Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a6207668-e57b-3b74-b29c-09998c46630f.roa
File:                     a6207668-e57b-3b74-b29c-09998c46630f.roa (raw, json)
Hash identifier:          mxXTv29ZvlOfUWIbH0FtWp5WwHpngqk1mBDIq8eqL88=
Subject key identifier:   50:0A:8A:6F:E8:3F:F2:A5:7D:77:A3:3F:8B:B5:35:DE:88:C4:62:CE
Certificate issuer:       /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial:       010D0C9F432858443ABEB429F5A44882FBE36800
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a6207668-e57b-3b74-b29c-09998c46630f.roa
Signing time:             Sat 16 Dec 2023 02:00:15 +0000
ROA not before:           Sat 16 Dec 2023 02:00:15 +0000
ROA not after:            Fri 15 Mar 2024 01:00:15 +0000
asID:                     396982
IP address blocks:        144.49.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:3a:be:b4:29:f5:a4:48:82:fb:e3:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
        Validity
            Not Before: Dec 16 02:00:15 2023 GMT
            Not After : Mar 15 01:00:15 2024 GMT
        Subject: CN=5dd9dfeb-c857-414a-867f-c05a3e0547e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:ba:d8:52:05:a4:02:de:dc:a4:28:f8:77:
                    6e:05:7a:fa:de:ce:8e:62:e2:a1:d7:09:0f:73:fe:
                    12:7d:3f:53:11:a0:23:a5:b8:be:9f:86:ba:d6:9a:
                    48:f7:df:5b:4d:90:8b:ae:3e:f3:d1:18:c5:ff:66:
                    ee:57:51:8f:c0:20:90:11:4f:9b:8a:a0:91:d3:5e:
                    c5:42:29:4f:58:ec:fb:ff:44:98:8e:ae:f5:12:c7:
                    4b:ed:56:bf:71:39:18:54:c5:88:42:78:f6:a5:18:
                    6f:40:30:13:b8:34:d1:cb:73:77:f0:4b:42:c6:b1:
                    dd:a2:38:61:81:9c:5c:99:a0:50:f7:d3:a3:be:0c:
                    36:32:d0:55:c2:e8:f3:6e:89:c5:f6:16:4a:b2:27:
                    5b:40:55:67:4c:5f:fa:e4:03:1c:d8:a4:4a:6f:57:
                    aa:ef:29:1a:f2:cd:bd:ee:cf:65:70:ba:cf:b1:a1:
                    6e:82:ac:62:d5:49:b3:fd:a5:e0:c2:bd:48:52:24:
                    d3:4a:c3:5d:89:93:ab:24:93:de:08:d5:17:be:9e:
                    f6:65:f5:dc:8c:ac:88:f8:57:2c:cb:15:18:65:c7:
                    a1:60:4e:e1:84:94:39:44:13:ac:f8:70:62:b3:ee:
                    38:ca:66:4b:9f:b0:f7:13:27:c3:8b:ef:43:0e:09:
                    35:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0A:8A:6F:E8:3F:F2:A5:7D:77:A3:3F:8B:B5:35:DE:88:C4:62:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a6207668-e57b-3b74-b29c-09998c46630f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl

            X509v3 Authority Key Identifier:
                keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:85:67:22:63:29:bc:10:4a:c4:f7:df:16:de:46:42:d7:45:
         02:a3:81:63:a8:2c:6b:60:1f:eb:34:ce:17:68:2a:c1:44:bf:
         90:54:25:a4:6d:18:f2:bb:26:ab:1a:9c:52:da:fb:ad:99:aa:
         37:b9:0c:7c:be:90:1a:08:ab:cf:a2:40:92:03:e9:25:dd:d6:
         7d:1d:45:50:ff:37:63:e9:0b:e0:cc:6c:8a:e2:7d:6d:2f:9c:
         d2:6c:a7:2a:a0:51:71:d2:a7:6d:0a:75:02:1e:a9:6d:89:a4:
         86:33:be:34:18:46:d6:80:bc:f2:f8:3c:fa:7e:53:c2:2d:ba:
         1d:ee:40:be:25:17:49:74:fd:c8:d1:f5:3b:6a:2b:d6:9b:aa:
         59:b9:85:51:5d:5b:04:7a:7f:ad:97:ec:69:37:83:eb:f9:aa:
         97:91:7f:50:1a:4b:5f:1b:9a:a7:72:97:84:e4:23:e8:d3:d5:
         b3:96:ab:0b:aa:5b:f5:0c:a5:70:22:57:c9:aa:2a:3f:e1:bd:
         1d:bc:01:23:11:99:26:98:71:72:a7:e2:75:89:76:a7:78:a3:
         e6:58:6c:74:10:7a:df:37:7b:01:7b:1e:3b:cb:26:97:3c:27:
         e5:ce:dc:9e:4a:ff:33:88:b6:ae:07:bd:f8:3d:a8:84:32:b3:
         fc:e7:d4:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQ6vrQp9aRIgvvjaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTJmZjdjY2YtYzEzOC00ZTI1LWIzYmItZGMyMDY1MTJh
ZjNhMB4XDTIzMTIxNjAyMDAxNVoXDTI0MDMxNTAxMDAxNVowLzEtMCsGA1UEAxMk
NWRkOWRmZWItYzg1Ny00MTRhLTg2N2YtYzA1YTNlMDU0N2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk+62FIFpALe3KQo+HduBXr63s6OYuKh1wkP
c/4SfT9TEaAjpbi+n4a61ppI999bTZCLrj7z0RjF/2buV1GPwCCQEU+biqCR017F
QilPWOz7/0SYjq71EsdL7Va/cTkYVMWIQnj2pRhvQDATuDTRy3N38EtCxrHdojhh
gZxcmaBQ99Ojvgw2MtBVwujzbonF9hZKsidbQFVnTF/65AMc2KRKb1eq7yka8s29
7s9lcLrPsaFugqxi1Umz/aXgwr1IUiTTSsNdiZOrJJPeCNUXvp72ZfXcjKyI+Fcs
yxUYZcehYE7hhJQ5RBOs+HBis+44ymZLn7D3EyfDi+9DDgk1tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAKim/oP/KlfXejP4u1Nd6IxGLOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZm
N2NjZi1jMTM4LTRlMjUtYjNiYi1kYzIwNjUxMmFmM2EvYTYyMDc2NjgtZTU3Yi0z
Yjc0LWIyOWMtMDk5OThjNDY2MzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTJmZjdjY2YtYzEzOC00ZTI1LWIz
YmItZGMyMDY1MTJhZjNhL2EyZmY3Y2NmLWMxMzgtNGUyNS1iM2JiLWRjMjA2NTEy
YWYzYS5jcmwwHwYDVR0jBBgwFoAU3A/7yt2uLzVgKb+8/bZvLQOf5OAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZmN2NjZi1jMTM4LTRlMjUtYjNiYi1kYzIw
NjUxMmFmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkDHsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKyFZyJjKbwQSsT33xbeRkLXRQKjgWOoLGtgH+s0zhdoKsFEv5BUJaRt
GPK7JqsanFLa+62Zqje5DHy+kBoIq8+iQJID6SXd1n0dRVD/N2PpC+DMbIrifW0v
nNJspyqgUXHSp20KdQIeqW2JpIYzvjQYRtaAvPL4PPp+U8Ituh3uQL4lF0l0/cjR
9TtqK9abqlm5hVFdWwR6f62X7Gk3g+v5qpeRf1AaS18bmqdyl4TkI+jT1bOWqwuq
W/UMpXAiV8mqKj/hvR28ASMRmSaYcXKn4nWJdqd4o+ZYbHQQet83ewF7HjvLJpc8
J+XO3J5K/zOItq4Hvfg9qIQys/zn1EQ=
-----END CERTIFICATE-----
Generated at Mon Feb 5 20:13:09 2024 by rpki-client on console-ams.rpki-client.org