Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bce7bc4f-831a-3d0e-a2a5-5a7da70703de.roa
File:                     bce7bc4f-831a-3d0e-a2a5-5a7da70703de.roa (raw, json)
Hash identifier:          np8QZ8IFGZi7+85+k/kTDi5TF3rAK83+OCCf0QdmdsM=
Subject key identifier:   47:B8:77:51:CC:23:6B:C4:FE:8E:9B:01:00:8A:69:C0:8B:62:3B:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB07BF18E16F0BAEB2F5B78
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bce7bc4f-831a-3d0e-a2a5-5a7da70703de.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        174.167.62.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:7b:f1:8e:16:f0:ba:eb:2f:5b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=18121399-f2f4-462a-aadb-e7456a8c30d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0d:53:ee:5f:92:73:32:41:45:47:1f:80:9e:
                    d2:01:ac:50:24:f5:fe:aa:1a:cb:24:65:d1:75:cc:
                    47:cf:db:3e:ad:1f:a4:2f:39:e4:f3:d8:91:ba:8b:
                    c0:45:87:5c:15:6a:50:5f:0f:a8:cb:6a:04:6b:1d:
                    3a:94:4b:ab:c3:60:2c:9d:07:0d:92:e2:b5:8b:0f:
                    05:37:a4:44:7a:72:d1:44:33:6a:56:49:f5:55:5d:
                    14:6c:f7:9f:f8:ee:c7:99:cd:99:d1:04:9b:1e:f6:
                    53:11:76:bd:b8:24:dc:b9:3c:0a:f8:e4:b2:6d:c1:
                    90:c9:07:1a:1e:4d:b3:bd:74:03:76:cc:ba:b1:9e:
                    e3:08:58:9c:63:ca:9a:44:e2:01:e8:31:c0:87:14:
                    18:8c:43:41:59:10:64:68:78:f4:d0:37:1e:1a:d3:
                    2c:cd:86:7c:ff:85:d2:75:35:ce:a9:2e:68:c8:c5:
                    ac:87:1d:a6:d4:c3:48:00:79:b0:39:1f:0e:90:45:
                    45:76:0f:23:07:55:2b:b9:9b:8e:68:32:ab:4a:6b:
                    41:08:30:fd:70:29:d3:65:03:14:14:4f:91:58:56:
                    81:5e:00:20:eb:39:97:22:8c:44:3e:2e:95:93:f1:
                    5d:34:96:61:a7:d4:55:8e:23:b5:16:28:f4:b9:0b:
                    e8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:77:51:CC:23:6B:C4:FE:8E:9B:01:00:8A:69:C0:8B:62:3B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bce7bc4f-831a-3d0e-a2a5-5a7da70703de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.167.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:89:b6:65:3e:01:81:e3:ac:7a:82:87:53:45:56:9a:cc:1c:
         30:11:6b:87:5e:c7:2c:71:30:de:ff:f0:00:ab:fa:d4:3d:de:
         5e:de:73:b0:9f:b0:90:c2:21:07:b4:45:10:7c:b2:8b:0a:b8:
         43:24:48:cc:cf:e0:73:3c:ef:06:a4:0e:32:0e:69:d6:ce:18:
         8d:ef:b6:c2:19:af:97:e6:1e:b2:ea:3d:2e:2a:cd:89:0a:35:
         40:d9:02:29:df:1b:2f:dc:83:17:c2:0a:3d:41:14:e8:d4:77:
         9b:07:03:ca:63:a5:ae:bc:aa:21:3c:d2:06:39:ad:63:54:6f:
         e2:bf:cc:9a:5d:59:7d:7b:ff:84:a2:ba:73:94:d5:2d:4c:02:
         e2:fc:bd:a0:81:f3:0e:ba:a5:76:42:25:28:ec:08:ca:79:05:
         3b:10:6c:a9:21:92:23:12:50:fa:0d:bf:f7:71:eb:1b:cf:26:
         df:ae:74:db:ba:31:44:f0:cd:d2:d9:e8:23:8b:5b:99:34:07:
         c7:91:b0:4f:b0:60:19:28:54:df:77:2f:31:19:a5:70:f3:10:
         2a:71:ba:a2:7f:23:72:dd:11:b8:f9:fd:04:4e:0f:a1:b2:c9:
         93:5d:16:b5:6d:1d:16:29:54:f2:8c:72:ad:1e:34:92:0d:e3:
         a4:4d:d3:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssHvxjhbwuusvW3gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTgxMjEzOTktZjJmNC00NjJhLWFhZGItZTc0NTZhOGMzMGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q1T7l+SczJBRUcfgJ7SAaxQJPX+qhrLJGXR
dcxHz9s+rR+kLznk89iRuovARYdcFWpQXw+oy2oEax06lEurw2AsnQcNkuK1iw8F
N6REenLRRDNqVkn1VV0UbPef+O7Hmc2Z0QSbHvZTEXa9uCTcuTwK+OSybcGQyQca
Hk2zvXQDdsy6sZ7jCFicY8qaROIB6DHAhxQYjENBWRBkaHj00DceGtMszYZ8/4XS
dTXOqS5oyMWshx2m1MNIAHmwOR8OkEVFdg8jB1UruZuOaDKrSmtBCDD9cCnTZQMU
FE+RWFaBXgAg6zmXIoxEPi6Vk/FdNJZhp9RVjiO1Fij0uQvovwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEe4d1HMI2vE/o6bAQCKacCLYjseMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmNlN2JjNGYtODMxYS0z
ZDBlLWEyYTUtNWE3ZGE3MDcwM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqc+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqJtmU+AYHjrHqCh1NFVprMHDARa4dexyxxMN7/8ACr+tQ93l7ec7Cf
sJDCIQe0RRB8sosKuEMkSMzP4HM87wakDjIOadbOGI3vtsIZr5fmHrLqPS4qzYkK
NUDZAinfGy/cgxfCCj1BFOjUd5sHA8pjpa68qiE80gY5rWNUb+K/zJpdWX17/4Si
unOU1S1MAuL8vaCB8w66pXZCJSjsCMp5BTsQbKkhkiMSUPoNv/dx6xvPJt+udNu6
MUTwzdLZ6COLW5k0B8eRsE+wYBkoVN93LzEZpXDzECpxuqJ/I3LdEbj5/QROD6Gy
yZNdFrVtHRYpVPKMcq0eNJIN46RN04s=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:21:48 2025 by rpki-client