Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/384f6058-27a4-3abd-bf9a-034ee27bc480.roa
File:                     384f6058-27a4-3abd-bf9a-034ee27bc480.roa (raw, json)
Hash identifier:          58hU+qRX4bzbDQ6lulI4PsGXZlYG9UOYuEWyn6Rg/to=
Subject key identifier:   06:4E:FD:AE:59:EA:07:2E:FF:B4:96:FA:C7:BC:1B:37:50:89:A5:ED
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848BFEBC6664204BAF15450C500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/384f6058-27a4-3abd-bf9a-034ee27bc480.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        157.5.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:c6:66:42:04:ba:f1:54:50:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=cc13cdb4-6684-487c-b09b-c0483f34ee22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:b9:5b:78:1d:de:0e:08:0a:3a:e1:2c:b8:
                    b4:bf:8d:5c:43:fb:74:ee:2e:e9:de:09:04:51:03:
                    a4:61:9b:0d:6b:00:fb:5e:6d:13:97:cc:dc:05:ac:
                    16:a0:80:f6:e1:b0:04:49:3d:51:8c:49:eb:ca:0c:
                    46:48:1b:6f:f1:78:18:9c:25:fb:a0:3d:cf:53:6e:
                    9d:4e:f6:08:da:a7:5d:db:f8:46:0d:c2:57:af:19:
                    5e:7e:6c:14:ac:fb:e9:70:fe:bf:e1:62:cd:56:0a:
                    ec:9d:f5:45:af:fe:c8:a1:c6:b3:7c:59:ff:71:b7:
                    8f:55:b3:9b:95:74:f7:b5:d9:05:ff:2b:0c:d3:d1:
                    7f:53:97:a0:e1:10:51:89:9d:3e:8b:48:eb:6f:a9:
                    7f:f2:ad:56:2e:b4:6c:6b:c9:c2:83:2b:0b:19:2c:
                    1a:d6:b5:72:5b:5f:9a:09:07:8b:71:7b:c9:e7:6f:
                    11:50:d6:5d:cd:9d:4a:2e:c6:9c:a2:d5:5d:c5:d1:
                    44:2f:77:72:4a:4e:17:3d:6a:5d:ad:c4:a1:74:cf:
                    70:83:a6:34:3b:b7:0c:c4:f9:17:18:50:62:a6:4c:
                    c9:4a:12:bb:a9:cb:ef:52:7a:60:d5:58:92:b3:59:
                    23:4e:77:05:e7:a4:d0:57:e2:67:4e:3c:7a:4b:e6:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4E:FD:AE:59:EA:07:2E:FF:B4:96:FA:C7:BC:1B:37:50:89:A5:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/384f6058-27a4-3abd-bf9a-034ee27bc480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:75:11:08:b1:67:ad:39:4c:1e:82:49:98:66:74:00:73:cd:
         98:06:cd:c3:7b:0d:28:68:f2:f4:27:ff:e9:a0:d5:4d:8a:f1:
         40:18:79:5a:0d:84:f9:9b:c6:32:5c:98:fe:0a:c5:76:8d:52:
         58:e6:8c:9b:c7:cc:a5:76:54:f5:fb:c8:02:be:9b:41:1f:32:
         d2:39:81:bf:d7:ef:52:81:17:8e:1d:6a:dd:3a:4c:6d:fa:06:
         27:78:f6:5e:8d:ce:62:e6:69:6c:aa:f7:fa:ab:2c:07:fd:8e:
         62:c0:37:87:04:22:42:ef:90:d4:40:07:da:f6:0d:54:25:81:
         69:3d:c9:6a:14:c2:2d:36:b0:4a:6a:71:de:61:2b:fa:ae:d8:
         9e:67:81:b3:23:17:ce:ff:a4:42:fb:29:d9:b6:62:11:3b:53:
         ca:68:d2:d8:e6:6b:1c:79:55:51:c7:38:4f:e4:ec:d6:fd:d4:
         14:64:f9:43:ff:68:ba:a7:e7:7c:e3:17:e5:66:09:9b:9e:a7:
         0d:77:b5:d8:55:e7:f9:ca:5b:e3:26:3a:11:9c:90:be:b1:28:
         52:b9:56:82:03:7d:59:29:6a:42:ad:3b:3e:7e:d1:3f:6a:be:
         35:16:bd:f3:9a:84:b2:72:cc:eb:76:cc:d0:bc:7b:78:80:40:
         88:45:a7:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68ZmQgS68VRQxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
Y2MxM2NkYjQtNjY4NC00ODdjLWIwOWItYzA0ODNmMzRlZTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEC5W3gd3g4ICjrhLLi0v41cQ/t07i7p3gkE
UQOkYZsNawD7Xm0Tl8zcBawWoID24bAEST1RjEnrygxGSBtv8XgYnCX7oD3PU26d
TvYI2qdd2/hGDcJXrxlefmwUrPvpcP6/4WLNVgrsnfVFr/7IocazfFn/cbePVbOb
lXT3tdkF/ysM09F/U5eg4RBRiZ0+i0jrb6l/8q1WLrRsa8nCgysLGSwa1rVyW1+a
CQeLcXvJ528RUNZdzZ1KLsacotVdxdFEL3dySk4XPWpdrcShdM9wg6Y0O7cMxPkX
GFBipkzJShK7qcvvUnpg1ViSs1kjTncF56TQV+JnTjx6S+bJbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZO/a5Z6gcu/7SW+se8GzdQiaXtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzg0ZjYwNTgtMjdhNC0z
YWJkLWJmOWEtMDM0ZWUyN2JjNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZ1EQixZ605TB6CSZhmdABzzZgGzcN7DSho8vQn/+mg1U2K8UAYeVoN
hPmbxjJcmP4KxXaNUljmjJvHzKV2VPX7yAK+m0EfMtI5gb/X71KBF44dat06TG36
Bid49l6NzmLmaWyq9/qrLAf9jmLAN4cEIkLvkNRAB9r2DVQlgWk9yWoUwi02sEpq
cd5hK/qu2J5ngbMjF87/pEL7Kdm2YhE7U8po0tjmaxx5VVHHOE/k7Nb91BRk+UP/
aLqn53zjF+VmCZuepw13tdhV5/nKW+MmOhGckL6xKFK5VoIDfVkpakKtOz5+0T9q
vjUWvfOahLJyzOt2zNC8e3iAQIhFp0U=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:47:20 2025 by rpki-client