Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19ca27de-f0fa-3260-97ff-6c75fb828068.roa
File:                     19ca27de-f0fa-3260-97ff-6c75fb828068.roa (raw, json)
Hash identifier:          PSd8FtXgivL9+z5wPxDDH29tT/t3q/JTRbm/9bEjNM4=
Subject key identifier:   33:0E:2B:23:60:09:81:E5:D6:DD:31:0E:1E:F6:66:A8:52:6C:E8:BB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E16E07659D9AEE6168127A
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19ca27de-f0fa-3260-97ff-6c75fb828068.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.70.239.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:6e:07:65:9d:9a:ee:61:68:12:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=5e076f34-d31b-4d10-af73-7dbfa45fff4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:e8:e1:f6:5b:09:e9:87:8f:09:33:15:ff:
                    f1:dc:b1:77:23:de:a4:21:de:b1:f5:5f:c4:f8:a7:
                    d7:56:dc:cd:f8:7b:8d:40:14:07:39:dd:3c:2c:b2:
                    2d:3a:7f:92:4b:5b:27:b0:f5:b0:5a:18:b1:59:aa:
                    46:9a:27:f9:60:ff:c3:f3:88:54:7d:99:51:b2:d9:
                    01:c8:de:6e:d9:ea:89:26:e2:ee:9f:87:77:65:74:
                    bd:91:36:06:5d:50:b9:26:6c:56:84:c8:96:a6:a5:
                    96:0f:38:0f:97:3c:24:fc:9a:4c:82:ce:8c:a1:7f:
                    89:14:ae:4f:56:ed:c1:32:ea:93:3e:19:18:9b:a3:
                    a5:d9:42:0a:af:39:19:68:77:ce:b8:15:3d:83:11:
                    42:cb:ba:b5:cb:6e:0c:0a:2e:6c:08:5b:30:45:dc:
                    47:cc:ec:c1:58:6e:a4:56:5e:b7:ea:2f:28:35:9e:
                    25:65:63:42:f4:30:cb:80:1f:5b:32:1e:d5:e3:9e:
                    d7:ea:d7:bb:ec:8f:f4:4d:f3:88:cc:cf:2e:33:cf:
                    3c:a1:51:ba:87:91:2d:59:10:3c:9b:bd:90:d0:4b:
                    b8:dd:73:4b:94:7a:ed:a1:e7:ae:ab:51:e9:3c:df:
                    db:4c:04:cf:52:cf:93:4b:2f:f4:ef:30:7f:02:6e:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0E:2B:23:60:09:81:E5:D6:DD:31:0E:1E:F6:66:A8:52:6C:E8:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19ca27de-f0fa-3260-97ff-6c75fb828068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:81:da:59:c4:61:06:14:1d:e0:cb:96:8c:2d:8d:fb:ba:63:
         b4:dc:c3:51:8f:3e:f5:0a:35:7d:95:5b:98:23:59:4b:74:3a:
         9b:03:d3:dd:f1:94:38:26:f5:b4:99:1c:63:2f:46:a4:07:7e:
         9c:56:78:e2:ff:e2:dc:ab:f3:f1:fb:be:36:10:fe:ec:56:b6:
         18:e5:29:07:22:bc:21:05:c3:8c:16:52:8e:fd:31:11:bd:e8:
         a5:29:96:a4:af:8b:af:f6:6f:c5:2f:76:60:ea:cb:37:70:72:
         c5:63:4e:64:6f:c4:82:ff:db:12:6f:88:34:73:98:54:6f:d8:
         d9:07:f5:78:d3:20:7e:59:0c:6b:76:83:c4:76:c1:cf:5d:b7:
         cd:5e:14:65:b0:1f:b6:ee:28:72:af:76:bc:f3:7a:c4:66:60:
         85:21:ac:fb:04:9a:77:0b:ca:95:af:b7:e7:0d:06:3a:fe:a1:
         0f:c8:00:db:54:62:79:2f:ae:cd:01:4f:e6:ae:cb:57:4d:49:
         6f:68:39:0c:31:e1:e4:ee:9b:c5:a7:31:52:45:cb:cb:f2:da:
         88:0b:0f:68:8c:8c:cc:e1:ed:cf:f8:cb:f7:3f:4e:27:1b:bf:
         01:fc:b8:c7:6d:6d:72:cd:f5:4d:eb:98:92:fd:ad:dc:38:8f:
         0a:be:4f:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4W4HZZ2a7mFoEnowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
NWUwNzZmMzQtZDMxYi00ZDEwLWFmNzMtN2RiZmE0NWZmZjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomro4fZbCemHjwkzFf/x3LF3I96kId6x9V/E
+KfXVtzN+HuNQBQHOd08LLItOn+SS1snsPWwWhixWapGmif5YP/D84hUfZlRstkB
yN5u2eqJJuLun4d3ZXS9kTYGXVC5JmxWhMiWpqWWDzgPlzwk/JpMgs6MoX+JFK5P
Vu3BMuqTPhkYm6Ol2UIKrzkZaHfOuBU9gxFCy7q1y24MCi5sCFswRdxHzOzBWG6k
Vl636i8oNZ4lZWNC9DDLgB9bMh7V457X6te77I/0TfOIzM8uM888oVG6h5EtWRA8
m72Q0Eu43XNLlHrtoeeuq1HpPN/bTATPUs+TSy/07zB/Am5PnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMOKyNgCYHl1t0xDh72ZqhSbOi7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTljYTI3ZGUtZjBmYS0z
MjYwLTk3ZmYtNmM3NWZiODI4MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWB2lnEYQYUHeDLlowtjfu6Y7Tcw1GPPvUKNX2VW5gjWUt0OpsD093x
lDgm9bSZHGMvRqQHfpxWeOL/4tyr8/H7vjYQ/uxWthjlKQcivCEFw4wWUo79MRG9
6KUplqSvi6/2b8UvdmDqyzdwcsVjTmRvxIL/2xJviDRzmFRv2NkH9XjTIH5ZDGt2
g8R2wc9dt81eFGWwH7buKHKvdrzzesRmYIUhrPsEmncLypWvt+cNBjr+oQ/IANtU
Ynkvrs0BT+auy1dNSW9oOQwx4eTum8WnMVJFy8vy2ogLD2iMjMzh7c/4y/c/Ticb
vwH8uMdtbXLN9U3rmJL9rdw4jwq+T2E=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:11 2025 by rpki-client