Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e64bd9cd-b61b-3e71-b492-6eaf0b59c064.roa
File:                     e64bd9cd-b61b-3e71-b492-6eaf0b59c064.roa (raw, json)
Hash identifier:          rZ0rSp6uhlaDEI2lltcJbungeYPmy0k3hCUHODfms1c=
Subject key identifier:   58:F2:1C:A1:72:C6:C2:A3:3C:B5:40:BA:E2:53:12:15:33:B1:61:7B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858446BFE6556086268DE1C3866C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e64bd9cd-b61b-3e71-b492-6eaf0b59c064.roa
Signing time:             Tue 02 Jan 2024 17:23:12 +0000
ROA not before:           Tue 02 Jan 2024 17:23:12 +0000
ROA not after:            Mon 01 Apr 2024 16:23:12 +0000
asID:                     5
IP address blocks:        66.32.80.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:6b:fe:65:56:08:62:68:de:1c:38:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan  2 17:23:12 2024 GMT
            Not After : Apr  1 16:23:12 2024 GMT
        Subject: CN=3b18ab9c-31ff-4611-817b-c066c1fcaac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:31:27:3c:bc:9b:76:a0:17:18:83:dd:d3:
                    09:36:49:3f:2e:69:5a:e5:ce:7e:b1:71:b6:df:74:
                    1d:f4:03:54:9f:6f:49:3b:ba:ea:ef:d8:d4:9f:30:
                    8c:5d:54:52:ba:e5:5b:31:b1:79:f3:83:d1:e5:0e:
                    b3:7a:83:6b:64:4c:ad:b7:3a:cc:a9:96:44:1a:81:
                    45:f5:52:3a:e4:c3:b5:82:dd:c9:ef:45:dd:41:9f:
                    35:f8:c5:bc:45:6a:b6:89:92:01:d8:92:69:aa:bb:
                    35:1a:c5:f7:12:f0:a4:3e:82:db:0a:f6:43:63:ee:
                    5b:fb:b6:05:2a:d0:c0:1d:c7:1c:df:30:de:fb:1e:
                    45:29:aa:50:60:1e:f7:04:6e:03:02:d1:55:20:4d:
                    40:0d:d2:bf:59:75:7c:1f:34:1c:e3:7d:4e:39:a9:
                    e6:86:81:50:86:a7:09:5a:fe:9d:b5:ff:67:ab:ab:
                    f6:83:04:a3:82:ee:b8:0f:f8:57:55:2a:61:4b:ed:
                    87:3c:25:97:8c:99:f5:2e:79:b7:f4:7a:74:87:67:
                    38:40:17:26:10:6e:26:d2:8a:e2:09:23:72:0d:9c:
                    e1:12:6a:37:f0:dd:ff:6c:a5:6f:78:d4:e7:dc:75:
                    12:b5:7b:46:c2:b8:3a:15:85:7c:87:43:b1:a5:99:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F2:1C:A1:72:C6:C2:A3:3C:B5:40:BA:E2:53:12:15:33:B1:61:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e64bd9cd-b61b-3e71-b492-6eaf0b59c064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.32.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:ec:01:c4:20:00:a8:31:97:e7:50:61:5b:9d:9c:3a:6d:
         2a:a0:d6:57:71:b7:f4:f2:e6:c3:63:e9:51:ec:ce:12:14:61:
         89:16:a0:99:f5:19:b1:8f:af:ea:7b:6c:4f:42:89:bd:ae:75:
         46:48:0b:1e:7b:a3:1d:2a:53:95:72:c5:94:69:08:29:81:5d:
         15:0e:2f:79:09:c1:cb:74:37:1a:f2:1f:bd:bb:71:d4:3a:d5:
         28:36:7e:5e:5c:a2:50:f7:a3:39:f8:e0:91:f1:89:ca:9d:43:
         af:5c:0e:34:c3:20:e7:26:cf:67:04:a2:a9:c9:d5:95:77:ad:
         36:dd:10:3b:16:53:40:71:48:9c:a4:dc:32:76:40:e1:16:f8:
         e0:ef:18:79:98:d0:4a:eb:8d:1f:ce:67:55:6b:8d:be:9f:a3:
         7c:f9:9a:8a:e5:a5:5c:bb:50:c0:74:78:0a:89:7b:1b:3c:4b:
         45:84:a1:6a:ba:d7:0c:91:d0:2f:f9:3f:9f:4c:90:a3:99:1f:
         3c:b1:2e:4b:52:91:d7:b7:44:fc:16:01:18:b4:59:d4:da:bb:
         71:c1:04:ae:e0:5f:1a:2b:06:b2:78:59:77:a6:b5:a3:0c:26:
         de:80:e4:96:71:0e:b4:90:6c:26:ff:a7:e9:c1:7d:e2:3b:28:
         74:9a:4f:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERr/mVWCGJo3hw4ZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDEwMjE3MjMxMloXDTI0MDQwMTE2MjMxMlowLzEtMCsGA1UEAxMk
M2IxOGFiOWMtMzFmZi00NjExLTgxN2ItYzA2NmMxZmNhYWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxAxJzy8m3agFxiD3dMJNkk/Lmla5c5+sXG2
33Qd9ANUn29JO7rq79jUnzCMXVRSuuVbMbF584PR5Q6zeoNrZEyttzrMqZZEGoFF
9VI65MO1gt3J70XdQZ81+MW8RWq2iZIB2JJpqrs1GsX3EvCkPoLbCvZDY+5b+7YF
KtDAHccc3zDe+x5FKapQYB73BG4DAtFVIE1ADdK/WXV8HzQc431OOanmhoFQhqcJ
Wv6dtf9nq6v2gwSjgu64D/hXVSphS+2HPCWXjJn1Lnm39Hp0h2c4QBcmEG4m0ori
CSNyDZzhEmo38N3/bKVveNTn3HUStXtGwrg6FYV8h0OxpZnCRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjyHKFyxsKjPLVAuuJTEhUzsWF7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY0YmQ5Y2QtYjYxYi0z
ZTcxLWI0OTItNmVhZjBiNTljMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9A7AHEIACoMZfnUGFbnZw6bSqg1ldxt/Ty5sNj6VHszhIUYYkWoJn1
GbGPr+p7bE9Cib2udUZICx57ox0qU5VyxZRpCCmBXRUOL3kJwct0NxryH727cdQ6
1Sg2fl5colD3ozn44JHxicqdQ69cDjTDIOcmz2cEoqnJ1ZV3rTbdEDsWU0BxSJyk
3DJ2QOEW+ODvGHmY0ErrjR/OZ1Vrjb6fo3z5morlpVy7UMB0eAqJexs8S0WEoWq6
1wyR0C/5P59MkKOZHzyxLktSkde3RPwWARi0WdTau3HBBK7gXxorBrJ4WXemtaMM
Jt6A5JZxDrSQbCb/p+nBfeI7KHSaT14=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:58 2025 by rpki-client