Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/6d118cd0-fa15-3a6f-b1a4-f94c94a1ce69.roa
File:                     6d118cd0-fa15-3a6f-b1a4-f94c94a1ce69.roa (raw, json)
Hash identifier:          MGesBR0xRG3xbiNxBb/p9KSDXKhvs4hGqzV43uTN4AY=
Subject key identifier:   DB:D0:63:A1:76:48:89:81:A3:10:E2:E0:4D:98:A0:9D:04:B1:4E:47
Certificate issuer:       /CN=4df6cec2-94eb-4439-960f-00719026d770
Certificate serial:       010D0C9F432858487CEB2ED174E62A951D1AD040
Authority key identifier: C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/6d118cd0-fa15-3a6f-b1a4-f94c94a1ce69.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     400768
IP address blocks:        64.28.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:2e:d1:74:e6:2a:95:1d:1a:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df6cec2-94eb-4439-960f-00719026d770
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=d5343af6-5c45-4007-b798-729d109324e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:78:48:a4:48:ba:5f:e5:b9:26:21:2d:f7:
                    62:8d:81:e9:03:06:df:4f:5a:1e:d6:cd:4a:d3:ec:
                    45:78:b3:5b:c2:e7:c2:8e:b6:d4:95:6c:78:e9:a0:
                    c8:11:2c:3a:05:94:e7:b0:28:0a:25:9f:aa:83:b2:
                    86:98:9d:49:15:71:c8:50:9c:87:4e:48:c7:c7:41:
                    7d:b9:fd:86:80:ef:88:fd:82:81:3b:13:a6:af:17:
                    9d:0c:5e:33:56:7d:56:fc:91:52:13:e4:eb:ba:40:
                    93:07:b0:9c:4d:64:14:c7:dc:5e:07:b8:1e:78:b0:
                    27:55:e0:fb:d1:fb:13:9d:69:7a:4d:6a:78:04:e8:
                    52:18:9e:43:02:0a:b3:0b:cb:6c:ab:12:c2:7d:69:
                    7e:32:81:92:8d:a6:ed:9c:0c:90:1c:2d:4c:2b:8a:
                    88:18:4e:39:24:02:93:3a:fc:d9:90:8a:80:2f:ed:
                    a6:2b:c7:fc:de:40:ca:b9:76:32:7e:b4:b3:b9:5c:
                    21:f0:35:f3:21:3a:b6:63:68:91:67:e9:1d:32:3e:
                    53:84:bb:5f:dd:43:74:4f:58:a2:bd:98:99:2c:3d:
                    4b:72:46:6f:0d:39:c2:a3:94:e3:51:07:c5:27:01:
                    b3:81:e0:7d:e3:e6:d5:5e:32:27:f6:98:42:61:77:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:63:A1:76:48:89:81:A3:10:E2:E0:4D:98:A0:9D:04:B1:4E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/6d118cd0-fa15-3a6f-b1a4-f94c94a1ce69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.crl

            X509v3 Authority Key Identifier:
                keyid:C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:e7:04:52:01:4d:ca:85:a0:50:00:7d:9d:f2:a5:e4:1b:
         d5:86:d9:e9:2b:22:20:c6:2f:22:10:65:96:70:05:91:47:c0:
         12:30:75:bb:92:cc:7e:b3:d1:8e:38:2c:4f:c1:fe:6a:9b:fd:
         07:be:62:33:5b:a5:18:5b:d9:fb:4c:1f:7b:62:2c:1f:69:2a:
         dd:be:53:e1:bb:1a:f2:12:83:15:0d:58:95:66:b2:23:b6:f2:
         de:de:ba:c0:70:94:ea:c3:7d:8e:35:64:b1:19:ed:57:ce:ce:
         f0:86:8f:f4:a4:62:2a:62:cc:72:d3:59:8d:14:83:56:87:cb:
         4b:07:15:7c:e0:1f:86:9d:fe:35:c7:85:7f:0a:0e:03:54:5a:
         41:ba:90:f5:fa:02:ce:ef:37:ff:ad:b4:5b:64:6f:f0:cd:ef:
         83:89:cc:08:1e:d8:f9:df:a9:f1:5a:ed:2a:9c:e1:5e:b9:50:
         2b:3a:ae:38:96:d3:93:0d:cd:51:91:6e:8b:51:ff:fe:de:16:
         2d:84:d5:9a:2c:92:39:19:68:6c:99:27:ef:a8:a9:be:8d:2f:
         c7:cd:23:75:09:f2:34:93:48:c6:e9:3d:66:16:a0:a8:40:95:
         20:8b:6b:61:77:23:cc:f1:af:ee:07:e6:3c:5c:ba:33:6a:7b:
         c2:a8:37:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86y7RdOYqlR0a0EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRmNmNlYzItOTRlYi00NDM5LTk2MGYtMDA3MTkwMjZk
NzcwMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDUzNDNhZjYtNWM0NS00MDA3LWI3OTgtNzI5ZDEwOTMyNGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkt4SKRIul/luSYhLfdijYHpAwbfT1oe1s1K
0+xFeLNbwufCjrbUlWx46aDIESw6BZTnsCgKJZ+qg7KGmJ1JFXHIUJyHTkjHx0F9
uf2GgO+I/YKBOxOmrxedDF4zVn1W/JFSE+TrukCTB7CcTWQUx9xeB7geeLAnVeD7
0fsTnWl6TWp4BOhSGJ5DAgqzC8tsqxLCfWl+MoGSjabtnAyQHC1MK4qIGE45JAKT
OvzZkIqAL+2mK8f83kDKuXYyfrSzuVwh8DXzITq2Y2iRZ+kdMj5ThLtf3UN0T1ii
vZiZLD1LckZvDTnCo5TjUQfFJwGzgeB94+bVXjIn9phCYXeQTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvQY6F2SImBoxDi4E2YoJ0EsU5HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGY2
Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcxOTAyNmQ3NzAvNmQxMThjZDAtZmExNS0z
YTZmLWIxYTQtZjk0Yzk0YTFjZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRmNmNlYzItOTRlYi00NDM5LTk2
MGYtMDA3MTkwMjZkNzcwLzRkZjZjZWMyLTk0ZWItNDQzOS05NjBmLTAwNzE5MDI2
ZDc3MC5jcmwwHwYDVR0jBBgwFoAUx50sIXa5BQ5ZNRcvyHH6yeoBtDQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGY2Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcx
OTAyNmQ3NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBwrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWh5wRSAU3KhaBQAH2d8qXkG9WG2ekrIiDGLyIQZZZwBZFHwBIwdbuS
zH6z0Y44LE/B/mqb/Qe+YjNbpRhb2ftMH3tiLB9pKt2+U+G7GvISgxUNWJVmsiO2
8t7eusBwlOrDfY41ZLEZ7VfOzvCGj/SkYipizHLTWY0Ug1aHy0sHFXzgH4ad/jXH
hX8KDgNUWkG6kPX6As7vN/+ttFtkb/DN74OJzAge2PnfqfFa7Sqc4V65UCs6rjiW
05MNzVGRbotR//7eFi2E1ZoskjkZaGyZJ++oqb6NL8fNI3UJ8jSTSMbpPWYWoKhA
lSCLa2F3I8zxr+4H5jxcujNqe8KoN8o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:58:16 2025 by rpki-client