Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa
File:                     8601d6b0-277f-3107-bcc4-c8b1dee37989.roa (raw, json)
Hash identifier:          tObMqD+hmbXnXecDr+z3Fucz7WWPRk5cnVkeTlrBW0s=
Subject key identifier:   FD:43:E2:F1:6A:12:00:5E:66:1E:ED:6F:36:F8:78:0E:F3:FA:47:5A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E00682F32B7D4A27FA897800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     396560
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:82:f3:2b:7d:4a:27:fa:89:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=7daa2f2a-fddf-43b3-bd6e-7495ebbbfb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:6e:f6:a7:b9:5b:45:d3:fb:87:f8:00:9e:
                    69:c3:0e:73:80:22:e9:97:ec:50:4e:43:34:13:1a:
                    ff:68:6b:56:11:2a:d5:c4:11:4b:24:06:fa:d8:ae:
                    64:6e:cd:83:73:f1:a8:1b:63:05:34:af:f6:b3:e4:
                    6d:af:76:ad:6e:2a:63:41:fb:b5:8b:8e:db:dc:0c:
                    3b:a4:80:da:c4:73:ef:e2:86:5e:9b:09:04:0a:8c:
                    02:4f:cb:ed:ce:59:db:90:68:6f:cd:bf:f6:f3:e3:
                    97:2a:8f:db:6a:ca:62:c5:c6:7e:e2:69:79:a1:3b:
                    0a:a9:85:64:cc:ab:03:a2:65:5e:ea:22:82:43:55:
                    e0:13:70:99:a2:1b:33:0f:74:26:70:f1:c0:a4:1a:
                    69:40:3e:4c:f8:64:1b:0c:c2:3c:9d:c9:98:84:1a:
                    25:33:1a:b2:2e:ca:f7:bd:b3:0d:71:c7:d2:a4:74:
                    db:14:8f:6c:5f:29:32:30:b8:60:a9:53:bd:5c:3b:
                    2c:86:fc:3f:9f:53:48:a9:f8:f3:ff:04:40:c6:9f:
                    02:e2:81:50:0f:46:d4:4b:bc:74:b6:25:a8:58:16:
                    a6:aa:a5:f1:b7:74:ac:a9:ba:9e:46:d8:86:9d:49:
                    bf:60:6e:b3:7e:85:d4:ca:30:4d:0e:b2:e9:60:32:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:E2:F1:6A:12:00:5E:66:1E:ED:6F:36:F8:78:0E:F3:FA:47:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:10:6f:e5:7c:29:55:64:c7:3d:8d:69:c4:51:10:3e:3d:31:
         b4:32:93:bb:03:85:59:65:b0:0b:04:62:c6:0d:b2:01:11:03:
         55:7c:86:02:cb:64:38:55:28:08:ce:1e:20:b3:36:6e:35:df:
         f1:eb:b1:d0:30:53:13:f4:02:43:e2:5d:04:74:b0:20:59:55:
         c1:6a:86:13:c7:9d:93:d6:8a:57:63:38:86:de:1b:36:f0:c7:
         2e:81:64:d3:9f:09:db:6b:15:7a:21:60:cb:d8:b9:e1:fc:df:
         e7:0d:7d:df:d7:1a:42:d0:82:6a:47:a0:10:57:ec:7f:61:20:
         ab:65:4f:45:37:13:7a:29:ff:4b:09:6d:60:af:0d:47:54:51:
         fe:f0:24:7e:56:05:d0:1c:80:ea:0a:fe:ec:23:4e:b6:b9:79:
         3c:58:f5:40:b3:27:21:a2:c4:45:ed:c3:95:51:48:39:01:46:
         58:3c:bd:ca:3f:c6:82:dc:18:4a:8d:70:09:0a:ac:d5:01:46:
         51:d8:a9:75:02:4f:aa:f9:9d:35:02:22:bf:92:c0:34:18:9f:
         8e:c4:e1:63:55:eb:1b:f6:65:5c:f0:2b:d8:a8:84:e0:b8:1e:
         ad:8b:31:53:aa:76:53:1e:a0:4d:6e:48:50:92:63:41:da:8a:
         86:46:36:57
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoLzK31KJ/qJeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
N2RhYTJmMmEtZmRkZi00M2IzLWJkNmUtNzQ5NWViYmJmYjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBhu9qe5W0XT+4f4AJ5pww5zgCLpl+xQTkM0
Exr/aGtWESrVxBFLJAb62K5kbs2Dc/GoG2MFNK/2s+Rtr3atbipjQfu1i47b3Aw7
pIDaxHPv4oZemwkECowCT8vtzlnbkGhvzb/28+OXKo/baspixcZ+4ml5oTsKqYVk
zKsDomVe6iKCQ1XgE3CZohszD3QmcPHApBppQD5M+GQbDMI8ncmYhBolMxqyLsr3
vbMNccfSpHTbFI9sXykyMLhgqVO9XDsshvw/n1NIqfjz/wRAxp8C4oFQD0bUS7x0
tiWoWBamqqXxt3SsqbqeRtiGnUm/YG6zfoXUyjBNDrLpYDKeJwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP1D4vFqEgBeZh7tbzb4eA7z+kdaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODYwMWQ2YjAtMjc3Zi0z
MTA3LWJjYzQtYzhiMWRlZTM3OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBzEG/lfClVZMc9jWnEURA+PTG0MpO7A4VZZbALBGLGDbIBEQNVfIYC
y2Q4VSgIzh4gszZuNd/x67HQMFMT9AJD4l0EdLAgWVXBaoYTx52T1opXYziG3hs2
8McugWTTnwnbaxV6IWDL2Lnh/N/nDX3f1xpC0IJqR6AQV+x/YSCrZU9FNxN6Kf9L
CW1grw1HVFH+8CR+VgXQHIDqCv7sI062uXk8WPVAsychosRF7cOVUUg5AUZYPL3K
P8aC3BhKjXAJCqzVAUZR2Kl1Ak+q+Z01AiK/ksA0GJ+OxOFjVesb9mVc8CvYqITg
uB6tizFTqnZTHqBNbkhQkmNB2oqGRjZX
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:17 2025 by rpki-client