Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3b0e4fb-7ad9-35a6-a48a-c93fca110c26.roa
File:                     b3b0e4fb-7ad9-35a6-a48a-c93fca110c26.roa (raw, json)
Hash identifier:          JETv1eLiHXMkDhkcqBHYNkaQYkPjfEI/4Z3+QtzCd54=
Subject key identifier:   4E:DD:DC:2E:93:22:F9:14:1E:98:7E:EA:39:A4:97:8D:0A:8D:99:B7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C26437B8E90AA8BB13250A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3b0e4fb-7ad9-35a6-a48a-c93fca110c26.roa
Signing time:             Mon 03 Feb 2025 11:15:38 +0000
ROA not before:           Mon 03 Feb 2025 11:15:38 +0000
ROA not after:            Sun 04 May 2025 10:15:38 +0000
asID:                     30036
IP address blocks:        173.30.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:64:37:b8:e9:0a:a8:bb:13:25:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:15:38 2025 GMT
            Not After : May  4 10:15:38 2025 GMT
        Subject: CN=3f552221-c4f3-42fa-a82b-1e47aa13a126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:24:41:e0:38:19:5c:aa:90:d0:be:1d:98:
                    b4:3e:d4:0c:c5:09:19:6d:76:f2:ad:53:95:92:f9:
                    88:e3:3c:bd:d1:de:d4:2c:37:a6:84:e3:18:a8:6f:
                    30:d8:7c:e0:67:58:65:10:b9:9c:0e:75:82:60:e1:
                    94:78:63:55:b2:3a:95:5a:4a:bc:00:a0:f9:1d:19:
                    0e:e5:27:4b:b6:1b:20:73:58:7d:e6:0d:06:a5:d9:
                    8a:2e:a5:8d:f8:fd:7e:f2:35:d9:58:3f:19:3e:df:
                    bb:ab:e8:4f:3f:08:a1:ec:9c:d8:51:7a:8d:ab:56:
                    c4:e6:af:c2:fe:79:ee:ae:d9:97:fd:91:ea:fc:6d:
                    b1:54:01:99:d6:51:9d:18:7d:19:41:64:e4:b7:44:
                    59:44:03:9b:f4:6c:43:2d:8f:e5:61:e8:c5:09:00:
                    81:c0:f7:61:b6:2d:88:35:48:8e:3f:1b:ad:bc:98:
                    30:cc:f1:41:88:99:b8:7c:e9:3f:d0:64:da:cd:be:
                    5c:48:f3:2a:96:1e:89:9a:63:c9:28:86:e0:69:7d:
                    54:20:3e:e8:12:fe:f2:33:5f:fb:ef:31:b9:5b:0d:
                    7b:6f:fb:8a:ea:6e:0d:af:88:70:1c:bc:f7:8c:82:
                    1c:5e:32:80:b9:c5:91:9a:cb:d2:40:75:0b:a9:ea:
                    9d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DD:DC:2E:93:22:F9:14:1E:98:7E:EA:39:A4:97:8D:0A:8D:99:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3b0e4fb-7ad9-35a6-a48a-c93fca110c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d4:39:ef:9f:f1:61:40:ce:82:da:2e:25:aa:85:3a:73:63:
         3b:d6:38:9d:89:05:b7:75:24:d7:c0:a7:37:1d:ce:70:d5:53:
         f9:18:24:94:6f:8d:99:37:08:f5:64:90:00:91:e0:90:cb:66:
         d9:4b:52:24:85:3f:bd:86:29:10:a6:4a:5a:77:e1:cd:f7:36:
         94:e9:72:dd:fc:3c:39:02:96:a0:8f:d1:58:2a:34:e2:68:41:
         30:56:49:38:cd:17:f0:4c:3b:49:e3:c6:94:16:7f:59:1e:14:
         5d:22:4a:f1:92:a0:76:9d:5b:f2:89:9a:81:19:80:b3:20:1d:
         ed:3e:00:b7:95:3c:99:6c:e1:a3:55:f7:95:9f:f9:59:c2:84:
         b6:4a:b3:94:19:4e:d2:5e:b4:68:9d:71:b5:cc:12:47:05:b7:
         7a:2f:27:f4:27:6f:05:83:a8:b2:53:f0:76:23:03:19:fe:dc:
         e9:f9:94:92:4b:5b:95:5d:46:1a:b4:9c:15:47:cb:12:17:e6:
         b6:bf:3d:b4:4e:55:9d:ec:0a:6f:7c:e7:04:88:6b:06:13:74:
         45:3a:ac:5b:6a:b7:48:98:85:31:07:97:5f:db:de:38:3f:be:
         b3:04:43:f1:a4:8f:9f:94:9c:79:c2:2b:78:fa:64:85:ec:33:
         2a:48:a3:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCZDe46QqouxMlCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTUzOFoXDTI1MDUwNDEwMTUzOFowLzEtMCsGA1UEAxMk
M2Y1NTIyMjEtYzRmMy00MmZhLWE4MmItMWU0N2FhMTNhMTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUckQeA4GVyqkNC+HZi0PtQMxQkZbXbyrVOV
kvmI4zy90d7ULDemhOMYqG8w2HzgZ1hlELmcDnWCYOGUeGNVsjqVWkq8AKD5HRkO
5SdLthsgc1h95g0GpdmKLqWN+P1+8jXZWD8ZPt+7q+hPPwih7JzYUXqNq1bE5q/C
/nnurtmX/ZHq/G2xVAGZ1lGdGH0ZQWTkt0RZRAOb9GxDLY/lYejFCQCBwPdhti2I
NUiOPxutvJgwzPFBiJm4fOk/0GTazb5cSPMqlh6JmmPJKIbgaX1UID7oEv7yM1/7
7zG5Ww17b/uK6m4Nr4hwHLz3jIIcXjKAucWRmsvSQHULqeqdqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE7d3C6TIvkUHph+6jmkl40KjZm3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjNiMGU0ZmItN2FkOS0z
NWE2LWE0OGEtYzkzZmNhMTEwYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR7zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHUOe+f8WFAzoLaLiWqhTpzYzvWOJ2JBbd1JNfApzcdznDVU/kYJJRv
jZk3CPVkkACR4JDLZtlLUiSFP72GKRCmSlp34c33NpTpct38PDkClqCP0VgqNOJo
QTBWSTjNF/BMO0njxpQWf1keFF0iSvGSoHadW/KJmoEZgLMgHe0+ALeVPJls4aNV
95Wf+VnChLZKs5QZTtJetGidcbXMEkcFt3ovJ/QnbwWDqLJT8HYjAxn+3On5lJJL
W5VdRhq0nBVHyxIX5ra/PbROVZ3sCm985wSIawYTdEU6rFtqt0iYhTEHl1/b3jg/
vrMEQ/Gkj5+UnHnCK3j6ZIXsMypIoz0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:28 2025 by rpki-client