Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67fb6eac-c9e8-347c-9844-7abc9738ffc4.roa
File:                     67fb6eac-c9e8-347c-9844-7abc9738ffc4.roa (raw, json)
Hash identifier:          5tpxDOJ7EC3k/rlNfvs0HbwtxYnfxhnrEf3yAQ7NlSQ=
Subject key identifier:   DB:41:4F:3E:F7:19:6C:82:ED:2D:B2:0E:51:8A:9F:8C:1F:0F:10:47
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848E16BF134E183AF9381FCF000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67fb6eac-c9e8-347c-9844-7abc9738ffc4.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        66.16.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:f1:34:e1:83:af:93:81:fc:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=dbbeeeb5-4779-4af7-9551-847e006ecebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:29:22:34:23:6d:f3:e0:5c:4a:b3:d7:ac:
                    8b:d5:0a:a6:2b:09:e9:fa:cc:34:a9:ae:02:12:f3:
                    71:06:fc:54:84:73:3f:ad:6a:53:ed:b2:53:0f:2d:
                    20:69:cf:6e:0f:b7:cd:e5:cb:28:b4:c4:4e:04:a8:
                    fd:3a:0e:4a:50:0a:24:10:d7:52:47:85:30:24:8b:
                    f0:31:11:d9:a7:22:2e:5b:e9:f5:92:b6:a3:ff:85:
                    bf:9a:52:77:b6:94:82:8a:2a:e2:d0:9e:16:ba:4a:
                    f6:c0:41:02:ed:03:15:b8:81:37:cc:f4:19:05:41:
                    96:5c:22:85:f8:62:fa:09:8b:3c:83:3a:1c:e7:dd:
                    23:32:8a:f9:be:c6:26:82:2e:63:12:ac:ec:8a:54:
                    8a:a5:23:26:c4:35:29:bb:e6:e5:8b:aa:f0:1c:4d:
                    80:53:64:e2:32:46:e9:1f:28:28:b5:22:e2:29:0f:
                    33:5a:11:52:a2:c4:8e:37:76:55:5e:be:dd:cb:c8:
                    1f:8b:cf:b2:37:41:c6:8f:d3:1e:40:f7:30:6c:f3:
                    35:5f:a3:34:94:89:13:d3:62:e8:f0:7d:06:23:2c:
                    3f:54:3c:65:21:79:21:da:be:df:10:8c:d6:8b:a8:
                    ff:2e:9b:81:6c:17:f5:45:a9:ea:70:82:86:5c:0f:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:41:4F:3E:F7:19:6C:82:ED:2D:B2:0E:51:8A:9F:8C:1F:0F:10:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67fb6eac-c9e8-347c-9844-7abc9738ffc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.16.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e2:24:42:ec:77:4c:85:b2:f6:4d:a5:94:86:1b:24:47:bf:
         67:62:62:1c:4d:cf:0a:b9:16:82:5c:5b:43:9e:e4:21:2e:9c:
         7b:aa:da:8e:36:38:4f:9d:5d:d0:06:ba:2d:54:48:af:80:df:
         1d:36:73:45:6d:bb:dd:51:e5:c7:b9:8e:58:09:0c:63:80:73:
         a3:9a:9b:07:98:43:32:0b:05:99:3a:71:1b:63:73:71:67:60:
         ef:ef:7a:85:47:fb:0b:89:f8:da:77:44:0b:9d:96:20:41:85:
         f1:c9:90:d3:e4:91:63:b9:68:33:77:f3:99:3b:7d:0e:8e:4c:
         fc:65:1f:02:86:32:d5:28:45:eb:99:0e:70:46:9b:8c:d8:c2:
         23:8d:fc:ed:9c:c1:60:1d:8c:77:cd:ac:64:c4:6d:bd:6e:69:
         07:fb:e3:88:3d:73:55:e6:48:c2:0a:e0:0a:65:bd:5b:af:81:
         0f:24:68:88:ca:52:55:8a:2c:56:31:7a:61:4a:ad:83:ed:46:
         a3:c9:d9:d6:31:ed:20:d2:a1:a7:37:c5:20:7f:36:20:8d:49:
         d8:52:1f:78:58:c4:4f:29:29:5c:3f:f6:6b:98:55:47:27:5c:
         e5:61:8a:23:7a:a0:d7:36:e9:c6:9c:de:5e:46:f0:14:27:94:
         57:78:c4:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha/E04YOvk4H88AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGJiZWVlYjUtNDc3OS00YWY3LTk1NTEtODQ3ZTAwNmVjZWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouQpIjQjbfPgXEqz16yL1QqmKwnp+sw0qa4C
EvNxBvxUhHM/rWpT7bJTDy0gac9uD7fN5csotMROBKj9Og5KUAokENdSR4UwJIvw
MRHZpyIuW+n1kraj/4W/mlJ3tpSCiiri0J4Wukr2wEEC7QMVuIE3zPQZBUGWXCKF
+GL6CYs8gzoc590jMor5vsYmgi5jEqzsilSKpSMmxDUpu+bli6rwHE2AU2TiMkbp
HygotSLiKQ8zWhFSosSON3ZVXr7dy8gfi8+yN0HGj9MeQPcwbPM1X6M0lIkT02Lo
8H0GIyw/VDxlIXkh2r7fEIzWi6j/LpuBbBf1RanqcIKGXA/QTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtBTz73GWyC7S2yDlGKn4wfDxBHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjdmYjZlYWMtYzllOC0z
NDdjLTk4NDQtN2FiYzk3MzhmZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhDjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDiJELsd0yFsvZNpZSGGyRHv2diYhxNzwq5FoJcW0Oe5CEunHuq2o42
OE+dXdAGui1USK+A3x02c0Vtu91R5ce5jlgJDGOAc6OamweYQzILBZk6cRtjc3Fn
YO/veoVH+wuJ+Np3RAudliBBhfHJkNPkkWO5aDN385k7fQ6OTPxlHwKGMtUoReuZ
DnBGm4zYwiON/O2cwWAdjHfNrGTEbb1uaQf744g9c1XmSMIK4AplvVuvgQ8kaIjK
UlWKLFYxemFKrYPtRqPJ2dYx7SDSoac3xSB/NiCNSdhSH3hYxE8pKVw/9muYVUcn
XOVhiiN6oNc26cac3l5G8BQnlFd4xFA=
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:14:14 2025 by rpki-client