Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/0d0909e7-6d32-3d39-86f7-d73788e35b15.roa
File:                     0d0909e7-6d32-3d39-86f7-d73788e35b15.roa (raw, json)
Hash identifier:          XhHAvu3vmRbkDABOmJPR47DbUq+6tl+SmnHiPsCkl2k=
Subject key identifier:   95:56:9E:9B:06:A6:A4:DB:08:16:39:C7:46:19:D0:B5:F6:27:90:A3
Certificate issuer:       /CN=95437874-24a3-4971-a87b-95b645e257bb
Certificate serial:       010D0C9F43285848F4F6A5666891FFE16C4BEC20
Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/0d0909e7-6d32-3d39-86f7-d73788e35b15.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     36556
IP address blocks:        96.9.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:a5:66:68:91:ff:e1:6c:4b:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=888b8de0-41da-498d-a60e-4d9bf5a1bd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:66:18:fe:64:c2:59:cb:e4:30:29:fe:37:
                    82:0a:8e:ee:bb:59:44:8c:71:dc:d5:6b:7e:50:5b:
                    2b:dd:1a:dd:de:3f:0c:e7:c2:69:e0:7c:90:6c:60:
                    50:ca:66:b4:12:47:ff:4b:1b:2c:90:f8:d1:5b:ed:
                    2e:51:f6:d3:76:88:c6:2f:ab:7d:3c:69:e8:c5:44:
                    20:68:ad:96:9c:8c:91:08:d6:85:8c:f1:9c:df:84:
                    de:90:bb:11:03:e4:53:c6:b2:e8:45:ff:a8:12:4e:
                    7f:fe:b5:bb:eb:ef:01:9d:60:fb:59:0c:04:5b:59:
                    2f:45:79:90:04:b2:ae:dc:f7:02:ae:bc:67:d4:2a:
                    7e:01:e7:77:2e:ac:ad:57:e0:7b:dc:61:41:97:d0:
                    f0:09:12:ae:e5:2d:16:76:0c:63:6a:56:60:23:28:
                    a6:76:9a:82:0a:7c:0d:2a:10:fd:e5:c5:94:b8:4e:
                    6f:c3:37:0c:d6:ae:db:95:f2:a9:0d:28:45:3d:e6:
                    c9:6a:1d:96:30:98:44:58:7c:db:31:be:25:85:30:
                    b1:df:62:6b:43:b2:65:30:34:8a:5f:a7:de:2a:a4:
                    0c:8b:af:45:14:70:cf:1c:e1:d9:5c:96:36:ba:ac:
                    a6:ac:54:4d:60:0c:0c:3b:b8:2c:11:0a:2f:4b:1d:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:9E:9B:06:A6:A4:DB:08:16:39:C7:46:19:D0:B5:F6:27:90:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/0d0909e7-6d32-3d39-86f7-d73788e35b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl

            X509v3 Authority Key Identifier:
                keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ac:de:73:bb:3e:ed:79:6e:ab:90:c1:46:3d:77:18:3e:88:
         3a:0d:6b:8b:e7:72:cb:fd:93:37:f4:58:b4:a0:4f:fe:38:10:
         97:e7:68:23:24:70:b7:83:a1:9d:9b:d5:77:4d:18:bd:57:48:
         e0:c5:b8:33:83:8f:58:d3:e5:e8:57:5d:c6:c3:71:6a:9e:c4:
         00:f3:1b:d3:e7:1f:8f:6b:ac:ea:69:3d:11:44:1d:97:5e:88:
         b6:e1:80:4c:a6:e6:6b:0a:31:25:e9:54:81:dd:7c:04:5a:a1:
         67:70:3e:50:4f:ff:6f:95:c3:52:bc:58:f1:02:ca:50:3f:03:
         f0:15:4e:51:ea:f1:7b:13:7c:12:17:86:27:9b:a1:24:7b:19:
         3a:05:01:43:30:47:2c:ac:c5:2f:db:43:3a:4a:7c:89:85:47:
         3d:6c:a6:0f:6b:e2:fb:4c:52:8c:11:07:af:3f:5d:98:74:2c:
         b0:d2:c6:97:bb:0a:be:18:06:e5:34:ea:84:6b:55:69:33:18:
         d8:50:bc:83:34:2a:03:6e:55:f2:35:f8:13:99:a9:ca:9c:2d:
         14:fd:58:81:4e:67:20:f9:70:e5:db:d4:4f:8f:db:54:7e:03:
         e1:8c:42:98:17:aa:fe:bf:cd:25:70:78:3a:ae:b0:e5:72:d7:
         45:0c:a3:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qVmaJH/4WxL7CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU0Mzc4NzQtMjRhMy00OTcxLWE4N2ItOTViNjQ1ZTI1
N2JiMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ODg4YjhkZTAtNDFkYS00OThkLWE2MGUtNGQ5YmY1YTFiZDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6NmGP5kwlnL5DAp/jeCCo7uu1lEjHHc1Wt+
UFsr3Rrd3j8M58Jp4HyQbGBQyma0Ekf/SxsskPjRW+0uUfbTdojGL6t9PGnoxUQg
aK2WnIyRCNaFjPGc34TekLsRA+RTxrLoRf+oEk5//rW76+8BnWD7WQwEW1kvRXmQ
BLKu3PcCrrxn1Cp+Aed3LqytV+B73GFBl9DwCRKu5S0WdgxjalZgIyimdpqCCnwN
KhD95cWUuE5vwzcM1q7blfKpDShFPebJah2WMJhEWHzbMb4lhTCx32JrQ7JlMDSK
X6feKqQMi69FFHDPHOHZXJY2uqymrFRNYAwMO7gsEQovSx0fLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVWnpsGpqTbCBY5x0YZ0LX2J5CjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NTQz
Nzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVlMjU3YmIvMGQwOTA5ZTctNmQzMi0z
ZDM5LTg2ZjctZDczNzg4ZTM1YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTU0Mzc4NzQtMjRhMy00OTcxLWE4
N2ItOTViNjQ1ZTI1N2JiLzk1NDM3ODc0LTI0YTMtNDk3MS1hODdiLTk1YjY0NWUy
NTdiYi5jcmwwHwYDVR0jBBgwFoAUDZpYabwzwNGVnD0AuQA7uUOKTmkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2
NDVlMjU3YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYAlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACys3nO7Pu15bquQwUY9dxg+iDoNa4vncsv9kzf0WLSgT/44EJfnaCMk
cLeDoZ2b1XdNGL1XSODFuDODj1jT5ehXXcbDcWqexADzG9PnH49rrOppPRFEHZde
iLbhgEym5msKMSXpVIHdfARaoWdwPlBP/2+Vw1K8WPECylA/A/AVTlHq8XsTfBIX
hieboSR7GToFAUMwRyysxS/bQzpKfImFRz1spg9r4vtMUowRB68/XZh0LLDSxpe7
Cr4YBuU06oRrVWkzGNhQvIM0KgNuVfI1+BOZqcqcLRT9WIFOZyD5cOXb1E+P21R+
A+GMQpgXqv6/zSVweDqusOVy10UMo5E=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:37 2025 by rpki-client