Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa
File:                     98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa (raw, json)
Hash identifier:          GBdu7RdPDdeq9DRTx/4x8FFhsm/IzXSUmIE9yk5zA+8=
Subject key identifier:   9D:ED:91:8B:02:AA:32:7B:21:9B:71:A4:57:48:FD:C5:65:D4:6C:DB
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F43285848854B4E9377B2AAE8E1B86AF8
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     31834
IP address blocks:        209.222.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:4e:93:77:b2:aa:e8:e1:b8:6a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=7681c37c-a23e-4d1b-b381-54079b1e3587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:f6:8d:42:ee:39:c3:a0:c4:23:e4:38:df:
                    f6:43:9e:09:bd:f1:13:cb:49:5b:3e:c2:54:81:4a:
                    4d:b8:8e:32:63:62:c3:e8:e9:1a:bc:ee:c2:7a:91:
                    74:bf:84:50:b9:69:7f:3b:b1:a8:6e:ad:20:5a:4f:
                    b2:af:c8:a0:62:14:21:8d:34:39:88:09:ed:9c:f5:
                    12:20:1b:ce:68:76:c1:76:1b:e8:89:e5:01:c8:a8:
                    1d:2a:c7:98:cd:1f:65:94:18:0b:29:2d:33:51:e3:
                    b4:41:e9:11:d6:11:ba:3c:23:91:e3:67:22:c0:18:
                    75:3e:00:c0:34:0b:d0:ec:c9:d7:a6:e4:8b:d9:31:
                    3f:36:0f:c1:07:18:d1:71:15:92:41:8b:78:d4:b2:
                    76:c7:16:92:e3:30:5c:5b:12:66:9d:0a:7f:c7:d6:
                    27:8c:0a:0a:97:a4:5f:36:87:95:80:ba:17:93:af:
                    68:c9:13:5a:20:95:13:70:8c:9e:f2:36:b8:bb:a4:
                    90:8a:8e:4a:ff:ae:59:a7:39:3f:80:2f:72:98:a6:
                    76:14:b2:6b:26:13:0a:8b:95:0c:9c:ad:5b:e2:bc:
                    96:78:5e:a6:f1:fd:91:09:1c:d0:2c:3f:38:df:cc:
                    c3:d9:87:57:84:b8:cf:07:84:7c:9b:3f:19:3b:64:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:91:8B:02:AA:32:7B:21:9B:71:A4:57:48:FD:C5:65:D4:6C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:81:31:70:f2:6c:6b:48:cf:b0:68:20:38:fa:f4:ae:06:c4:
         6c:4e:ae:44:2d:ce:7b:74:cf:25:82:15:c3:31:84:51:18:9f:
         ad:1c:87:5b:a2:e8:75:01:83:16:ca:2c:c9:af:c5:6e:27:29:
         1c:ad:7b:67:75:96:b3:0e:e0:f6:83:a9:f2:bc:8a:c2:4a:7f:
         a2:b9:f9:34:69:bc:ec:22:dd:6b:88:77:e4:bb:c0:4a:2f:e5:
         84:94:13:b3:a4:af:9c:c8:2a:26:6e:da:f6:30:69:2f:87:42:
         6a:99:67:91:67:50:74:33:ec:b0:9c:e8:0e:50:c4:21:6f:93:
         88:b4:6a:7d:d9:98:fd:da:95:ff:53:0c:39:4e:b8:27:55:fd:
         80:41:b9:4d:0c:21:e7:cd:5c:b5:12:b3:c6:8e:36:59:32:b8:
         b2:aa:49:ff:d8:c0:67:bc:ab:a2:fa:11:c9:6c:ab:fe:af:0d:
         1c:07:89:1b:b7:2f:e3:e3:65:14:89:2c:ea:f1:4c:e8:23:b0:
         6a:10:d8:b9:ed:40:1f:97:3f:28:bb:1d:97:10:6f:07:95:63:
         58:ff:53:0b:38:c1:74:8b:61:64:b4:74:2b:d6:66:85:12:ca:
         25:5e:5b:6a:20:01:55:4e:b4:9b:e4:e7:66:f1:75:61:73:7c:
         83:09:57:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS06Td7Kq6OG4avgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh
NmFlMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
NzY4MWMzN2MtYTIzZS00ZDFiLWIzODEtNTQwNzliMWUzNTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmL2jULuOcOgxCPkON/2Q54JvfETy0lbPsJU
gUpNuI4yY2LD6OkavO7CepF0v4RQuWl/O7Gobq0gWk+yr8igYhQhjTQ5iAntnPUS
IBvOaHbBdhvoieUByKgdKseYzR9llBgLKS0zUeO0QekR1hG6PCOR42ciwBh1PgDA
NAvQ7MnXpuSL2TE/Ng/BBxjRcRWSQYt41LJ2xxaS4zBcWxJmnQp/x9YnjAoKl6Rf
NoeVgLoXk69oyRNaIJUTcIye8ja4u6SQio5K/65Zpzk/gC9ymKZ2FLJrJhMKi5UM
nK1b4ryWeF6m8f2RCRzQLD8438zD2YdXhLjPB4R8mz8ZO2S0uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3tkYsCqjJ7IZtxpFdI/cVl1GzbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj
ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvOThhM2UzZmMtNmY2ZC0z
OWI3LWJhYjAtNTI3NGE5ZGFhZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx
YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi
YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw
MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d7zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWBMXDybGtIz7BoIDj69K4GxGxOrkQtznt0zyWCFcMxhFEYn60ch1ui
6HUBgxbKLMmvxW4nKRyte2d1lrMO4PaDqfK8isJKf6K5+TRpvOwi3WuId+S7wEov
5YSUE7Okr5zIKiZu2vYwaS+HQmqZZ5FnUHQz7LCc6A5QxCFvk4i0an3ZmP3alf9T
DDlOuCdV/YBBuU0MIefNXLUSs8aONlkyuLKqSf/YwGe8q6L6Eclsq/6vDRwHiRu3
L+PjZRSJLOrxTOgjsGoQ2LntQB+XPyi7HZcQbweVY1j/Uws4wXSLYWS0dCvWZoUS
yiVeW2ogAVVOtJvk52bxdWFzfIMJV68=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:44 2025 by rpki-client