Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c0747a6-6d96-3f81-a402-067628ea1856.roa
File:                     8c0747a6-6d96-3f81-a402-067628ea1856.roa (raw, json)
Hash identifier:          QvG6mZWl3lKxWIDNqH9YDqNDOKCUQsXgqnNRiMLdsn8=
Subject key identifier:   37:12:67:1D:1A:12:A6:FB:6A:1B:3D:E0:F0:ED:DA:6A:A7:D0:F7:A5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404759C0D16A393FEEEF120F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c0747a6-6d96-3f81-a402-067628ea1856.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        104.200.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:47:59:c0:d1:6a:39:3f:ee:ef:12:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=3d845fcf-7f35-484a-a5be-31b06750c425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:40:aa:47:87:62:1a:7e:26:24:c2:14:12:
                    6d:96:6a:04:34:79:88:0b:ad:6e:b2:bf:99:4f:fc:
                    3c:fa:ac:7c:6f:91:50:ca:cb:9a:fb:17:1a:2b:af:
                    88:1a:26:a1:eb:b7:56:f4:5f:05:e3:0b:3e:3d:17:
                    46:45:3a:73:08:d5:c4:a0:3b:0f:c9:b9:94:7a:1a:
                    ec:f6:85:83:8d:6f:d9:d0:bd:c0:87:1e:67:34:3a:
                    be:fd:a6:6e:14:df:a0:ed:87:51:ee:2f:d4:87:a7:
                    07:8e:f7:5e:7a:26:6d:5d:61:3e:fd:47:d5:15:12:
                    46:14:80:e5:63:5a:ad:5b:89:0a:1a:28:74:a7:55:
                    ca:a0:fc:36:2a:1f:ba:c2:86:9a:53:e2:0e:70:d8:
                    58:54:13:0e:0c:8e:c9:18:68:34:77:7c:ab:1b:80:
                    18:32:fe:90:2c:36:9c:e9:4d:27:98:33:27:98:d8:
                    41:eb:df:e1:07:fc:92:4d:92:af:32:52:eb:13:39:
                    22:06:d7:74:b9:a6:57:dc:bf:15:6a:5d:a7:12:01:
                    a0:32:de:92:a0:4c:3a:44:56:22:ed:9e:ef:3b:86:
                    52:8b:c6:38:52:ed:97:63:db:ef:73:09:27:42:e3:
                    54:4b:00:81:4d:c2:e2:e0:38:80:6a:8a:2a:4d:3a:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:12:67:1D:1A:12:A6:FB:6A:1B:3D:E0:F0:ED:DA:6A:A7:D0:F7:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c0747a6-6d96-3f81-a402-067628ea1856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:13:86:57:21:6d:22:54:94:b7:9c:f8:3d:90:7f:b7:77:06:
         2f:e6:ef:b3:12:44:ff:8c:ed:99:4f:6c:9a:ec:c6:11:af:a1:
         33:54:af:b4:1d:7f:97:f8:39:fb:24:bc:fc:5d:d3:a1:0c:3a:
         14:80:b8:9b:27:2d:92:f2:d4:dd:4d:20:e3:2b:28:25:a3:91:
         00:a8:70:7f:1d:68:15:6d:b3:07:16:8d:83:22:be:19:d0:48:
         71:75:cc:8c:74:b5:3b:25:46:35:79:15:0a:55:ce:9a:ba:04:
         46:2c:12:ee:19:4e:75:0f:5a:94:51:b4:f1:18:51:74:3d:c3:
         ed:43:df:d5:f2:6b:27:e5:3a:b4:7b:5c:dd:ce:26:58:e6:61:
         8a:56:4c:4d:60:ca:f6:4e:ee:41:3c:f0:80:9a:78:b2:24:6e:
         7c:f1:b5:c6:0b:29:a8:30:33:65:6d:cb:e5:0f:d9:bd:70:41:
         ff:d0:ef:2b:14:8e:04:38:85:13:b3:77:93:87:35:48:2f:11:
         7d:43:6b:bf:b0:57:ed:66:67:6a:09:e3:58:13:a1:ca:ef:26:
         f5:02:4e:70:c6:66:f9:48:a0:3e:5f:c9:7a:b7:86:66:c6:64:
         22:fc:3d:4e:98:c5:48:cc:ca:5e:4b:50:27:cf:44:79:6e:6a:
         85:7f:1c:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBHWcDRajk/7u8SDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
M2Q4NDVmY2YtN2YzNS00ODRhLWE1YmUtMzFiMDY3NTBjNDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6pAqkeHYhp+JiTCFBJtlmoENHmIC61usr+Z
T/w8+qx8b5FQysua+xcaK6+IGiah67dW9F8F4ws+PRdGRTpzCNXEoDsPybmUehrs
9oWDjW/Z0L3Ahx5nNDq+/aZuFN+g7YdR7i/Uh6cHjvdeeiZtXWE+/UfVFRJGFIDl
Y1qtW4kKGih0p1XKoPw2Kh+6woaaU+IOcNhYVBMODI7JGGg0d3yrG4AYMv6QLDac
6U0nmDMnmNhB69/hB/ySTZKvMlLrEzkiBtd0uaZX3L8Val2nEgGgMt6SoEw6RFYi
7Z7vO4ZSi8Y4Uu2XY9vvcwknQuNUSwCBTcLi4DiAaooqTTqxYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcSZx0aEqb7ahs94PDt2mqn0PelMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGMwNzQ3YTYtNmQ5Ni0z
ZjgxLWE0MDItMDY3NjI4ZWExODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4ThlchbSJUlLec+D2Qf7d3Bi/m77MSRP+M7ZlPbJrsxhGvoTNUr7Qd
f5f4OfskvPxd06EMOhSAuJsnLZLy1N1NIOMrKCWjkQCocH8daBVtswcWjYMivhnQ
SHF1zIx0tTslRjV5FQpVzpq6BEYsEu4ZTnUPWpRRtPEYUXQ9w+1D39XyayflOrR7
XN3OJljmYYpWTE1gyvZO7kE88ICaeLIkbnzxtcYLKagwM2Vty+UP2b1wQf/Q7ysU
jgQ4hROzd5OHNUgvEX1Da7+wV+1mZ2oJ41gTocrvJvUCTnDGZvlIoD5fyXq3hmbG
ZCL8PU6YxUjMyl5LUCfPRHluaoV/HBE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:18 2025 by rpki-client