Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa
File:                     6757d0ec-3da9-362b-964a-6f6259402d74.roa (raw, json)
Hash identifier:          D9FgBH6DzIz4qI7FJagNX98D8m5ZD9oRfQEsd9G57ck=
Subject key identifier:   66:51:19:0F:AA:30:D0:A1:3C:61:4A:20:2C:15:4A:4C:19:00:A0:92
Certificate issuer:       /CN=41d819be-21e8-4d68-8993-33ab237e51ae
Certificate serial:       010D0C9F432858490F7BFC2375943031379FF1A0
Authority key identifier: BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     395324
IP address blocks:        104.219.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:fc:23:75:94:30:31:37:9f:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d819be-21e8-4d68-8993-33ab237e51ae
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=2ded44d7-9913-48ee-b06f-efc716490591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:94:c3:2f:39:26:0a:7e:8f:f5:cf:b5:f7:
                    ac:26:07:0c:84:b1:bb:7c:0e:20:18:10:14:ee:37:
                    c9:29:da:e1:70:50:f1:9d:80:cc:29:50:79:e3:ae:
                    09:22:5f:cc:4c:0d:c9:93:bd:8f:a4:96:2d:20:f3:
                    e7:85:06:2a:ab:5a:da:8e:0f:60:fe:27:da:d2:f7:
                    1c:58:9d:cc:9b:a9:f0:26:35:41:1d:a9:d4:6f:d5:
                    1c:6a:22:c9:67:2c:93:6a:8d:99:ee:92:32:50:11:
                    01:a9:1f:6f:f6:47:1f:d8:5e:d1:4c:d9:54:99:88:
                    88:7c:38:06:98:39:12:32:da:88:cf:d4:1b:65:4b:
                    1b:75:a0:a6:02:04:5f:d6:d0:3f:8f:e7:d6:61:76:
                    67:65:b4:88:46:f9:a8:89:82:e0:5b:21:b3:b6:83:
                    f8:40:ff:a3:1d:2d:6d:8f:a9:a0:e2:58:7f:b9:89:
                    74:19:ab:42:af:7f:47:74:21:f7:8d:9f:24:0d:7a:
                    1e:c0:47:78:f7:30:c4:47:0f:5b:81:96:7d:29:14:
                    a3:09:93:51:cf:cd:13:62:73:10:da:8a:c9:d5:92:
                    78:08:1b:77:20:f4:a3:1c:43:e5:0c:d9:69:56:24:
                    cb:ea:1b:4c:e4:7d:aa:c6:2a:41:75:c8:f6:45:26:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:51:19:0F:AA:30:D0:A1:3C:61:4A:20:2C:15:4A:4C:19:00:A0:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl

            X509v3 Authority Key Identifier:
                keyid:BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:60:f0:09:51:db:a0:e7:91:e5:5f:78:37:a7:2a:6c:ef:db:
         f9:55:b0:cb:bb:29:0f:f6:fa:24:1e:8d:cc:85:0f:2b:33:7d:
         f2:c6:f3:b2:af:d8:0e:e2:e6:da:db:61:90:70:ae:75:94:5a:
         04:d4:95:6c:ff:83:5d:f9:2c:44:c3:d1:31:ac:0c:0c:10:d3:
         f3:17:96:77:fb:29:ae:ce:30:08:be:10:79:64:7c:f1:1d:f4:
         31:0c:c4:fb:51:32:2b:e5:a6:c5:e1:2d:79:c3:69:a5:bc:32:
         20:0d:eb:2f:3a:fc:32:75:74:2c:af:c2:65:59:db:d4:37:32:
         72:1f:87:60:57:3a:3e:cc:fa:d7:f3:c3:71:f4:eb:a4:2f:ae:
         7c:05:83:d4:8b:d0:e7:2e:d4:c2:36:91:4a:ac:d1:4f:46:c7:
         c0:f8:ec:23:2e:80:c9:3f:ca:ce:b9:0a:0e:9c:d0:bd:29:43:
         c6:e0:5d:8a:56:8a:12:a1:5a:92:a4:b7:e9:93:12:d3:b1:1c:
         2e:5e:f6:95:3d:b9:67:64:94:c9:79:e4:f8:81:f1:42:ed:cc:
         51:9e:3f:46:cb:c7:1a:c1:a4:ce:6a:e9:07:86:18:66:07:90:
         24:5a:17:d5:16:16:1c:93:76:dd:6a:0c:45:04:1f:e8:53:88:
         9f:c6:f1:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/wjdZQwMTef8aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkODE5YmUtMjFlOC00ZDY4LTg5OTMtMzNhYjIzN2U1
MWFlMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk
MmRlZDQ0ZDctOTkxMy00OGVlLWIwNmYtZWZjNzE2NDkwNTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNWUwy85Jgp+j/XPtfesJgcMhLG7fA4gGBAU
7jfJKdrhcFDxnYDMKVB5464JIl/MTA3Jk72PpJYtIPPnhQYqq1rajg9g/ifa0vcc
WJ3Mm6nwJjVBHanUb9UcaiLJZyyTao2Z7pIyUBEBqR9v9kcf2F7RTNlUmYiIfDgG
mDkSMtqIz9QbZUsbdaCmAgRf1tA/j+fWYXZnZbSIRvmoiYLgWyGztoP4QP+jHS1t
j6mg4lh/uYl0GatCr39HdCH3jZ8kDXoewEd49zDERw9bgZZ9KRSjCZNRz80TYnMQ
2orJ1ZJ4CBt3IPSjHEPlDNlpViTL6htM5H2qxipBdcj2RSbGVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZRGQ+qMNChPGFKICwVSkwZAKCSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MWQ4
MTliZS0yMWU4LTRkNjgtODk5My0zM2FiMjM3ZTUxYWUvNjc1N2QwZWMtM2RhOS0z
NjJiLTk2NGEtNmY2MjU5NDAyZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDFkODE5YmUtMjFlOC00ZDY4LTg5
OTMtMzNhYjIzN2U1MWFlLzQxZDgxOWJlLTIxZTgtNGQ2OC04OTkzLTMzYWIyMzdl
NTFhZS5jcmwwHwYDVR0jBBgwFoAUv/c82cpKMsf/C/3z5VQQQjzIl2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MWQ4MTliZS0yMWU4LTRkNjgtODk5My0zM2Fi
MjM3ZTUxYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALFg8AlR26DnkeVfeDenKmzv2/lVsMu7KQ/2+iQejcyFDyszffLG87Kv
2A7i5trbYZBwrnWUWgTUlWz/g135LETD0TGsDAwQ0/MXlnf7Ka7OMAi+EHlkfPEd
9DEMxPtRMivlpsXhLXnDaaW8MiAN6y86/DJ1dCyvwmVZ29Q3MnIfh2BXOj7M+tfz
w3H066QvrnwFg9SL0Ocu1MI2kUqs0U9Gx8D47CMugMk/ys65Cg6c0L0pQ8bgXYpW
ihKhWpKkt+mTEtOxHC5e9pU9uWdklMl55PiB8ULtzFGeP0bLxxrBpM5q6QeGGGYH
kCRaF9UWFhyTdt1qDEUEH+hTiJ/G8aE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:27 2025 by rpki-client