Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09838750-3fcc-34f8-90ac-62935c75c587.roa
File:                     09838750-3fcc-34f8-90ac-62935c75c587.roa (raw, json)
Hash identifier:          6EhLw+io+Yao9+RxKYi1US8+CxGkMuPf149AzHPcrEE=
Subject key identifier:   68:8E:EA:B4:B0:78:B6:A1:36:AA:84:6D:26:56:6C:65:70:2D:91:6E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E4757D96A08C93E727E480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09838750-3fcc-34f8-90ac-62935c75c587.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     27338
IP address blocks:        209.192.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e4:75:7d:96:a0:8c:93:e7:27:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=4e0be4f3-a8a3-4ddf-85f8-489741c569f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:62:d3:a0:7a:11:5d:db:b9:25:da:d7:f1:
                    d7:2d:f2:f1:82:26:e4:f4:be:14:2b:7b:41:4e:f8:
                    fc:d9:42:ec:74:0d:bf:a7:ff:d1:99:d6:bc:36:98:
                    c5:fe:a2:58:99:54:d6:e8:21:a9:e8:ff:ce:91:36:
                    73:2e:bf:d4:25:0b:f2:19:8a:13:84:5e:d5:a1:cc:
                    a1:85:0c:2e:fd:f9:ad:2e:b4:23:8d:1b:0c:28:47:
                    50:3c:79:c5:7f:1c:ce:ef:cd:da:1a:4f:98:dd:fb:
                    df:bd:fb:94:dc:19:07:60:6f:a8:09:3e:2e:32:e5:
                    55:a8:bd:99:ba:38:23:73:9c:0d:57:64:f1:62:1d:
                    b9:ed:e8:8c:84:56:fd:49:15:bd:d9:7a:5f:84:3c:
                    6c:73:34:33:83:14:c4:6b:75:aa:5a:63:e7:1f:b2:
                    c3:5f:32:3f:94:fc:a4:eb:0a:90:f4:4f:b4:cc:12:
                    28:3c:14:14:9d:02:d7:47:d0:09:e1:9e:90:fb:39:
                    37:5f:6c:fa:42:42:ca:ac:05:ee:5b:8e:51:81:6d:
                    f3:99:67:88:d8:fa:dd:fd:fd:4d:76:5b:35:a5:f6:
                    90:d6:88:93:20:dd:1f:a7:9a:64:e9:b5:6d:fe:b9:
                    56:f3:1c:21:ac:06:9f:39:16:94:93:e7:44:38:8d:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:EA:B4:B0:78:B6:A1:36:AA:84:6D:26:56:6C:65:70:2D:91:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09838750-3fcc-34f8-90ac-62935c75c587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.192.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:26:91:a9:27:98:89:d2:57:db:c8:06:1a:d9:ae:48:4f:b1:
         1c:38:3a:40:42:48:53:53:83:94:5e:60:40:fa:b5:d2:e8:92:
         d7:58:c2:8d:0d:76:d6:b5:a0:6c:19:21:b0:0a:16:6f:09:07:
         25:96:c0:38:c6:33:b2:43:6f:8c:30:a6:2b:bd:cc:cc:39:db:
         20:0d:cd:fa:0f:56:3e:17:75:c9:ee:42:dd:7b:cc:63:61:d7:
         e1:d6:5c:01:b0:95:eb:37:d6:0f:45:dc:3f:36:05:c0:c4:74:
         29:5c:6c:cf:96:19:9b:73:07:4a:72:21:f3:69:7a:d8:54:7a:
         9f:53:3a:d5:33:51:45:ed:89:e1:50:80:27:1b:ae:b5:8d:9e:
         76:7a:b1:1a:94:d8:0a:5e:ca:c4:b4:0e:c2:90:f6:76:ed:5c:
         69:1d:bb:5d:ee:bb:ec:39:de:25:ee:8c:f7:e8:a7:2b:c2:b3:
         4a:e3:8b:7f:14:23:3c:dc:a0:a0:04:0f:7a:3f:13:40:d6:62:
         0a:1e:07:88:63:49:01:7a:fe:b4:85:85:f9:af:e3:03:99:9a:
         94:49:1d:17:af:e1:bd:09:94:fb:a4:7d:f1:1a:6a:e3:f3:b6:
         e0:d8:1a:f0:3b:20:f5:d1:58:ad:88:6f:5c:4a:f5:45:5b:18:
         60:47:5e:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1X5HV9lqCMk+cn5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyNDA0MDAwMFoXDTI4MDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NGUwYmU0ZjMtYThhMy00ZGRmLTg1ZjgtNDg5NzQxYzU2OWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfBi06B6EV3buSXa1/HXLfLxgibk9L4UK3tB
Tvj82ULsdA2/p//Rmda8NpjF/qJYmVTW6CGp6P/OkTZzLr/UJQvyGYoThF7Vocyh
hQwu/fmtLrQjjRsMKEdQPHnFfxzO783aGk+Y3fvfvfuU3BkHYG+oCT4uMuVVqL2Z
ujgjc5wNV2TxYh257eiMhFb9SRW92XpfhDxsczQzgxTEa3WqWmPnH7LDXzI/lPyk
6wqQ9E+0zBIoPBQUnQLXR9AJ4Z6Q+zk3X2z6QkLKrAXuW45RgW3zmWeI2Prd/f1N
dls1pfaQ1oiTIN0fp5pk6bVt/rlW8xwhrAafORaUk+dEOI1S4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGiO6rSweLahNqqEbSZWbGVwLZFuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDk4Mzg3NTAtM2ZjYy0z
NGY4LTkwYWMtNjI5MzVjNzVjNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgmkaknmInSV9vIBhrZrkhPsRw4OkBCSFNTg5ReYED6tdLoktdYwo0N
dta1oGwZIbAKFm8JByWWwDjGM7JDb4wwpiu9zMw52yANzfoPVj4XdcnuQt17zGNh
1+HWXAGwles31g9F3D82BcDEdClcbM+WGZtzB0pyIfNpethUep9TOtUzUUXtieFQ
gCcbrrWNnnZ6sRqU2ApeysS0DsKQ9nbtXGkdu13uu+w53iXujPfopyvCs0rji38U
IzzcoKAED3o/E0DWYgoeB4hjSQF6/rSFhfmv4wOZmpRJHRev4b0JlPukffEaauPz
tuDYGvA7IPXRWK2Ib1xK9UVbGGBHXiY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:18 2025 by rpki-client