Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e8e02251-9351-31f7-b396-7d89b1eb9843.roa
File:                     e8e02251-9351-31f7-b396-7d89b1eb9843.roa (raw, json)
Hash identifier:          8toEYKslOEJCPey5zUh5BTJ+YTC6cYzXULaMBInZjbs=
Subject key identifier:   6C:23:81:AE:21:60:41:93:A2:A3:8C:46:D1:BE:5D:EC:B9:22:05:98
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C581759F2889EF8C632D9700
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e8e02251-9351-31f7-b396-7d89b1eb9843.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:75:9f:28:89:ef:8c:63:2d:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=07a43ccf-ed9b-41dd-9394-c64b06dd5c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:f9:99:8f:2e:d2:3f:54:53:7c:11:61:67:
                    95:12:e5:79:44:2d:da:2d:4d:a9:73:cb:82:3e:dd:
                    b7:b5:84:5f:20:e3:56:10:60:d8:5d:3c:58:b5:bf:
                    01:c9:22:0f:a7:dc:f3:0a:7b:8a:2d:63:ca:b7:52:
                    14:9b:51:f9:8e:7a:5f:c6:86:82:50:d3:7a:5d:58:
                    32:1a:58:f6:75:59:32:cd:8f:a0:16:40:18:13:ea:
                    cf:4e:3e:56:10:61:5e:0a:66:67:cd:f6:6b:73:d0:
                    12:8a:18:73:58:b7:f5:f8:eb:79:4f:20:0f:b6:81:
                    19:2e:a4:0a:97:ce:83:23:31:54:21:17:b1:61:1a:
                    9b:be:a4:01:0d:c6:15:c6:2b:2a:d1:31:bf:38:e1:
                    f2:c1:f8:be:ab:18:24:7f:eb:4c:0c:70:cc:24:63:
                    28:07:3a:4a:64:d7:99:77:91:c9:0f:fe:c9:94:df:
                    63:0f:68:2a:da:e2:12:27:6d:cf:b9:da:5f:db:57:
                    eb:2c:39:fc:8d:f1:f4:37:cb:c7:cc:11:fe:de:e0:
                    a3:98:f7:2b:c4:8b:64:59:cd:a7:1e:43:a5:a8:89:
                    c2:50:04:f6:1a:67:e3:0f:92:96:dc:5a:09:17:46:
                    db:72:bc:f4:e2:a7:cb:fc:d9:9a:50:be:a4:e8:82:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:23:81:AE:21:60:41:93:A2:A3:8C:46:D1:BE:5D:EC:B9:22:05:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e8e02251-9351-31f7-b396-7d89b1eb9843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:c0:11:34:e3:81:72:e4:dd:3c:ef:17:31:08:ca:2e:fa:0e:
         3f:57:4a:1a:6f:36:e9:93:79:cc:d4:4f:6b:a4:3b:09:92:94:
         9d:58:0f:9b:90:de:80:70:ec:17:73:76:10:b0:96:00:83:d6:
         38:97:c6:56:e9:0f:ec:9e:e9:8b:cc:90:35:82:da:f1:6d:38:
         26:2a:68:53:b4:cd:67:24:f8:ca:ff:0b:dc:5f:4b:91:ac:57:
         6d:d0:b2:dd:04:47:70:cc:33:d0:2f:71:4e:3f:f1:79:a3:3d:
         89:fe:54:46:6a:6a:60:df:61:64:77:a1:64:f9:ae:da:ca:f0:
         f7:2d:0d:c7:c3:13:c3:76:60:5b:15:72:a9:78:d4:f3:78:51:
         e6:c6:8e:a9:15:6b:7a:19:09:92:d7:8c:62:fb:c9:43:f1:e9:
         ef:ba:80:54:3d:5c:d8:e1:e6:8b:c3:d9:83:fc:50:80:cb:99:
         3e:94:7f:41:41:0c:20:d9:1f:c3:28:9c:df:d8:2b:2f:94:9e:
         9b:a0:1b:88:de:9e:47:69:a4:88:e2:b9:b7:41:f4:ba:35:2e:
         7a:8b:1d:ae:6b:99:48:55:18:44:7b:5f:70:45:8f:f3:50:8b:
         0d:6e:71:8a:f9:98:72:bb:97:54:3b:5f:33:42:1a:ed:a9:6b:
         e2:dc:6d:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXWfKInvjGMtlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDdhNDNjY2YtZWQ5Yi00MWRkLTkzOTQtYzY0YjA2ZGQ1YzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCf5mY8u0j9UU3wRYWeVEuV5RC3aLU2pc8uC
Pt23tYRfIONWEGDYXTxYtb8BySIPp9zzCnuKLWPKt1IUm1H5jnpfxoaCUNN6XVgy
Glj2dVkyzY+gFkAYE+rPTj5WEGFeCmZnzfZrc9ASihhzWLf1+Ot5TyAPtoEZLqQK
l86DIzFUIRexYRqbvqQBDcYVxisq0TG/OOHywfi+qxgkf+tMDHDMJGMoBzpKZNeZ
d5HJD/7JlN9jD2gq2uISJ23Pudpf21frLDn8jfH0N8vHzBH+3uCjmPcrxItkWc2n
HkOlqInCUAT2GmfjD5KW3FoJF0bbcrz04qfL/NmaUL6k6IKIiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwjga4hYEGToqOMRtG+Xey5IgWYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvZThlMDIyNTEtOTM1MS0z
MWY3LWIzOTYtN2Q4OWIxZWI5ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBc2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAObAETTjgXLk3TzvFzEIyi76Dj9XShpvNumTeczUT2ukOwmSlJ1YD5uQ
3oBw7BdzdhCwlgCD1jiXxlbpD+ye6YvMkDWC2vFtOCYqaFO0zWck+Mr/C9xfS5Gs
V23Qst0ER3DMM9AvcU4/8XmjPYn+VEZqamDfYWR3oWT5rtrK8PctDcfDE8N2YFsV
cql41PN4UebGjqkVa3oZCZLXjGL7yUPx6e+6gFQ9XNjh5ovD2YP8UIDLmT6Uf0FB
DCDZH8MonN/YKy+UnpugG4jenkdppIjiubdB9Lo1LnqLHa5rmUhVGER7X3BFj/NQ
iw1ucYr5mHK7l1Q7XzNCGu2pa+LcbXQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:20 2025 by rpki-client