Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63974f30-2d07-3fd4-a6a2-da2b4000834d.roa
File:                     63974f30-2d07-3fd4-a6a2-da2b4000834d.roa (raw, json)
Hash identifier:          S5B9/EzSObRCYoK2B+DiwGoF9TRqeBiZZQDGhknTBD4=
Subject key identifier:   D0:91:31:24:83:1A:0C:F2:69:D7:55:61:C8:54:9F:5F:96:FF:09:6B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B600BB21C0FC16034A9E0100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63974f30-2d07-3fd4-a6a2-da2b4000834d.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        70.131.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b6:00:bb:21:c0:fc:16:03:4a:9e:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=534e9c62-6b70-4d26-8125-fc588545ba7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:79:2d:16:f5:d7:6e:46:25:d1:43:64:81:
                    45:ff:62:30:e1:ab:e0:7e:24:5d:4e:a2:09:f3:c6:
                    3f:9e:fd:36:9c:0b:02:d2:e6:24:51:03:80:94:59:
                    e2:2b:fc:e4:61:a7:b9:22:dd:8f:ea:ff:2a:6d:9a:
                    cf:37:a5:e6:fd:cd:68:e6:f4:98:b6:d2:37:2c:d1:
                    70:4e:72:dc:ac:1e:d5:1f:2e:67:1c:ad:97:ee:6f:
                    29:f0:d7:85:15:dc:bc:d3:e3:dc:58:4a:5d:b9:99:
                    f8:4e:e3:1d:d0:ed:44:96:fc:23:17:61:5a:50:d2:
                    15:0c:a0:a9:11:09:8b:7f:e3:13:f4:4d:e2:2b:c5:
                    15:e6:61:d0:71:91:51:ee:7f:9b:ce:ee:03:f5:d6:
                    89:da:db:ba:f4:58:47:2f:af:e7:4c:75:28:10:74:
                    f5:49:8e:6c:65:d7:d2:c3:8a:86:dd:da:60:0f:73:
                    a4:af:9b:0c:b1:b2:d6:0a:b6:f8:30:3e:46:e1:a4:
                    61:71:cc:c4:f2:04:c4:30:9b:bb:79:b8:34:39:b8:
                    61:50:45:6b:85:ae:73:ec:e6:85:a3:87:82:af:46:
                    86:1a:da:6c:d8:94:45:90:4a:8a:7f:3d:f9:47:26:
                    1d:3e:16:44:38:fe:4d:a2:79:52:4f:f1:25:17:12:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:91:31:24:83:1A:0C:F2:69:D7:55:61:C8:54:9F:5F:96:FF:09:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63974f30-2d07-3fd4-a6a2-da2b4000834d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.131.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:26:77:10:60:16:30:99:3f:d2:62:f1:d2:43:90:1b:d8:
         86:33:fc:20:b5:71:00:35:0b:da:f0:0a:86:c4:bb:c8:54:ef:
         27:50:58:66:67:6a:f5:4d:f2:f5:33:4f:ba:7b:c8:72:cb:70:
         ab:ce:e3:40:f2:de:33:6f:75:21:2d:54:c9:41:c3:03:b7:b3:
         a2:0b:9c:f9:53:dd:e4:8b:17:81:39:01:46:59:31:a7:bd:09:
         e7:b8:dd:42:cf:f1:6e:e5:d0:2c:0a:30:98:06:64:fb:f3:41:
         41:9a:da:82:71:fd:dd:8b:7b:14:c5:2c:5e:81:23:ba:0f:bb:
         2c:8d:26:2c:fd:78:ff:f0:2f:ee:9f:26:53:86:a8:d7:bd:1d:
         f7:9c:1d:de:ce:02:f1:45:f5:b5:d1:8f:26:69:29:47:4c:a7:
         d6:e4:f4:a5:65:d0:5c:5e:1f:b4:e4:1f:56:ba:ae:be:ca:3d:
         4a:7c:58:d6:d0:ec:e5:a3:24:0c:28:b7:c6:65:68:00:41:ec:
         a8:56:22:cf:eb:95:1b:f2:4e:46:8b:72:57:f6:36:90:a5:f2:
         8f:1a:0b:36:79:21:5a:fc:5f:a5:4b:a5:aa:ed:2d:e4:ab:69:
         ee:08:0e:0c:de:61:0e:33:a5:a3:e4:df:51:e0:4e:87:60:f2:
         f0:22:18:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC2ALshwPwWA0qeAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNjE1MTIwN1oXDTIzMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
NTM0ZTljNjItNmI3MC00ZDI2LTgxMjUtZmM1ODg1NDViYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv095LRb1125GJdFDZIFF/2Iw4avgfiRdTqIJ
88Y/nv02nAsC0uYkUQOAlFniK/zkYae5It2P6v8qbZrPN6Xm/c1o5vSYttI3LNFw
TnLcrB7VHy5nHK2X7m8p8NeFFdy80+PcWEpduZn4TuMd0O1ElvwjF2FaUNIVDKCp
EQmLf+MT9E3iK8UV5mHQcZFR7n+bzu4D9daJ2tu69FhHL6/nTHUoEHT1SY5sZdfS
w4qG3dpgD3Okr5sMsbLWCrb4MD5G4aRhcczE8gTEMJu7ebg0ObhhUEVrha5z7OaF
o4eCr0aGGtps2JRFkEqKfz35RyYdPhZEOP5NonlST/ElFxKU+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCRMSSDGgzyaddVYchUn1+W/wlrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjM5NzRmMzAtMmQwNy0z
ZmQ0LWE2YTItZGEyYjQwMDA4MzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRoPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXjJncQYBYwmT/SYvHSQ5Ab2IYz/CC1cQA1C9rwCobEu8hU7ydQWGZn
avVN8vUzT7p7yHLLcKvO40Dy3jNvdSEtVMlBwwO3s6ILnPlT3eSLF4E5AUZZMae9
Cee43ULP8W7l0CwKMJgGZPvzQUGa2oJx/d2LexTFLF6BI7oPuyyNJiz9eP/wL+6f
JlOGqNe9HfecHd7OAvFF9bXRjyZpKUdMp9bk9KVl0FxeH7TkH1a6rr7KPUp8WNbQ
7OWjJAwot8ZlaABB7KhWIs/rlRvyTkaLclf2NpCl8o8aCzZ5IVr8X6VLpartLeSr
ae4IDgzeYQ4zpaPk31HgTodg8vAiGJw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:40:28 2025 by rpki-client