:1B:0E:46:EE:FC:03:4C:AA:20:AB:5B:84:03:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/f1b1034a-74af-3571-9e96-e5ff3a551846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:16:be:ba:8d:f2:5d:7d:a6:26:27:c7:6d:7b:ac:7c:9e:70:
         28:f0:78:26:c9:ad:2a:a9:27:b9:62:52:d5:60:a8:e9:e2:01:
         bb:8c:5d:cf:9c:d2:dd:61:a8:b0:57:ee:09:e8:7e:d2:1f:8e:
         0a:d0:d1:89:85:e0:9c:ea:2f:36:4f:6b:10:31:0b:11:ac:cd:
         c8:3e:a1:bb:e0:a1:4f:da:c5:b7:3c:7d:6a:2c:58:7c:db:c2:
         80:a7:96:96:38:3b:b7:78:19:88:95:54:87:2f:5d:97:6d:58:
         bf:79:c4:d8:51:b3:44:6b:77:db:7b:ef:c6:57:b7:27:c2:43:
         6c:37:e2:42:15:d4:c2:d1:73:c0:54:8d:ff:58:2e:c1:e6:b1:
         66:3e:d8:b5:b6:b0:33:5a:91:ce:9b:70:92:9d:08:f5:f9:d7:
         ca:c5:0b:ee:3f:32:6f:d9:34:9b:3a:87:45:0f:ed:da:1c:a9:
         e4:69:fe:07:14:f2:81:e4:2f:c6:d6:26:7c:70:a8:b3:d7:3f:
         27:fa:a3:34:fd:cd:2e:3c:90:8e:50:c9:0e:d8:3c:e4:6e:d4:
         83:e3:f7:c4:dc:04:1c:27:4f:4c:83:4b:c2:51:c6:d8:b4:3b:
         8e:9f:d1:8d:97:b0:25:4a:9b:6c:ce:8e:e2:15:c7:b2:f4:1c:
         83:ec:23:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0v+SExCfzLLOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk
OTFkMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
OWJlNTlkMDItNTc1Ni00YTFmLTk5MDMtZDYzMTFmYzYwZmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOMmguFTiU6FYBxGkTezf4WJtXWWR/Q9o9y6
Ca667IJHHjEvkRButuE8gB7Rjs4dRJsFwAGBt7+6C2TjbSHBlBN812p8F3X4rjY1
oyVyfrb3nuR9Knu4h4911FKXqJQPsDQeG6j5mCC1IAcuhYn6axa7Wbzxp8gtz8MX
BxkdoKXKTK6xXg/7XAKxUAJKZY7uECp1Ec6jcyGjyhogR93tnjrnOBjc9tuPTl5C
0e1q96ji+QJR22jy75ZyotYNkFFtqiAav7JBJFb0bfAvhYMgTpwXQ9w4hhoY9ibw
E25jMggSobMKcgQ7y3svv8hX4sDwipDQV3yPPgPRSsMIOahw5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSX1KzZpxsORu78A0yqIKtbhAO+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz
MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvZjFiMTAzNGEtNzRhZi0z
NTcxLTllOTYtZTVmZjNhNTUxODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk
NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx
ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm
NWI3MWQ5MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF/HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoWvrqN8l19piYnx217rHyecCjweCbJrSqpJ7liUtVgqOniAbuMXc+c
0t1hqLBX7gnoftIfjgrQ0YmF4JzqLzZPaxAxCxGszcg+obvgoU/axbc8fWosWHzb
woCnlpY4O7d4GYiVVIcvXZdtWL95xNhRs0Rrd9t778ZXtyfCQ2w34kIV1MLRc8BU
jf9YLsHmsWY+2LW2sDNakc6bcJKdCPX518rFC+4/Mm/ZNJs6h0UP7docqeRp/gcU
8oHkL8bWJnxwqLPXPyf6ozT9zS48kI5QyQ7YPORu1IPj98TcBBwnT0yDS8JRxti0
O46f0Y2XsCVKm2zOjuIVx7L0HIPsI7w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:10 2025 by rpki-client