Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa
File:                     5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa (raw, json)
Hash identifier:          2JQrmKpokxR6NCqSuT81UdZMVoArILCDTsPLZ0Md9vs=
Subject key identifier:   3E:F1:17:55:0A:E9:26:ED:31:EC:AC:23:BA:77:72:7D:BD:60:E6:FA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071C04D168D94151E314E180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.70.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1c:04:d1:68:d9:41:51:e3:14:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=ea3bb8ee-fbaf-4dd7-87ad-fa475395142f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:02:ea:a2:4e:3e:24:33:5b:13:5d:11:f9:
                    8f:80:ee:f7:4b:91:67:df:f0:e3:44:b0:7c:86:7c:
                    23:5e:db:99:65:62:67:32:b4:87:69:42:5f:a7:37:
                    c4:f6:5c:7c:4b:32:82:7d:7a:dc:19:2a:ec:b8:7f:
                    e3:04:4d:5b:27:9e:4a:24:52:0e:7f:ee:bf:00:6f:
                    d6:1e:b8:90:e9:48:8c:c8:fc:de:08:84:93:42:27:
                    4d:a3:bc:0e:26:d8:d2:7d:20:46:55:79:d5:22:0a:
                    6b:9e:4b:54:53:08:8d:61:f4:fe:26:8b:0a:01:c4:
                    d3:16:c0:4b:ea:28:90:69:dd:e6:b9:f0:ac:07:a1:
                    e0:ac:af:a2:f3:b1:f0:e8:7c:9e:69:fd:a0:01:dd:
                    2d:50:20:c3:c1:47:e5:06:1c:ec:79:fa:1f:f1:ec:
                    d7:56:1b:00:ee:0f:18:80:2e:21:f9:ef:e6:20:09:
                    62:92:81:a7:7e:dc:e0:1d:c4:d5:8d:7e:7c:d1:45:
                    a1:09:5a:c8:f4:7a:8b:be:08:a8:7a:3b:59:67:d7:
                    32:cb:96:fe:8d:f8:48:86:14:00:95:d0:20:39:37:
                    dc:34:2e:58:d6:4f:b6:f6:1d:40:25:38:d7:4f:65:
                    7d:6a:1e:a6:e9:2a:03:7e:75:e3:75:cb:ab:05:ec:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F1:17:55:0A:E9:26:ED:31:EC:AC:23:BA:77:72:7D:BD:60:E6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d2:2b:9a:fb:5d:c1:e0:91:b7:e7:cc:e4:01:1c:07:d5:e7:
         00:19:aa:2c:d4:3c:ef:69:ac:54:c8:b8:42:66:a8:35:b1:93:
         5d:95:14:b2:0a:22:d1:16:b0:94:2b:33:ae:49:0d:b0:fd:db:
         4d:b8:41:65:91:01:fd:21:ab:db:84:2b:1c:b1:5b:58:ec:a2:
         a0:dd:06:fd:c4:65:d7:3f:f1:6d:46:cf:50:0e:94:ef:e1:4f:
         6f:be:f2:63:36:49:0c:49:3f:6a:11:e7:f6:a0:11:7e:b5:eb:
         15:d5:8d:6f:5c:ce:43:69:b4:8d:6f:b7:35:e9:1f:35:c5:59:
         a2:4c:38:20:59:87:96:bf:11:bf:6d:20:28:f3:43:c5:3f:3e:
         f1:5c:2a:dc:ba:02:a0:03:5d:64:26:b6:05:7a:16:4a:1a:1a:
         60:f2:ad:6b:f3:9b:e9:3a:d8:11:b0:ad:1a:da:07:c2:33:86:
         ce:34:37:22:55:2d:21:2c:de:ec:ab:ba:07:10:7a:58:cf:81:
         46:66:4a:3c:05:d0:52:1a:ce:e3:34:85:f7:3d:73:ef:e6:0e:
         4f:b4:a6:9f:60:0f:07:d0:b4:72:c8:40:93:ff:cf:70:03:a4:
         76:ae:e0:aa:5e:f1:03:cc:42:00:b9:b6:9a:39:13:26:33:84:
         a4:c0:39:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHATRaNlBUeMU4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZWEzYmI4ZWUtZmJhZi00ZGQ3LTg3YWQtZmE0NzUzOTUxNDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1REC6qJOPiQzWxNdEfmPgO73S5Fn3/DjRLB8
hnwjXtuZZWJnMrSHaUJfpzfE9lx8SzKCfXrcGSrsuH/jBE1bJ55KJFIOf+6/AG/W
HriQ6UiMyPzeCISTQidNo7wOJtjSfSBGVXnVIgprnktUUwiNYfT+JosKAcTTFsBL
6iiQad3mufCsB6HgrK+i87Hw6Hyeaf2gAd0tUCDDwUflBhzsefof8ezXVhsA7g8Y
gC4h+e/mIAlikoGnftzgHcTVjX580UWhCVrI9HqLvgioejtZZ9cyy5b+jfhIhhQA
ldAgOTfcNC5Y1k+29h1AJTjXT2V9ah6m6SoDfnXjdcurBewQaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7xF1UK6SbtMeysI7p3cn29YOb6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWY3YjI2MGEtOWJmOS0z
MmYxLWJmMDktYmNmZjdhMmRmM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPSK5r7XcHgkbfnzOQBHAfV5wAZqizUPO9prFTIuEJmqDWxk12VFLIK
ItEWsJQrM65JDbD92024QWWRAf0hq9uEKxyxW1jsoqDdBv3EZdc/8W1Gz1AOlO/h
T2++8mM2SQxJP2oR5/agEX616xXVjW9czkNptI1vtzXpHzXFWaJMOCBZh5a/Eb9t
ICjzQ8U/PvFcKty6AqADXWQmtgV6FkoaGmDyrWvzm+k62BGwrRraB8Izhs40NyJV
LSEs3uyrugcQeljPgUZmSjwF0FIazuM0hfc9c+/mDk+0pp9gDwfQtHLIQJP/z3AD
pHau4Kpe8QPMQgC5tpo5EyYzhKTAOQ0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:24 2025 by rpki-client