Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8e9da152-06ea-3abb-8976-c5e092b58996.roa
File:                     8e9da152-06ea-3abb-8976-c5e092b58996.roa (raw, json)
Hash identifier:          NWDA7/0CYrOT65kRaiVI97mpwJmobMPzKmIzrEJ47WI=
Subject key identifier:   D5:75:DB:6A:2D:FF:BB:95:96:44:94:F4:91:E0:71:E9:9B:66:ED:91
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848BA5630664F4C52DDC1244A40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8e9da152-06ea-3abb-8976-c5e092b58996.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     53356
IP address blocks:        172.111.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:30:66:4f:4c:52:dd:c1:24:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=034b77a9-4648-4881-8b96-a4d5f5bb1e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c8:1d:be:77:2e:56:fb:93:b0:9b:5f:5b:a2:
                    b2:70:1d:c9:4b:09:25:98:3f:ef:c4:19:32:bf:4a:
                    24:0b:55:fb:a0:c2:c2:f8:9d:8a:7c:36:9b:69:40:
                    f5:8c:bc:1e:5c:47:89:1c:11:cd:3c:86:07:f6:46:
                    ba:11:dd:9e:dd:88:e0:cb:21:b0:aa:01:3f:0b:52:
                    25:b2:cd:9e:cb:3e:a3:ae:b9:83:9d:3a:4d:c0:ca:
                    54:8e:c4:f8:e9:17:a3:76:78:41:e6:28:c9:6a:14:
                    f1:62:dd:a9:3c:6e:08:7c:62:ed:6c:5e:da:dc:23:
                    6b:e7:82:3e:27:e4:35:9b:14:95:73:c9:e0:c9:c5:
                    dd:51:13:81:36:2e:a0:f5:12:65:f0:e7:17:89:db:
                    12:3b:ed:22:6f:d4:f8:77:88:5e:33:7b:31:74:47:
                    c3:8a:f4:6d:7a:96:7e:61:b0:05:ff:5f:31:6f:04:
                    71:fd:8e:df:40:5a:64:b7:4a:38:c5:b1:2d:5c:4d:
                    07:ff:13:29:09:78:ce:34:94:da:a6:c6:e4:71:0a:
                    5c:72:ff:46:da:c7:4d:79:82:d2:4d:4e:9b:d4:41:
                    06:e1:81:16:d5:5c:8d:3b:a6:1a:90:09:6e:5b:f8:
                    3d:b9:1a:6f:cc:fe:5f:ff:00:73:72:11:bc:0b:67:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:75:DB:6A:2D:FF:BB:95:96:44:94:F4:91:E0:71:E9:9B:66:ED:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8e9da152-06ea-3abb-8976-c5e092b58996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:51:b1:a4:e8:b1:a9:5c:7a:db:4d:04:5e:63:bb:13:28:42:
         0f:55:d4:75:36:2f:55:09:8a:fc:da:86:77:f5:40:bc:cc:70:
         06:2f:bb:32:4a:f7:5a:5f:56:56:a9:df:08:20:16:56:ad:3d:
         31:ad:b9:09:36:15:c7:b3:e8:9f:6a:1c:b3:b9:ca:d7:01:df:
         a0:3c:c8:35:94:22:f3:72:d5:bd:9e:93:28:27:db:d5:68:44:
         e0:41:bb:8f:8d:81:61:a6:fe:6e:7e:a4:22:2b:7b:69:1c:0e:
         67:33:1f:04:5b:61:ca:80:da:98:32:5e:8a:74:d1:21:bd:1e:
         8d:37:a8:12:e5:b7:c1:79:fe:a7:72:fa:43:17:66:54:9f:b0:
         7f:34:e7:08:a1:a1:a2:70:a6:08:61:2d:c2:4c:84:f0:25:ca:
         50:6b:50:ce:08:af:51:47:f9:d9:ff:b1:85:dd:d5:24:a4:07:
         9a:3e:0d:3e:ee:87:1c:fb:0e:f9:56:9c:03:14:68:0c:74:66:
         9b:5e:f4:a4:d9:9c:71:85:1d:ed:65:bb:25:3e:b8:4b:30:16:
         2a:a2:b9:ed:1c:ed:2d:42:7a:97:46:69:af:17:97:21:75:03:
         e9:c4:87:ff:47:34:a2:ec:59:7a:d7:f2:28:c6:ed:09:d7:e4:
         69:7d:1d:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VjBmT0xS3cEkSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk
MDM0Yjc3YTktNDY0OC00ODgxLThiOTYtYTRkNWY1YmIxZTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sgdvncuVvuTsJtfW6KycB3JSwklmD/vxBky
v0okC1X7oMLC+J2KfDabaUD1jLweXEeJHBHNPIYH9ka6Ed2e3YjgyyGwqgE/C1Il
ss2eyz6jrrmDnTpNwMpUjsT46RejdnhB5ijJahTxYt2pPG4IfGLtbF7a3CNr54I+
J+Q1mxSVc8ngycXdUROBNi6g9RJl8OcXidsSO+0ib9T4d4heM3sxdEfDivRtepZ+
YbAF/18xbwRx/Y7fQFpkt0o4xbEtXE0H/xMpCXjONJTapsbkcQpccv9G2sdNeYLS
TU6b1EEG4YEW1VyNO6YakAluW/g9uRpvzP5f/wBzchG8C2fAFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNV122ot/7uVlkSU9JHgcembZu2RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGU5ZGExNTItMDZlYS0z
YWJiLTg5NzYtYzVlMDkyYjU4OTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpRsaTosalcettNBF5juxMoQg9V1HU2L1UJivzahnf1QLzMcAYvuzJK
91pfVlap3wggFlatPTGtuQk2Fcez6J9qHLO5ytcB36A8yDWUIvNy1b2ekygn29Vo
ROBBu4+NgWGm/m5+pCIre2kcDmczHwRbYcqA2pgyXop00SG9Ho03qBLlt8F5/qdy
+kMXZlSfsH805wihoaJwpghhLcJMhPAlylBrUM4Ir1FH+dn/sYXd1SSkB5o+DT7u
hxz7DvlWnAMUaAx0Zpte9KTZnHGFHe1luyU+uEswFiqiue0c7S1CepdGaa8XlyF1
A+nEh/9HNKLsWXrX8ijG7QnX5Gl9HY4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:47 2025 by rpki-client