Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa
File:                     061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa (raw, json)
Hash identifier:          rGYZvuwaeDA5HQqK05B1bZb1NEcR+P0w3gNbZVZPHuI=
Subject key identifier:   BE:58:02:CF:93:38:48:A0:7D:8C:72:7B:27:15:8D:4D:E4:3E:D3:4C
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F43285848FD56C6E471561FF7367FBF40
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     16696
IP address blocks:        147.129.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c6:e4:71:56:1f:f7:36:7f:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=791156c7-feec-4e8b-af9f-5902359700d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:52:16:13:03:38:0e:d3:ed:ff:8b:5c:46:
                    74:7a:70:20:61:38:cd:93:ea:bf:9d:67:75:66:08:
                    f6:28:e1:b3:26:e2:73:98:26:20:63:be:09:a6:67:
                    81:48:49:92:65:a2:61:19:18:73:5a:eb:a3:1c:9e:
                    0b:74:58:53:fb:a4:b3:61:e0:d3:88:39:cf:2e:61:
                    ed:7f:4b:85:84:27:4b:c6:6d:4a:43:64:7b:20:30:
                    39:34:cf:5f:10:de:7c:6b:05:40:4b:02:26:e2:7f:
                    f7:ac:8e:13:0f:4c:b0:50:28:5d:be:06:b9:16:45:
                    8e:85:05:f5:ab:ad:8e:8e:33:be:01:c3:0c:fd:58:
                    ce:a2:20:04:37:31:6b:5f:66:43:af:2b:a0:4b:bd:
                    a8:62:90:c3:c0:ce:84:93:5d:c2:b5:db:9d:51:bb:
                    c6:c2:30:79:b9:73:ad:35:2a:4e:89:56:d9:df:ca:
                    ab:07:a9:7f:ae:64:6a:ff:44:ab:6c:2b:5c:a3:96:
                    6d:9c:98:a5:b1:c8:de:cb:f8:4e:49:13:12:d4:28:
                    3e:ce:86:b1:7e:de:54:6c:1d:19:bb:c4:3e:1a:b8:
                    36:fb:0e:ce:ca:1b:b6:64:08:8c:04:8f:c5:f3:70:
                    56:1a:46:94:41:48:f2:a0:6b:f9:8f:59:2f:75:b4:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:58:02:CF:93:38:48:A0:7D:8C:72:7B:27:15:8D:4D:E4:3E:D3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.129.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:1b:52:3d:bc:fb:58:66:f8:9c:80:88:6d:62:19:8d:98:
         a2:c8:c8:28:14:13:1f:eb:94:f0:b0:d4:62:98:c6:78:6a:28:
         66:27:86:f8:f7:b1:72:4f:e2:52:7a:76:09:10:58:b3:51:dd:
         45:a4:1e:e9:b8:c1:7b:78:c5:3e:5e:97:ea:9f:f7:02:36:e3:
         09:f7:a5:47:53:0a:59:37:75:cb:b2:ca:df:7f:2d:1d:7f:4c:
         6b:de:fd:14:14:59:1a:ff:44:1a:f2:f2:29:c0:e7:09:e3:60:
         c5:b9:7d:4f:d5:4d:25:8b:47:07:5c:df:ff:4f:17:45:56:41:
         5b:d0:dc:41:f4:1d:12:5d:cb:17:ce:9a:6a:ce:bf:be:31:d0:
         cf:db:71:63:09:2c:30:17:77:f7:13:93:8c:d6:55:ee:a6:fc:
         e2:2c:d2:5a:6a:4e:d5:f6:9e:7c:ec:b6:09:36:2b:0b:15:66:
         9f:aa:28:9e:dd:d5:1e:c7:25:82:7f:44:f9:aa:d2:21:9c:eb:
         b2:c4:24:37:24:04:d5:46:93:9d:fd:23:bd:f0:06:c7:5a:21:
         86:af:02:61:5b:36:61:60:f0:76:d2:7f:be:59:fd:58:49:d9:
         4d:6c:85:89:d2:99:0d:d6:b7:28:92:7e:d3:e3:05:a1:3b:a4:
         32:77:62:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsbkcVYf9zZ/v0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzkxMTU2YzctZmVlYy00ZThiLWFmOWYtNTkwMjM1OTcwMGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLpSFhMDOA7T7f+LXEZ0enAgYTjNk+q/nWd1
Zgj2KOGzJuJzmCYgY74JpmeBSEmSZaJhGRhzWuujHJ4LdFhT+6SzYeDTiDnPLmHt
f0uFhCdLxm1KQ2R7IDA5NM9fEN58awVASwIm4n/3rI4TD0ywUChdvga5FkWOhQX1
q62OjjO+AcMM/VjOoiAENzFrX2ZDryugS72oYpDDwM6Ek13CtdudUbvGwjB5uXOt
NSpOiVbZ38qrB6l/rmRq/0SrbCtco5ZtnJilscjey/hOSRMS1Cg+zoaxft5UbB0Z
u8Q+Grg2+w7Oyhu2ZAiMBI/F83BWGkaUQUjyoGv5j1kvdbTZxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5YAs+TOEigfYxyeycVjU3kPtNMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDYxYWUxOTAtZjFlOC0z
NmJhLTg2MWEtNDhkOGNjOGZhMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk4GyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEk8G1I9vPtYZvicgIhtYhmNmKLIyCgUEx/rlPCw1GKYxnhqKGYnhvj3
sXJP4lJ6dgkQWLNR3UWkHum4wXt4xT5el+qf9wI24wn3pUdTClk3dcuyyt9/LR1/
TGve/RQUWRr/RBry8inA5wnjYMW5fU/VTSWLRwdc3/9PF0VWQVvQ3EH0HRJdyxfO
mmrOv74x0M/bcWMJLDAXd/cTk4zWVe6m/OIs0lpqTtX2nnzstgk2KwsVZp+qKJ7d
1R7HJYJ/RPmq0iGc67LEJDckBNVGk539I73wBsdaIYavAmFbNmFg8HbSf75Z/VhJ
2U1shYnSmQ3WtyiSftPjBaE7pDJ3Yis=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:03:21 2025 by rpki-client