Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0d0b833-c8ab-3cc5-9832-a147c81152e8.roa
File:                     e0d0b833-c8ab-3cc5-9832-a147c81152e8.roa (raw, json)
Hash identifier:          ddyQB1/3JaeVYOd16cvAtRFjxL8n+Mup1cbLay9JHk0=
Subject key identifier:   9B:58:48:EE:31:9C:CD:4B:48:53:CE:C3:79:01:0C:0C:FA:C0:9D:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22BEA158A65A210BDD81700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0d0b833-c8ab-3cc5-9832-a147c81152e8.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        174.180.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2b:ea:15:8a:65:a2:10:bd:d8:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=a8602529-3521-4e09-8c91-2eb6a5434b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:72:95:c1:0c:16:f1:f2:c1:5e:27:d1:aa:
                    e3:21:0d:3a:8b:26:80:a4:bf:9b:1a:f1:63:fe:f1:
                    3f:1a:4f:7b:b7:84:15:3f:3b:43:1e:82:08:cd:95:
                    4a:3b:06:fe:b6:1d:c2:a5:39:61:20:28:b6:01:1c:
                    9f:a8:bd:b4:9b:de:1d:e4:19:8e:7b:df:46:8f:d4:
                    00:2e:32:d3:4e:dc:46:63:fb:09:76:03:a7:ae:23:
                    5c:23:73:00:12:b2:bc:3f:be:f1:d0:1e:fb:db:05:
                    b5:69:88:5c:dc:03:d2:be:54:64:05:db:d9:7d:ca:
                    93:47:a6:24:20:a8:02:16:78:70:33:d1:cb:cf:d1:
                    a3:34:8c:8c:e5:6f:7c:2e:11:5f:13:21:b8:58:bd:
                    59:b1:e8:2e:95:68:9c:b0:3e:61:a1:b5:20:09:0a:
                    2e:42:a7:21:99:b5:73:f9:b7:50:07:b3:c8:e9:79:
                    2d:1e:61:2f:40:58:be:62:57:59:d6:55:7c:23:ff:
                    19:e2:9c:c3:9d:48:6a:8f:c8:50:91:25:05:f6:63:
                    1e:56:4d:72:2a:1f:1e:0c:27:dd:94:06:93:03:ae:
                    2a:28:88:bd:f7:4a:0a:41:d9:93:44:26:d5:7f:b2:
                    bf:c3:fc:69:85:9f:dc:e7:78:a5:da:48:76:89:f8:
                    c6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:48:EE:31:9C:CD:4B:48:53:CE:C3:79:01:0C:0C:FA:C0:9D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0d0b833-c8ab-3cc5-9832-a147c81152e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.180.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:cf:43:09:b9:bb:c0:d6:f3:8c:20:8c:a5:a7:09:82:4c:b2:
         0d:de:4b:96:5e:62:48:21:47:21:75:0d:dd:8c:49:78:27:db:
         e0:0b:70:02:56:f3:d2:cf:ce:00:a1:b6:f5:47:ec:43:3d:c0:
         bf:dc:b6:03:ad:97:6b:aa:d1:0a:0d:fd:ca:78:f7:05:68:36:
         51:8f:bf:2d:eb:f7:79:67:35:4a:62:97:96:d4:1a:51:2c:7d:
         a3:8d:ed:90:b2:7f:80:76:58:ce:c7:f2:ac:d8:58:ef:99:42:
         95:74:36:48:44:a7:c0:2f:cd:5e:68:ae:3f:df:d9:5c:04:fe:
         20:a6:ab:9d:24:47:cc:1f:c9:32:ce:6a:39:4e:93:56:8a:b1:
         65:71:ec:07:d4:60:3d:af:c1:89:ac:6b:d4:fe:6e:8d:09:e7:
         58:fa:3b:52:f1:3e:e3:7c:35:ac:01:3d:12:6c:dc:c6:a7:a6:
         aa:e2:af:18:22:05:6a:92:58:eb:b3:26:56:6c:bb:15:b0:22:
         67:9e:7c:35:c5:45:07:97:80:c7:7f:d8:9b:9e:d2:1e:9b:9a:
         42:97:54:11:e8:82:ce:fb:4c:a0:eb:bb:e2:4f:54:53:77:12:
         45:7c:48:d8:b2:cf:89:32:7c:c9:37:9f:de:70:b9:6b:20:47:
         65:69:1e:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+oVimWiEL3YFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
YTg2MDI1MjktMzUyMS00ZTA5LThjOTEtMmViNmE1NDM0YjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ5ylcEMFvHywV4n0arjIQ06iyaApL+bGvFj
/vE/Gk97t4QVPztDHoIIzZVKOwb+th3CpTlhICi2ARyfqL20m94d5BmOe99Gj9QA
LjLTTtxGY/sJdgOnriNcI3MAErK8P77x0B772wW1aYhc3APSvlRkBdvZfcqTR6Yk
IKgCFnhwM9HLz9GjNIyM5W98LhFfEyG4WL1ZsegulWicsD5hobUgCQouQqchmbVz
+bdQB7PI6XktHmEvQFi+YldZ1lV8I/8Z4pzDnUhqj8hQkSUF9mMeVk1yKh8eDCfd
lAaTA64qKIi990oKQdmTRCbVf7K/w/xphZ/c53il2kh2ifjG/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtYSO4xnM1LSFPOw3kBDAz6wJ3/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTBkMGI4MzMtYzhhYi0z
Y2M1LTk4MzItYTE0N2M4MTE1MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrrSkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELPQwm5u8DW84wgjKWnCYJMsg3eS5ZeYkghRyF1Dd2MSXgn2+ALcAJW
89LPzgChtvVH7EM9wL/ctgOtl2uq0QoN/cp49wVoNlGPvy3r93lnNUpil5bUGlEs
faON7ZCyf4B2WM7H8qzYWO+ZQpV0NkhEp8AvzV5orj/f2VwE/iCmq50kR8wfyTLO
ajlOk1aKsWVx7AfUYD2vwYmsa9T+bo0J51j6O1LxPuN8NawBPRJs3Manpqrirxgi
BWqSWOuzJlZsuxWwImeefDXFRQeXgMd/2Jue0h6bmkKXVBHogs77TKDru+JPVFN3
EkV8SNiyz4kyfMk3n95wuWsgR2VpHsA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:23:09 2025 by rpki-client