Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a14be87e-aecd-3554-8076-3fbff1d6e689.roa
File:                     a14be87e-aecd-3554-8076-3fbff1d6e689.roa (raw, json)
Hash identifier:          4lImA0k0dR96Hy5acf9ZSZODQi569tOPWjiA4uSQAKY=
Subject key identifier:   78:59:F0:B7:7C:87:82:A5:20:E2:DB:80:3A:87:FB:3F:D9:DA:17:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB08C0CD013ACDA3C74F900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a14be87e-aecd-3554-8076-3fbff1d6e689.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        69.139.18.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:8c:0c:d0:13:ac:da:3c:74:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=414b3951-4776-421a-8cd9-f4578682c434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:2d:3b:9a:7d:b5:41:1f:c3:16:06:ac:a0:
                    0c:1e:20:ab:a8:9f:0a:e7:45:89:5c:0d:c8:76:54:
                    d0:2a:2d:72:b8:5d:35:f8:de:01:a0:e1:fa:a4:4e:
                    ac:c4:cb:86:f3:c0:17:5e:d0:b2:8a:89:12:e5:da:
                    ff:ce:a4:f0:de:94:cc:8d:34:22:96:45:d8:77:6f:
                    3e:52:f6:ff:1a:89:fe:78:aa:5c:6c:b8:17:e9:01:
                    83:1d:72:a0:27:06:66:20:77:7f:21:0a:2f:b8:97:
                    41:df:85:e1:eb:68:5e:5d:3b:2c:18:b5:1a:90:84:
                    29:cc:8b:e1:23:94:59:91:f8:72:5e:7a:76:5f:e6:
                    f0:8d:a1:77:53:8f:36:ac:eb:6b:1a:57:92:45:44:
                    8b:00:6f:fe:ad:97:3f:86:8c:3f:ed:29:86:4d:e7:
                    75:ee:28:f5:e6:68:bf:10:66:fa:d9:91:0c:a5:9d:
                    7b:36:77:2e:3d:64:cf:cb:2e:e9:5e:07:4d:1a:7f:
                    ed:13:af:76:95:7f:2c:1a:b6:e6:90:a0:cc:b2:88:
                    73:8f:fb:d3:e2:4a:a4:48:4d:03:da:a2:20:82:be:
                    7f:9c:a5:84:2c:51:41:b1:1d:7b:67:06:aa:8f:96:
                    1b:9f:14:82:89:5a:4e:8f:5f:ae:25:aa:78:e3:ce:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:59:F0:B7:7C:87:82:A5:20:E2:DB:80:3A:87:FB:3F:D9:DA:17:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a14be87e-aecd-3554-8076-3fbff1d6e689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ee:6c:cf:a2:df:87:30:c5:3b:21:b3:b9:ab:60:9d:9a:fd:
         aa:38:e8:d5:a6:73:f4:fb:d4:f5:b0:79:5d:4b:5b:21:b7:51:
         12:77:6b:4f:52:f8:41:db:6d:8d:a8:6d:8f:1c:ce:38:25:84:
         8d:5e:73:1b:38:14:dd:b6:82:b0:54:47:9b:a2:f1:39:b0:a8:
         03:c1:7a:d5:61:94:da:75:a2:42:33:33:82:c5:22:84:e0:74:
         13:c9:ae:b5:ae:c8:b6:3f:a7:6c:cc:da:12:9f:b0:af:c0:8a:
         f3:b8:67:d0:75:18:b6:04:80:95:1f:9a:b5:f9:d9:bb:44:80:
         83:8f:47:6f:47:5f:3a:8b:46:d8:7b:52:5d:0b:0e:26:94:3d:
         b0:63:33:a7:75:28:b9:6e:f5:34:e1:b6:e2:f8:6d:0c:0c:ba:
         5c:55:36:64:47:26:1d:dc:bf:46:f0:bb:9d:6e:6a:08:0f:7f:
         2f:6e:1e:8e:1c:29:0b:a8:0c:f7:06:3a:81:30:b6:dc:56:20:
         af:63:a0:59:ce:dd:20:e6:be:09:6c:66:73:de:46:23:0a:c2:
         aa:04:65:15:cc:f3:51:4a:ea:1a:15:66:a0:75:2a:11:52:d0:
         f8:2e:ac:28:e1:ab:86:b9:0e:91:4e:9c:0d:34:1b:fa:4f:72:
         35:47:70:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssIwM0BOs2jx0+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDE0YjM5NTEtNDc3Ni00MjFhLThjZDktZjQ1Nzg2ODJjNDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcMtO5p9tUEfwxYGrKAMHiCrqJ8K50WJXA3I
dlTQKi1yuF01+N4BoOH6pE6sxMuG88AXXtCyiokS5dr/zqTw3pTMjTQilkXYd28+
Uvb/Gon+eKpcbLgX6QGDHXKgJwZmIHd/IQovuJdB34Xh62heXTssGLUakIQpzIvh
I5RZkfhyXnp2X+bwjaF3U482rOtrGleSRUSLAG/+rZc/how/7SmGTed17ij15mi/
EGb62ZEMpZ17NncuPWTPyy7pXgdNGn/tE692lX8sGrbmkKDMsohzj/vT4kqkSE0D
2qIggr5/nKWELFFBsR17Zwaqj5YbnxSCiVpOj1+uJap4485g1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHhZ8Ld8h4KlIOLbgDqH+z/Z2hc1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE0YmU4N2UtYWVjZC0z
NTU0LTgwNzYtM2ZiZmYxZDZlNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRYsSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALDubM+i34cwxTshs7mrYJ2a/ao46NWmc/T71PWweV1LWyG3URJ3a09S
+EHbbY2obY8czjglhI1ecxs4FN22grBUR5ui8TmwqAPBetVhlNp1okIzM4LFIoTg
dBPJrrWuyLY/p2zM2hKfsK/AivO4Z9B1GLYEgJUfmrX52btEgIOPR29HXzqLRth7
Ul0LDiaUPbBjM6d1KLlu9TThtuL4bQwMulxVNmRHJh3cv0bwu51uaggPfy9uHo4c
KQuoDPcGOoEwttxWIK9joFnO3SDmvglsZnPeRiMKwqoEZRXM81FK6hoVZqB1KhFS
0PgurCjhq4a5DpFOnA00G/pPcjVHcAA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:09:50 2025 by rpki-client