Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f462840-048f-3a53-965c-3c39a086805d.roa
File:                     5f462840-048f-3a53-965c-3c39a086805d.roa (raw, json)
Hash identifier:          ubKj0wZvTHMxrnTrkq3YvKvXiEUSOruSiDCdIqWnAhI=
Subject key identifier:   2E:F1:FD:91:69:79:9F:23:41:C7:1D:64:FE:80:6C:E6:A0:94:AA:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581CDAC439FBD1AD9D5D000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f462840-048f-3a53-965c-3c39a086805d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        162.72.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:cd:ac:43:9f:bd:1a:d9:d5:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=baabe543-96c2-4455-987f-1115c8f78ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:89:cc:6d:ee:78:8a:c7:e4:7d:d9:22:cf:
                    4e:84:e7:6d:07:be:da:70:c6:13:99:8a:77:cd:39:
                    50:91:a6:ce:2f:e1:19:aa:e1:ed:70:16:2c:6d:4f:
                    86:64:67:ce:da:1e:a9:5c:be:9b:76:fd:8f:d5:44:
                    bf:3f:98:78:c8:9c:a8:2e:2d:19:24:93:13:bf:70:
                    07:d8:ee:cd:4c:d9:f7:29:5d:96:ac:19:1e:0a:fc:
                    24:61:a9:a3:dd:b7:f0:9d:9f:33:0a:70:0d:79:c7:
                    90:0e:54:da:16:13:17:1d:87:8b:19:28:6e:ec:c7:
                    95:8c:47:94:cb:4a:ec:0c:b0:1e:bc:f8:21:cd:4b:
                    1f:f7:92:d5:86:6b:84:53:a8:8e:14:7b:5b:81:90:
                    1d:52:16:6f:08:db:da:10:19:c1:96:f1:ba:c5:0c:
                    12:6f:c2:33:ae:12:52:67:e1:bf:62:ed:77:57:6c:
                    64:57:b7:b2:fe:0f:12:71:d6:af:e4:7c:f4:85:11:
                    ff:3d:b8:29:b4:19:92:cd:9d:6e:cd:cd:89:2d:ce:
                    88:6f:9f:d9:1f:df:92:53:9f:4e:0d:35:73:cb:87:
                    1c:e3:e1:9a:d4:83:1f:04:90:fe:79:a4:74:3e:1c:
                    58:74:e0:88:4d:4c:a5:67:4d:78:c8:ab:6e:f5:85:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F1:FD:91:69:79:9F:23:41:C7:1D:64:FE:80:6C:E6:A0:94:AA:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f462840-048f-3a53-965c-3c39a086805d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2c:ca:1f:e3:f2:6e:f3:78:e1:ac:88:99:4e:57:a4:09:98:
         86:5d:b7:a3:e9:77:b8:cd:44:69:2f:be:7d:bb:66:df:c5:89:
         e8:90:b6:b7:4a:b4:84:62:c8:35:ce:fa:7b:c2:50:59:c6:da:
         3d:fd:98:66:64:ac:d7:82:1f:a4:ea:85:a9:ea:c5:28:2a:f1:
         1f:18:31:a5:ba:c4:36:c3:56:d6:ba:9d:d0:71:0d:39:47:fb:
         73:2d:5b:ca:96:72:7e:1d:8f:a0:b6:a1:fd:84:e6:68:81:a9:
         1c:4c:be:61:d0:8a:0e:bb:4a:ef:9e:75:15:96:19:45:dd:2b:
         05:c8:b9:58:3b:3e:c3:40:0c:01:55:79:e0:a2:57:5b:77:c2:
         a8:e7:af:67:f5:43:d2:38:2f:b4:d9:54:4d:ba:1d:1c:12:5d:
         98:18:f2:eb:86:6c:44:d9:4a:b2:20:c6:0b:35:3a:d1:69:ea:
         ad:b4:5a:08:29:4c:1a:ad:66:f8:70:2a:d1:8e:f2:b1:ec:01:
         82:67:36:b1:7f:07:85:ff:27:01:6f:50:d2:f5:d9:16:57:88:
         a6:c0:34:1d:9e:0a:b6:95:25:b0:05:ff:8f:dc:87:74:f5:77:
         e4:ce:bc:39:68:f4:76:a6:ee:13:7f:1e:91:5e:2c:5f:4e:45:
         91:48:4b:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgc2sQ5+9GtnV0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YmFhYmU1NDMtOTZjMi00NDU1LTk4N2YtMTExNWM4Zjc4ZWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvyJzG3ueIrH5H3ZIs9OhOdtB77acMYTmYp3
zTlQkabOL+EZquHtcBYsbU+GZGfO2h6pXL6bdv2P1US/P5h4yJyoLi0ZJJMTv3AH
2O7NTNn3KV2WrBkeCvwkYamj3bfwnZ8zCnANeceQDlTaFhMXHYeLGShu7MeVjEeU
y0rsDLAevPghzUsf95LVhmuEU6iOFHtbgZAdUhZvCNvaEBnBlvG6xQwSb8IzrhJS
Z+G/Yu13V2xkV7ey/g8Scdav5Hz0hRH/PbgptBmSzZ1uzc2JLc6Ib5/ZH9+SU59O
DTVzy4cc4+Ga1IMfBJD+eaR0PhxYdOCITUylZ014yKtu9YWscwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7x/ZFpeZ8jQccdZP6AbOaglKqcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY0NjI4NDAtMDQ4Zi0z
YTUzLTk2NWMtM2MzOWEwODY4MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMsyh/j8m7zeOGsiJlOV6QJmIZdt6Ppd7jNRGkvvn27Zt/FieiQtrdK
tIRiyDXO+nvCUFnG2j39mGZkrNeCH6TqhanqxSgq8R8YMaW6xDbDVta6ndBxDTlH
+3MtW8qWcn4dj6C2of2E5miBqRxMvmHQig67Su+edRWWGUXdKwXIuVg7PsNADAFV
eeCiV1t3wqjnr2f1Q9I4L7TZVE26HRwSXZgY8uuGbETZSrIgxgs1OtFp6q20Wggp
TBqtZvhwKtGO8rHsAYJnNrF/B4X/JwFvUNL12RZXiKbANB2eCraVJbAF/4/ch3T1
d+TOvDlo9Ham7hN/HpFeLF9ORZFISwk=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:54 2025 by rpki-client