Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5cc65ac-62f4-30fc-a4e6-7e077e12a97a.roa
File:                     c5cc65ac-62f4-30fc-a4e6-7e077e12a97a.roa (raw, json)
Hash identifier:          YBtZkx6xc+r1dlIVoaaXQ2WUsVUXRyxtE4dLJ+hp85Q=
Subject key identifier:   FA:DE:3F:36:93:F5:66:BD:88:0A:C5:E4:63:B8:52:31:E5:0C:21:87
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849088181DFD81A0AA59815CBC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5cc65ac-62f4-30fc-a4e6-7e077e12a97a.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:81:df:d8:1a:0a:a5:98:15:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=7692508f-f61d-4b32-ae4c-07ed25d2115d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:17:84:ef:c3:66:4b:85:74:42:29:80:85:
                    6a:59:11:1d:ac:4c:81:f7:4b:45:f1:b5:fb:18:90:
                    28:72:8c:20:c4:2a:a6:39:34:33:5b:76:ad:7a:d6:
                    0e:ac:01:6f:98:48:d9:e8:cc:57:54:28:34:7a:de:
                    71:58:a8:75:32:f7:ba:00:8a:9e:89:ae:7c:72:ff:
                    99:8d:99:79:fc:52:c1:19:1f:5a:36:14:4f:c9:ec:
                    da:cc:6d:c2:d1:bc:ad:ac:c5:de:4d:1a:f7:5c:2a:
                    31:cc:5a:7a:a1:c2:71:d2:c9:0d:d2:d7:70:da:5a:
                    46:c4:da:c2:3e:64:76:86:25:42:95:14:d2:d7:e6:
                    77:53:2a:fa:30:e7:ee:41:1e:19:55:4d:42:59:a7:
                    0e:99:d8:14:61:e2:d5:eb:50:d9:83:34:c9:df:a6:
                    ea:4c:99:d5:c7:ac:50:34:45:f7:80:96:6b:5c:9f:
                    72:b2:ad:cb:7f:d2:eb:98:c9:cd:78:ca:b2:8c:7e:
                    0f:30:57:dc:00:3c:96:af:d1:60:93:f1:6a:46:94:
                    ac:66:de:e2:29:71:6b:53:41:5d:a8:78:b9:ed:d4:
                    2c:2d:33:be:95:62:b0:42:2d:23:0e:7c:4d:eb:45:
                    e8:87:06:84:63:71:a0:2a:83:d6:d4:cf:6f:90:82:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:3F:36:93:F5:66:BD:88:0A:C5:E4:63:B8:52:31:E5:0C:21:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5cc65ac-62f4-30fc-a4e6-7e077e12a97a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:03:1a:18:22:ac:db:08:b1:03:0b:c1:ae:9d:a8:05:aa:0a:
         7d:9d:0b:5a:24:3d:21:6c:50:d9:4b:2a:c9:df:b1:69:95:5d:
         06:47:ef:ed:1c:47:93:3b:18:8a:2b:27:69:7f:a7:1f:58:b7:
         e8:5f:4b:7d:52:78:24:c2:fa:9f:96:cf:2e:55:f1:d1:b0:56:
         c9:c7:b9:6b:d2:bc:fb:f0:d9:c1:eb:33:52:e5:fe:1b:2b:dc:
         53:eb:1d:3d:ed:4e:37:e8:08:e9:19:f8:2f:60:0e:e3:de:4e:
         8c:5d:d3:9f:39:5a:08:39:23:10:58:1c:09:0a:d3:db:6e:dc:
         41:4c:cc:52:69:2e:c5:9b:4b:63:7e:23:0b:45:dd:fb:ee:69:
         4a:3f:af:a9:f5:59:ac:ec:f4:a9:f3:64:10:ee:f0:78:72:a1:
         a5:c1:0c:7d:f6:86:48:57:df:ec:f4:c5:19:f8:f2:3a:84:31:
         7a:a9:fe:a7:7b:70:c6:b4:a0:fd:ce:45:c5:7c:33:2f:38:aa:
         12:1d:5c:d1:2f:e1:a9:7e:f7:23:3e:59:33:e6:7e:47:05:ab:
         7b:b4:16:c5:29:05:03:4d:e8:5f:7e:68:6f:14:22:32:f0:23:
         44:14:5a:4d:69:ea:56:09:a4:6e:6a:ce:37:37:56:ae:16:ea:
         d5:52:57:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYHf2BoKpZgVy8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzY5MjUwOGYtZjYxZC00YjMyLWFlNGMtMDdlZDI1ZDIxMTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0kXhO/DZkuFdEIpgIVqWREdrEyB90tF8bX7
GJAocowgxCqmOTQzW3atetYOrAFvmEjZ6MxXVCg0et5xWKh1Mve6AIqeia58cv+Z
jZl5/FLBGR9aNhRPyezazG3C0bytrMXeTRr3XCoxzFp6ocJx0skN0tdw2lpGxNrC
PmR2hiVClRTS1+Z3Uyr6MOfuQR4ZVU1CWacOmdgUYeLV61DZgzTJ36bqTJnVx6xQ
NEX3gJZrXJ9ysq3Lf9LrmMnNeMqyjH4PMFfcADyWr9Fgk/FqRpSsZt7iKXFrU0Fd
qHi57dQsLTO+lWKwQi0jDnxN60XohwaEY3GgKoPW1M9vkILuzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrePzaT9Wa9iArF5GO4UjHlDCGHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzVjYzY1YWMtNjJmNC0z
MGZjLWE0ZTYtN2UwNzdlMTJhOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMUDGhgirNsIsQMLwa6dqAWqCn2dC1okPSFsUNlLKsnfsWmVXQZH7+0c
R5M7GIorJ2l/px9Yt+hfS31SeCTC+p+Wzy5V8dGwVsnHuWvSvPvw2cHrM1Ll/hsr
3FPrHT3tTjfoCOkZ+C9gDuPeToxd0585Wgg5IxBYHAkK09tu3EFMzFJpLsWbS2N+
IwtF3fvuaUo/r6n1Wazs9KnzZBDu8HhyoaXBDH32hkhX3+z0xRn48jqEMXqp/qd7
cMa0oP3ORcV8My84qhIdXNEv4al+9yM+WTPmfkcFq3u0FsUpBQNN6F9+aG8UIjLw
I0QUWk1p6lYJpG5qzjc3Vq4W6tVSVzk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:05 2025 by rpki-client