Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/fee913eb-2250-3378-83ce-9b0ffcba5d6f.roa
File:                     fee913eb-2250-3378-83ce-9b0ffcba5d6f.roa (raw, json)
Hash identifier:          msAqvPyEH1bIFsuPFiP9+IVu9NqG1+gLrDUyZpEbbmg=
Subject key identifier:   10:EB:D1:79:BD:77:2C:9F:70:C5:A2:E6:02:AC:9E:40:2B:E4:25:27
Certificate issuer:       /CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
Certificate serial:       010D0C9F432858491246AD34984DEDB3D13A3000
Authority key identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/fee913eb-2250-3378-83ce-9b0ffcba5d6f.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     21978
IP address blocks:        74.116.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ad:34:98:4d:ed:b3:d1:3a:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=b1bda88e-1b9a-4ed0-8647-137d3d3d3e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:af:7e:c1:e6:9f:6f:e1:ca:64:ce:1f:4b:
                    75:e3:42:55:ac:68:99:df:75:3a:e7:ac:d3:0b:e7:
                    69:f6:dd:6a:3f:5e:72:3c:9c:c3:22:a3:e3:70:34:
                    8b:5e:66:75:42:07:28:0f:ea:57:fc:48:04:14:42:
                    94:18:02:9d:fd:09:fe:08:4f:ce:46:f9:6b:d9:da:
                    94:df:28:f2:58:2b:7e:34:e0:cf:67:31:1b:e2:4b:
                    93:a7:45:df:a1:65:6e:78:c8:5a:b0:39:90:97:b9:
                    12:05:eb:5d:38:2c:5c:95:9d:85:7d:07:7f:56:50:
                    9a:89:b8:40:2a:40:88:47:11:35:e1:81:1f:6a:b3:
                    27:00:5e:d7:b1:12:04:f7:fa:b3:5a:24:21:a4:e0:
                    cf:9b:f4:8d:6f:87:86:ee:0e:61:49:14:ed:a1:cc:
                    bb:db:a7:b7:23:d2:70:13:ab:cb:a3:45:84:65:42:
                    58:29:c3:17:e5:06:11:4f:5a:43:e5:cd:4b:3c:3e:
                    6a:f0:97:e3:99:10:61:56:38:a0:01:34:56:d6:a0:
                    ec:74:47:b3:f2:c5:13:99:51:0b:02:ad:af:5d:8b:
                    df:1e:b4:e7:7e:28:d7:35:27:5f:b6:e2:1a:bf:65:
                    db:46:e7:cc:f5:a2:3d:41:f0:90:ed:87:d2:a2:20:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EB:D1:79:BD:77:2C:9F:70:C5:A2:E6:02:AC:9E:40:2B:E4:25:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/fee913eb-2250-3378-83ce-9b0ffcba5d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl

            X509v3 Authority Key Identifier:
                keyid:E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:bc:e5:39:4e:3f:75:5a:09:0c:db:68:15:ec:48:ba:5a:d8:
         3d:aa:15:42:11:1c:b1:c8:05:76:93:2b:dc:dc:ef:ce:66:ad:
         36:cc:e2:3b:39:88:d5:e6:c9:21:41:71:98:ba:fa:3b:ff:f9:
         74:74:3d:b6:83:ae:f4:87:95:01:23:0d:c4:96:16:b8:7e:9f:
         ff:1a:59:8e:2b:b3:71:0d:a5:c2:54:ab:ac:f6:09:ee:92:6a:
         22:c3:83:7d:46:25:9f:b3:2d:3b:84:fb:0a:48:fb:78:f7:d7:
         82:0d:39:26:58:12:9d:f8:2f:dd:f9:8c:c3:19:82:94:f9:2e:
         ea:44:da:cf:a2:aa:2e:cf:5c:d8:bf:31:cb:62:af:2c:ce:42:
         12:95:d0:43:40:3b:67:e8:f5:b3:cb:42:37:41:04:f8:f5:dc:
         3d:13:88:a5:0c:e4:2c:4c:63:49:a3:8d:a4:4c:85:40:01:b5:
         64:b6:31:cf:31:ca:f3:a8:76:db:12:5a:87:7c:ab:3e:6c:cb:
         27:ee:7b:49:70:61:4e:92:bb:66:a1:5a:00:7e:2d:bf:37:de:
         c4:40:ae:4a:2d:77:55:20:db:1b:0c:c6:99:89:73:72:b5:ba:
         bb:f7:e5:cb:e3:05:f7:57:ad:68:b2:c4:56:54:5d:fd:5f:4e:
         fa:5a:d8:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRq00mE3ts9E6MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg4N2M4ZWEtZDVhYy00ZjU5LTk0Y2QtNWRlN2E1YzUx
NjAwMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
YjFiZGE4OGUtMWI5YS00ZWQwLTg2NDctMTM3ZDNkM2QzZTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDmvfsHmn2/hymTOH0t140JVrGiZ33U656zT
C+dp9t1qP15yPJzDIqPjcDSLXmZ1QgcoD+pX/EgEFEKUGAKd/Qn+CE/ORvlr2dqU
3yjyWCt+NODPZzEb4kuTp0XfoWVueMhasDmQl7kSBetdOCxclZ2FfQd/VlCaibhA
KkCIRxE14YEfarMnAF7XsRIE9/qzWiQhpODPm/SNb4eG7g5hSRTtocy726e3I9Jw
E6vLo0WEZUJYKcMX5QYRT1pD5c1LPD5q8JfjmRBhVjigATRW1qDsdEez8sUTmVEL
Aq2vXYvfHrTnfijXNSdftuIav2XbRufM9aI9QfCQ7YfSoiABRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDr0Xm9dyyfcMWi5gKsnkAr5CUnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODg3
YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3YTVjNTE2MDAvZmVlOTEzZWItMjI1MC0z
Mzc4LTgzY2UtOWIwZmZjYmE1ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg4N2M4ZWEtZDVhYy00ZjU5LTk0
Y2QtNWRlN2E1YzUxNjAwLzY4ODdjOGVhLWQ1YWMtNGY1OS05NGNkLTVkZTdhNWM1
MTYwMC5jcmwwHwYDVR0jBBgwFoAU4vJM+75XeR9VGBcYdJHcH0MyBxgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82ODg3YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3
YTVjNTE2MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIi85TlOP3VaCQzbaBXsSLpa2D2qFUIRHLHIBXaTK9zc785mrTbM4js5
iNXmySFBcZi6+jv/+XR0PbaDrvSHlQEjDcSWFrh+n/8aWY4rs3ENpcJUq6z2Ce6S
aiLDg31GJZ+zLTuE+wpI+3j314INOSZYEp34L935jMMZgpT5LupE2s+iqi7PXNi/
MctiryzOQhKV0ENAO2fo9bPLQjdBBPj13D0TiKUM5CxMY0mjjaRMhUABtWS2Mc8x
yvOodtsSWod8qz5syyfue0lwYU6Su2ahWgB+Lb833sRArkotd1Ug2xsMxpmJc3K1
urv35cvjBfdXrWiyxFZUXf1fTvpa2No=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:04 2025 by rpki-client