Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa
File:                     cc47fe57-b252-3fe7-a59a-1a298b383d54.roa (raw, json)
Hash identifier:          Av2mgn8KcEFJYKNjL9S5ZZ2nNWzBbUF15oBYk1sVwiQ=
Subject key identifier:   A9:D5:7C:34:E5:12:1F:80:D0:79:E2:44:42:A4:35:5C:8A:29:0D:BB
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490CB1699D0BBB6BCE118F2710
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     207134
IP address blocks:        131.153.96.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:69:9d:0b:bb:6b:ce:11:8f:27:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=14b373b3-c969-4f81-9703-4331fa8fa65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:7a:29:e3:1d:ff:cf:69:e3:2f:ce:38:c5:
                    2e:c2:f9:ab:98:7e:a7:9d:36:a8:05:cc:21:9c:52:
                    81:ac:15:e5:0b:36:7c:64:53:1c:df:6a:35:3b:e0:
                    ab:a9:94:47:0a:e8:ab:6d:2c:e7:b9:0a:0a:4f:ca:
                    7b:a3:16:b1:90:d7:37:1c:07:17:29:95:a3:d9:7a:
                    31:c9:15:59:0c:e5:56:23:bf:4b:5b:3d:98:39:53:
                    b1:72:b2:6a:75:b4:d9:ca:3e:cd:7a:e8:ee:95:bc:
                    b3:86:b8:62:7b:f1:35:cb:2d:a8:ce:d8:c3:57:1a:
                    de:61:bf:1c:f2:ba:00:f4:86:ce:4e:a5:38:ae:14:
                    d9:b9:5b:fa:59:15:53:40:c1:a1:56:15:52:29:0d:
                    a9:27:0e:ee:49:88:65:ca:a0:44:98:ea:9b:90:8d:
                    7d:f5:75:04:3a:8e:92:49:3b:ef:e7:00:a3:3c:13:
                    1d:ee:49:77:b0:8b:c2:31:da:3c:78:d5:d0:24:84:
                    f3:5f:fb:6b:30:a8:81:6f:f2:d6:5b:96:a8:dc:2f:
                    5e:2b:5f:30:61:57:1b:48:f9:d0:1d:cc:66:d1:97:
                    05:f1:7b:09:2e:f6:f9:f7:eb:41:a8:15:27:a3:03:
                    14:0b:21:53:d1:3e:aa:57:49:d5:3a:18:9e:fd:1b:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D5:7C:34:E5:12:1F:80:D0:79:E2:44:42:A4:35:5C:8A:29:0D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:ec:dc:f4:af:dc:5f:de:3a:b8:c5:9f:0b:db:69:b4:4f:
         79:68:ee:fc:3e:65:e4:6e:94:c8:85:a5:56:92:50:7a:d1:46:
         31:1f:7e:17:69:b4:82:ad:e9:31:d1:b2:45:7c:9e:ac:6b:97:
         7a:06:6c:47:da:30:98:1d:37:ba:5d:a0:30:17:5d:ca:b4:d9:
         16:6b:57:e2:13:d3:bc:26:fb:9d:a4:d9:79:e2:b2:28:83:c0:
         45:36:38:6c:6d:10:24:1d:41:f9:b9:03:ee:a4:a2:a1:db:05:
         98:e0:c3:1f:a4:2a:37:34:f2:ce:db:81:7b:70:d3:a6:75:b5:
         22:8a:55:f7:b1:d6:29:36:70:75:a9:09:ec:70:b4:66:1f:ed:
         a8:5f:0c:c7:9d:86:49:69:07:06:fd:2d:4e:ca:1b:88:80:42:
         86:72:0b:7b:ef:f0:04:6b:10:b7:ac:f3:c8:f6:05:92:6f:cb:
         c8:ff:4b:af:c0:76:d8:55:59:1c:d5:4e:8f:ce:cc:c6:d8:e5:
         fa:17:67:af:62:ab:a7:aa:03:de:92:46:8e:9b:14:3a:3a:b2:
         0c:3d:5a:00:a3:fd:9a:57:2c:c1:3d:6c:ed:3d:13:fa:bc:f2:
         c2:7f:a3:fe:19:1c:46:6c:e4:33:e7:5b:b1:e0:69:3b:70:c3:
         75:b5:de:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWmdC7trzhGPJxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MTRiMzczYjMtYzk2OS00ZjgxLTk3MDMtNDMzMWZhOGZhNjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF56KeMd/89p4y/OOMUuwvmrmH6nnTaoBcwh
nFKBrBXlCzZ8ZFMc32o1O+CrqZRHCuirbSznuQoKT8p7oxaxkNc3HAcXKZWj2Xox
yRVZDOVWI79LWz2YOVOxcrJqdbTZyj7Neujulbyzhrhie/E1yy2oztjDVxreYb8c
8roA9IbOTqU4rhTZuVv6WRVTQMGhVhVSKQ2pJw7uSYhlyqBEmOqbkI199XUEOo6S
STvv5wCjPBMd7kl3sIvCMdo8eNXQJITzX/trMKiBb/LWW5ao3C9eK18wYVcbSPnQ
Hcxm0ZcF8XsJLvb59+tBqBUnowMUCyFT0T6qV0nVOhie/RvFPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKnVfDTlEh+A0HniREKkNVyKKQ27MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2M0N2ZlNTctYjI1Mi0z
ZmU3LWE1OWEtMWEyOThiMzgzZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICL7Nz0r9xf3jq4xZ8L22m0T3lo7vw+ZeRulMiFpVaSUHrRRjEffhdp
tIKt6THRskV8nqxrl3oGbEfaMJgdN7pdoDAXXcq02RZrV+IT07wm+52k2XnisiiD
wEU2OGxtECQdQfm5A+6koqHbBZjgwx+kKjc08s7bgXtw06Z1tSKKVfex1ik2cHWp
CexwtGYf7ahfDMedhklpBwb9LU7KG4iAQoZyC3vv8ARrELes88j2BZJvy8j/S6/A
dthVWRzVTo/OzMbY5foXZ69iq6eqA96SRo6bFDo6sgw9WgCj/ZpXLME9bO09E/q8
8sJ/o/4ZHEZs5DPnW7HgaTtww3W13lM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:51 2025 by rpki-client