Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/92cf6e7a-f0e7-38b9-b921-2c6a2e7c80b5.roa
File:                     92cf6e7a-f0e7-38b9-b921-2c6a2e7c80b5.roa (raw, json)
Hash identifier:          voHMSgCKkHZ1QMJdyLQmsnp/+4DSEtgR0lxoizRBZ+8=
Subject key identifier:   9B:E6:D5:EC:84:06:24:E0:B1:9C:9A:4C:A9:73:74:13:D9:6A:13:08
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F43285848A44E03CBA52D1C288F01E100
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/92cf6e7a-f0e7-38b9-b921-2c6a2e7c80b5.roa
Signing time:             Thu 23 Jan 2025 16:36:39 +0000
ROA not before:           Thu 23 Jan 2025 16:36:39 +0000
ROA not after:            Wed 23 Apr 2025 15:36:39 +0000
asID:                     400597
IP address blocks:        217.149.98.0/24 maxlen: 24
                          2602:fb1b:62::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:4e:03:cb:a5:2d:1c:28:8f:01:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Jan 23 16:36:39 2025 GMT
            Not After : Apr 23 15:36:39 2025 GMT
        Subject: CN=90227b9a-6be5-4a8c-8cd9-1e557306a782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:83:58:75:80:91:c9:93:4a:7c:eb:13:ad:ce:
                    ad:f7:cc:0f:f8:6b:b1:4a:69:16:ad:d8:b5:27:fe:
                    58:f5:82:94:7e:b5:d6:2b:71:f1:90:2e:29:82:79:
                    53:0b:37:22:38:fb:d7:44:be:8c:75:28:34:4d:a4:
                    90:89:7c:47:b8:5a:48:88:51:d8:b5:fa:33:27:9c:
                    e0:45:62:6b:23:e4:14:0c:f2:6b:4c:ef:59:c7:65:
                    4f:ef:b6:c2:17:a5:11:59:36:62:25:53:fe:06:d7:
                    59:1f:8e:02:81:3b:d3:d6:20:f6:70:43:36:1b:a9:
                    5c:b5:6d:68:e4:3c:92:c2:56:44:ae:99:af:24:38:
                    55:27:cc:71:68:68:af:ba:ca:82:7f:fa:5f:3c:8a:
                    bc:95:1b:be:72:51:f7:a8:45:e4:02:f1:ca:0b:81:
                    63:21:de:29:1b:31:ce:10:bb:32:71:da:38:6b:f9:
                    2f:70:80:65:bc:2b:85:ac:72:e1:82:05:be:4f:f9:
                    88:ea:8a:f3:bf:c2:7b:bf:59:21:ee:c3:d3:77:c4:
                    51:af:ad:95:00:c2:b9:35:21:0a:05:a1:7a:12:ce:
                    9c:9f:9c:07:91:a8:f0:b7:9b:a3:42:68:d8:39:e7:
                    0d:0d:4b:f4:67:a9:c5:8b:8d:cb:ca:69:96:77:9a:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E6:D5:EC:84:06:24:E0:B1:9C:9A:4C:A9:73:74:13:D9:6A:13:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/92cf6e7a-f0e7-38b9-b921-2c6a2e7c80b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.149.98.0/24
                IPv6:
                  2602:fb1b:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:da:02:58:6b:a5:ba:05:39:6b:7d:9c:6f:3b:22:15:25:a2:
         a5:5c:df:d4:c4:97:e2:90:6f:95:42:62:b1:35:7b:4f:18:5f:
         73:cc:dd:a7:35:cd:10:72:f4:78:2a:31:45:e5:ed:1f:25:f6:
         b7:9d:77:84:9d:a8:94:05:ef:b6:15:91:52:98:d1:eb:7a:85:
         6c:b3:bc:de:ff:81:d2:bb:76:a3:3a:eb:57:aa:78:2d:db:8d:
         ed:df:03:86:c9:ee:42:17:38:bd:de:25:5d:c8:da:8c:20:e3:
         58:8a:54:b0:eb:19:8d:6b:18:c3:89:15:5e:92:b7:4f:d7:e9:
         0c:0f:af:29:6e:03:b9:3f:9e:e1:b3:83:ed:bc:48:9a:3d:ea:
         d9:76:1f:4e:04:4f:df:08:69:9f:88:5e:9d:ad:9f:ee:04:96:
         72:40:38:97:26:7c:1c:a3:3c:b1:b3:06:75:df:8d:b4:51:d1:
         95:4f:1f:85:db:7f:e4:40:ce:58:5b:0c:54:18:df:cf:53:c9:
         54:13:df:92:17:8d:fb:18:9d:7b:41:24:3d:b1:9e:73:0f:0d:
         24:8a:b9:0c:7d:c1:aa:93:f7:7f:dc:35:1b:5b:d4:8a:df:84:
         34:09:b1:c3:b8:96:b8:61:59:67:7b:a6:bb:34:38:33:35:20:
         bd:86:36:5e
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEikTgPLpS0cKI8B4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh
ZjYzMB4XDTI1MDEyMzE2MzYzOVoXDTI1MDQyMzE1MzYzOVowLzEtMCsGA1UEAxMk
OTAyMjdiOWEtNmJlNS00YThjLThjZDktMWU1NTczMDZhNzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6INYdYCRyZNKfOsTrc6t98wP+GuxSmkWrdi1
J/5Y9YKUfrXWK3HxkC4pgnlTCzciOPvXRL6MdSg0TaSQiXxHuFpIiFHYtfozJ5zg
RWJrI+QUDPJrTO9Zx2VP77bCF6URWTZiJVP+BtdZH44CgTvT1iD2cEM2G6lctW1o
5DySwlZErpmvJDhVJ8xxaGivusqCf/pfPIq8lRu+clH3qEXkAvHKC4FjId4pGzHO
ELsycdo4a/kvcIBlvCuFrHLhggW+T/mI6orzv8J7v1kh7sPTd8RRr62VAMK5NSEK
BaF6Es6cn5wHkajwt5ujQmjYOecNDUv0Z6nFi43LymmWd5pWOQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFJvm1eyEBiTgsZyaTKlzdBPZahMIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi
ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvOTJjZjZlN2EtZjBlNy0z
OGI5LWI5MjEtMmM2YTJlN2M4MGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm
YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx
YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj
MjI0MWFmNjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2ZViMA8E
AgACMAkDBwAmAvsbAGIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAd9oCWGulugU5a32cbzsiFSWipVzf1MSX
4pBvlUJisTV7Txhfc8zdpzXNEHL0eCoxReXtHyX2t513hJ2olAXvthWRUpjR63qF
bLO83v+B0rt2ozrrV6p4LduN7d8DhsnuQhc4vd4lXcjajCDjWIpUsOsZjWsYw4kV
XpK3T9fpDA+vKW4DuT+e4bOD7bxImj3q2XYfTgRP3whpn4hena2f7gSWckA4lyZ8
HKM8sbMGdd+NtFHRlU8fhdt/5EDOWFsMVBjfz1PJVBPfkheN+xide0EkPbGecw8N
JIq5DH3BqpP3f9w1G1vUit+ENAmxw7iWuGFZZ3umuzQ4MzUgvYY2Xg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:26 2025 by rpki-client