Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/19b7c7cd-58e3-3c9e-bf71-b59ca2c837ea.roa
File:                     19b7c7cd-58e3-3c9e-bf71-b59ca2c837ea.roa (raw, json)
Hash identifier:          SihezBJALV8dduq6YcLaX7YyMU9sowT8JujN6Acqz8w=
Subject key identifier:   36:2D:89:D8:B4:B8:95:22:F5:8E:D6:5B:C2:63:50:00:E3:5E:D1:07
Certificate issuer:       /CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
Certificate serial:       010D0C9F4328584913AC1A51021CCCE857F045D0
Authority key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/19b7c7cd-58e3-3c9e-bf71-b59ca2c837ea.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        23.247.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:1a:51:02:1c:cc:e8:57:f0:45:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=c8ba1e3e-1ccd-45b7-b1ee-62fb7c1ee94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:42:2a:65:f7:e6:4b:49:df:52:c3:e7:0f:8e:
                    ca:d0:61:0a:55:48:bd:31:3e:fa:63:cd:8e:0a:b9:
                    30:83:22:17:73:1a:d3:5e:08:13:ea:68:c5:ba:86:
                    fe:81:52:51:74:a5:b6:2a:e8:cf:cd:b1:23:60:8a:
                    d4:bf:6d:11:3d:81:bb:3a:e1:f3:ba:7c:2c:7e:3a:
                    5f:71:1a:fe:85:c3:73:2b:4b:80:23:ca:b7:e3:1b:
                    b5:9e:e0:9b:05:44:37:a1:c0:3e:b6:fc:12:02:a7:
                    9d:14:c8:d0:f1:8b:15:74:94:7d:c9:e2:8b:bb:d0:
                    a8:87:fe:36:c4:c8:71:ce:6e:23:76:db:df:a4:7c:
                    15:a0:c8:92:34:2c:c7:03:9e:5e:c5:bc:e9:a4:4c:
                    ff:8c:5f:3f:b1:74:a1:93:2b:2f:d0:1c:99:e3:cc:
                    0d:30:5a:c3:94:de:32:2f:b8:47:b5:63:b1:b3:e1:
                    ce:41:b0:5e:ac:78:8f:2f:2d:4d:73:4e:1e:be:f4:
                    0f:83:bd:8f:d5:70:e4:88:24:a2:7a:0b:68:37:93:
                    f4:0f:0d:a8:0d:81:8c:93:e7:48:60:56:2a:7f:41:
                    9a:7d:50:b2:9a:26:58:93:91:ad:73:a2:bd:da:8e:
                    23:c1:ee:52:4e:2f:30:27:91:a8:0a:cc:40:02:b2:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2D:89:D8:B4:B8:95:22:F5:8E:D6:5B:C2:63:50:00:E3:5E:D1:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/19b7c7cd-58e3-3c9e-bf71-b59ca2c837ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl

            X509v3 Authority Key Identifier:
                keyid:BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:30:4c:06:8b:f7:b7:94:f9:62:0e:bb:18:23:fc:90:3c:11:
         0a:d6:13:7c:a4:57:92:e4:f3:a6:b6:6a:73:ce:39:05:90:52:
         20:be:fe:20:e0:9f:1f:62:11:46:a1:6a:83:24:9a:04:3c:53:
         56:d1:40:39:7e:06:3e:33:42:a0:18:87:ab:7b:7e:13:b7:b4:
         47:f9:4d:1d:44:ed:7e:3a:08:a3:bd:73:85:3f:02:01:b4:9d:
         cb:41:77:9a:eb:5d:25:20:a2:8a:1f:9e:95:99:9d:64:2d:18:
         8e:b5:43:00:09:08:b7:e4:d2:1e:6c:ca:8f:11:c2:11:f7:a7:
         6a:90:a3:7f:57:c7:7c:6d:63:01:4a:8a:5b:a2:a2:a7:97:2a:
         75:f5:b7:65:d5:ff:05:0f:ac:15:38:74:a1:fc:ce:93:28:b8:
         33:64:2c:93:af:ad:ce:20:4c:e8:a3:c1:3a:a6:79:75:4f:2a:
         76:db:08:4d:9c:35:92:13:e7:5e:38:45:1d:2f:a5:cb:88:bc:
         1b:83:4b:01:76:af:f7:a2:4f:1d:16:5a:f7:bd:88:bf:32:5f:
         31:c9:b6:56:79:49:7f:e7:1f:d5:12:d2:6d:dc:ae:9e:3d:15:
         75:a2:97:19:21:21:f9:fe:d9:69:aa:f2:d2:fd:b2:0b:2e:d0:
         df:05:53:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBpRAhzM6FfwRdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRjN2YzMGUtNzBiZS00ZjhjLWJjOGYtNjBiODVkMWI2
OGY3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YzhiYTFlM2UtMWNjZC00NWI3LWIxZWUtNjJmYjdjMWVlOTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUIqZffmS0nfUsPnD47K0GEKVUi9MT76Y82O
CrkwgyIXcxrTXggT6mjFuob+gVJRdKW2KujPzbEjYIrUv20RPYG7OuHzunwsfjpf
cRr+hcNzK0uAI8q34xu1nuCbBUQ3ocA+tvwSAqedFMjQ8YsVdJR9yeKLu9Coh/42
xMhxzm4jdtvfpHwVoMiSNCzHA55exbzppEz/jF8/sXShkysv0ByZ48wNMFrDlN4y
L7hHtWOxs+HOQbBerHiPLy1Nc04evvQPg72P1XDkiCSiegtoN5P0Dw2oDYGMk+dI
YFYqf0GafVCymiZYk5Gtc6K92o4jwe5STi8wJ5GoCsxAArLHhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDYtidi0uJUi9Y7WW8JjUADjXtEHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3
ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQxYjY4ZjcvMTliN2M3Y2QtNThlMy0z
YzllLWJmNzEtYjU5Y2EyYzgzN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzRjN2YzMGUtNzBiZS00ZjhjLWJj
OGYtNjBiODVkMWI2OGY3Lzc0YzdmMzBlLTcwYmUtNGY4Yy1iYzhmLTYwYjg1ZDFi
NjhmNy5jcmwwHwYDVR0jBBgwFoAUvT8d3y7wTu8fXjVGgXxUE+Gl7UMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4
NWQxYjY4ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/egMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYwTAaL97eU+WIOuxgj/JA8EQrWE3ykV5Lk86a2anPOOQWQUiC+/iDg
nx9iEUahaoMkmgQ8U1bRQDl+Bj4zQqAYh6t7fhO3tEf5TR1E7X46CKO9c4U/AgG0
nctBd5rrXSUgooofnpWZnWQtGI61QwAJCLfk0h5syo8RwhH3p2qQo39Xx3xtYwFK
iluioqeXKnX1t2XV/wUPrBU4dKH8zpMouDNkLJOvrc4gTOijwTqmeXVPKnbbCE2c
NZIT5144RR0vpcuIvBuDSwF2r/eiTx0WWve9iL8yXzHJtlZ5SX/nH9US0m3crp49
FXWilxkhIfn+2Wmq8tL9sgsu0N8FU4I=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:59 2025 by rpki-client