Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b7da57c-c062-3f8e-86e9-11f4ed83f593.roa
File:                     3b7da57c-c062-3f8e-86e9-11f4ed83f593.roa (raw, json)
Hash identifier:          tOsot1EcwHUrB71aFzGvMU9scUSJBl/O5CMDgxHKU90=
Subject key identifier:   65:1E:A8:D8:9B:88:AC:9A:68:D5:13:1D:5D:4F:3F:6C:5B:4B:8F:D0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B594CE119186C19C2C41C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b7da57c-c062-3f8e-86e9-11f4ed83f593.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     40439
IP address blocks:        142.176.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:94:ce:11:91:86:c1:9c:2c:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=811ffe9c-b321-4c5c-a840-449c44ae012c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:75:6e:65:06:7f:ba:ff:8f:19:83:33:a3:
                    fb:ef:4e:9a:53:24:6d:3a:9a:b9:b4:98:22:4c:26:
                    6b:5f:90:1b:20:5b:6a:62:8a:14:dc:92:c9:72:54:
                    a1:7b:66:30:58:5c:42:d6:70:2f:e1:5d:b0:af:3c:
                    36:46:25:e4:86:db:36:88:1a:3f:2d:11:db:60:3b:
                    64:9b:dc:1e:e9:91:b3:87:5d:11:62:cd:10:dc:ee:
                    86:5c:aa:73:51:2d:1d:7f:eb:23:f8:d8:71:38:ee:
                    64:96:10:7e:d8:43:9a:cd:6a:e1:43:38:6e:63:67:
                    89:e0:06:35:47:ff:a3:e1:f9:b2:ee:a0:a6:7b:cc:
                    2c:09:b3:70:13:3a:26:b8:a8:10:38:91:a4:eb:e3:
                    94:c0:8b:cb:26:bc:98:cd:a4:44:cd:e6:51:ed:7e:
                    8b:db:8e:9a:46:46:bc:e4:33:da:39:71:f3:af:16:
                    56:60:ed:29:3c:d2:9b:ba:8a:a4:f1:c5:38:07:96:
                    f1:69:2b:82:aa:90:31:bf:85:cc:76:6f:f3:19:ba:
                    40:65:ba:ee:96:f9:66:cd:e7:59:94:ab:a9:c3:e7:
                    dd:39:ae:e9:1d:21:cf:0b:bd:26:05:a3:a9:e0:a1:
                    13:a1:a8:82:af:53:f8:d1:74:e7:2c:29:1c:15:34:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1E:A8:D8:9B:88:AC:9A:68:D5:13:1D:5D:4F:3F:6C:5B:4B:8F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b7da57c-c062-3f8e-86e9-11f4ed83f593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.176.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d7:f1:1f:06:71:cd:83:95:0b:86:49:ee:97:a7:3b:f9:62:
         af:7e:bf:e7:06:6f:c7:90:5e:20:b4:15:75:bf:53:65:e7:f0:
         42:38:fd:6e:47:72:db:72:25:e5:3b:c8:e4:1a:e6:cc:de:db:
         bb:20:a9:bb:cb:c6:29:72:75:80:0d:8f:f4:19:c4:61:27:9c:
         d0:96:e2:66:42:d7:df:ae:47:a5:69:23:56:db:73:e7:34:0b:
         f4:79:50:85:b2:1d:c5:b2:95:e0:10:47:26:79:af:10:26:88:
         af:74:ae:c0:87:36:ff:7b:67:ce:9d:d2:72:66:be:b2:5d:5e:
         dd:f2:62:3e:53:54:f9:25:a0:99:26:a7:2c:df:a0:74:ea:eb:
         a5:6e:0d:8c:de:70:3a:21:71:94:19:86:3e:c6:26:ac:b3:a1:
         bc:fd:6e:19:8f:f4:a9:c1:4e:da:08:74:c1:fc:30:d3:d9:1f:
         fe:26:c4:c8:f0:18:70:24:2f:cf:de:35:30:8d:86:ff:ef:70:
         b2:c0:e4:9d:d8:1e:46:bc:79:31:f4:9a:e9:25:fd:9d:f0:88:
         04:f5:38:dd:fc:6e:17:93:99:0c:0c:76:a3:15:4c:3e:b1:6a:
         c6:d3:ee:3b:f0:ce:2b:7e:11:f1:40:f8:cc:8a:94:9a:bb:3b:
         dd:db:0d:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtZTOEZGGwZwsQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ODExZmZlOWMtYjMyMS00YzVjLWE4NDAtNDQ5YzQ0YWUwMTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgex1bmUGf7r/jxmDM6P7706aUyRtOpq5tJgi
TCZrX5AbIFtqYooU3JLJclShe2YwWFxC1nAv4V2wrzw2RiXkhts2iBo/LRHbYDtk
m9we6ZGzh10RYs0Q3O6GXKpzUS0df+sj+NhxOO5klhB+2EOazWrhQzhuY2eJ4AY1
R/+j4fmy7qCme8wsCbNwEzomuKgQOJGk6+OUwIvLJryYzaREzeZR7X6L246aRka8
5DPaOXHzrxZWYO0pPNKbuoqk8cU4B5bxaSuCqpAxv4XMdm/zGbpAZbrulvlmzedZ
lKupw+fdOa7pHSHPC70mBaOp4KEToaiCr1P40XTnLCkcFTQ2fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUeqNibiKyaaNUTHV1PP2xbS4/QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2I3ZGE1N2MtYzA2Mi0z
ZjhlLTg2ZTktMTFmNGVkODNmNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjrBCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELX8R8Gcc2DlQuGSe6Xpzv5Yq9+v+cGb8eQXiC0FXW/U2Xn8EI4/W5H
cttyJeU7yOQa5sze27sgqbvLxilydYANj/QZxGEnnNCW4mZC19+uR6VpI1bbc+c0
C/R5UIWyHcWyleAQRyZ5rxAmiK90rsCHNv97Z86d0nJmvrJdXt3yYj5TVPkloJkm
pyzfoHTq66VuDYzecDohcZQZhj7GJqyzobz9bhmP9KnBTtoIdMH8MNPZH/4mxMjw
GHAkL8/eNTCNhv/vcLLA5J3YHka8eTH0mukl/Z3wiAT1ON38bheTmQwMdqMVTD6x
asbT7jvwzit+EfFA+MyKlJq7O93bDU8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:55 2025 by rpki-client