Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c41de634-418b-3b51-99c8-1193ba4f1978.roa
File:                     c41de634-418b-3b51-99c8-1193ba4f1978.roa (raw, json)
Hash identifier:          brJlx6gkUiYY5Eq+KG0jIrNtAAwX3IoqxC7KXVfcGDU=
Subject key identifier:   2C:F8:91:20:6F:BF:37:26:27:27:E4:47:74:DC:65:53:0F:3D:70:1A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA2A26BC351118AAAA800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c41de634-418b-3b51-99c8-1193ba4f1978.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        136.0.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a2:a2:6b:c3:51:11:8a:aa:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=bf7867f9-afc7-4d83-b4e4-f4548abd7f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:1f:c1:64:c2:4f:36:31:25:f7:b6:07:e6:
                    7b:65:26:bd:f4:ff:d2:df:93:ca:46:11:d2:56:0c:
                    26:9b:d2:16:bf:71:78:a4:9d:61:56:5e:05:2e:8e:
                    50:d1:e0:4c:4a:7e:48:55:5a:15:2b:28:d5:0b:bc:
                    cf:1f:ee:86:1b:72:32:b7:e0:a1:45:c1:50:e0:d4:
                    80:8e:cf:fa:30:2b:43:de:2b:ff:bb:0c:60:37:c0:
                    2a:bd:38:a7:00:0a:71:f2:41:06:1f:d0:8a:64:ff:
                    3e:15:20:ad:6e:b5:00:bb:79:dc:98:d5:a6:8f:6c:
                    6a:34:35:2b:f1:2e:7c:62:28:a4:ec:30:2f:e3:52:
                    c0:94:a6:b4:52:ca:3b:97:85:04:79:9a:a6:6b:e1:
                    38:19:f5:7d:5a:7e:c2:a8:00:2e:d7:04:28:d8:6d:
                    98:a2:84:67:40:da:fa:91:a4:8e:42:a6:29:ef:3d:
                    75:d5:8e:55:20:fd:b7:c9:52:23:46:2d:53:9f:5e:
                    39:c0:a9:61:c3:02:1b:d4:d6:ec:84:93:1f:64:4a:
                    57:88:c3:cb:c9:76:01:5a:8b:1b:a3:01:9e:1f:d2:
                    13:2c:8b:72:d6:9c:85:15:86:c6:28:9d:e5:e8:9b:
                    85:bb:93:72:2c:a4:12:c2:5b:e6:fb:ad:50:10:93:
                    8c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F8:91:20:6F:BF:37:26:27:27:E4:47:74:DC:65:53:0F:3D:70:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c41de634-418b-3b51-99c8-1193ba4f1978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:84:e6:49:c7:c6:7c:44:79:b6:b4:61:0a:34:12:06:af:f2:
         17:07:f7:cd:98:6a:d5:0f:42:bc:45:19:49:f7:c4:58:0d:54:
         c3:ab:3e:6e:c6:3e:92:4f:23:76:84:54:69:b0:d9:4f:b7:63:
         0c:d2:96:19:e4:6f:83:06:ee:4a:cf:8b:ab:77:a5:55:1f:a8:
         8b:fd:f4:ae:5c:e6:d3:b1:7e:ef:36:b2:38:97:9a:ac:af:86:
         b8:b5:61:d8:61:7d:ab:cb:d5:a8:b4:04:56:ce:9c:26:58:c1:
         56:4e:90:31:69:81:85:5d:92:50:a8:ac:9e:f9:85:9c:79:94:
         2b:f3:92:ff:dd:53:30:fe:c4:c7:55:0d:09:17:14:0e:b1:a4:
         62:06:3a:75:27:21:72:70:fe:95:f4:d4:10:00:26:6e:92:e0:
         4b:fc:75:8d:cf:ca:b9:a7:59:4d:86:55:f5:4d:18:bf:c2:63:
         bb:74:9a:27:ea:05:1e:19:1c:e3:8e:86:8b:c4:9c:ca:95:bb:
         30:98:54:f8:8a:78:38:c0:fe:a4:f7:f3:22:22:28:75:31:52:
         19:98:47:6b:68:1b:90:f1:fa:20:21:0e:27:af:e4:86:b3:c3:
         d0:f3:40:23:d3:a2:19:43:82:e5:20:77:17:5e:46:04:9e:98:
         3f:9e:ca:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6Kia8NREYqqqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
YmY3ODY3ZjktYWZjNy00ZDgzLWI0ZTQtZjQ1NDhhYmQ3ZjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjkfwWTCTzYxJfe2B+Z7ZSa99P/S35PKRhHS
Vgwmm9IWv3F4pJ1hVl4FLo5Q0eBMSn5IVVoVKyjVC7zPH+6GG3Iyt+ChRcFQ4NSA
js/6MCtD3iv/uwxgN8AqvTinAApx8kEGH9CKZP8+FSCtbrUAu3ncmNWmj2xqNDUr
8S58Yiik7DAv41LAlKa0Uso7l4UEeZqma+E4GfV9Wn7CqAAu1wQo2G2YooRnQNr6
kaSOQqYp7z111Y5VIP23yVIjRi1Tn145wKlhwwIb1NbshJMfZEpXiMPLyXYBWosb
owGeH9ITLIty1pyFFYbGKJ3l6JuFu5NyLKQSwlvm+61QEJOMmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCz4kSBvvzcmJyfkR3TcZVMPPXAaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzQxZGU2MzQtNDE4Yi0z
YjUxLTk5YzgtMTE5M2JhNGYxOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqE5knHxnxEeba0YQo0Egav8hcH982YatUPQrxFGUn3xFgNVMOrPm7G
PpJPI3aEVGmw2U+3YwzSlhnkb4MG7krPi6t3pVUfqIv99K5c5tOxfu82sjiXmqyv
hri1YdhhfavL1ai0BFbOnCZYwVZOkDFpgYVdklCorJ75hZx5lCvzkv/dUzD+xMdV
DQkXFA6xpGIGOnUnIXJw/pX01BAAJm6S4Ev8dY3PyrmnWU2GVfVNGL/CY7t0mifq
BR4ZHOOOhovEnMqVuzCYVPiKeDjA/qT38yIiKHUxUhmYR2toG5Dx+iAhDiev5Iaz
w9DzQCPTohlDguUgdxdeRgSemD+eyjA=
-----END CERTIFICATE-----