Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/b0ec175b-098d-3374-a654-a890d9f9f81f.roa
File:                     b0ec175b-098d-3374-a654-a890d9f9f81f.roa (raw, json)
Hash identifier:          n71hKmxuATnd4da/ZvQYy+y8N28ykSpaN4vkqgxyVkk=
Subject key identifier:   03:79:68:DB:02:D1:81:80:51:CA:9D:B6:AF:09:75:FC:7F:0A:1D:BB
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F43285848D641053A5CFD3C3283E08C80
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/b0ec175b-098d-3374-a654-a890d9f9f81f.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     21519
IP address blocks:        69.55.80.0/20 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:05:3a:5c:fd:3c:32:83:e0:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=0f371285-fc1c-4554-ac66-7554f74e02cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d8:d3:87:29:42:05:b5:58:7a:74:0b:c6:83:
                    9a:49:89:57:f9:4a:d9:8d:ec:da:26:db:6e:65:fa:
                    74:75:a9:16:57:3c:cf:d4:36:6b:4f:d6:ba:09:6c:
                    f2:c7:44:90:8b:54:b2:f0:b6:e3:c7:6c:ae:0a:1f:
                    c0:5e:92:95:7f:37:85:f4:af:ab:3b:39:64:f5:6a:
                    1b:e8:a4:0a:0b:ac:0d:7e:84:05:34:f5:dc:33:21:
                    59:92:62:6f:fd:84:6c:c8:d7:23:6c:a5:16:72:d5:
                    ef:f4:a7:5c:42:75:f9:ad:2b:b0:ab:d9:df:a0:f4:
                    13:54:4e:74:88:1b:37:b5:4f:1b:76:02:ed:9b:51:
                    ca:24:e4:8f:9c:7a:0b:81:46:44:c0:12:ad:67:bf:
                    99:46:53:ac:57:ce:fe:33:e6:d7:28:9d:0c:0f:ec:
                    60:87:25:5e:57:90:f1:d9:b7:ea:34:b7:24:19:03:
                    f5:a4:0b:b5:bf:90:08:f4:8a:f6:a2:ed:64:60:b1:
                    39:4f:17:ce:ba:7c:0f:97:42:6b:06:92:42:1f:d8:
                    81:92:52:b9:f6:f6:8f:16:a7:68:43:25:28:f0:7c:
                    c5:d2:9e:22:c5:fe:c0:fb:42:39:51:03:d7:91:b1:
                    b6:fd:5a:3e:9a:ac:ae:37:71:bf:6c:95:ae:98:26:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:79:68:DB:02:D1:81:80:51:CA:9D:B6:AF:09:75:FC:7F:0A:1D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/b0ec175b-098d-3374-a654-a890d9f9f81f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:13:e5:df:5b:19:91:ac:0e:3b:61:bf:58:81:ee:d1:50:
         8e:13:de:b8:4b:96:94:9c:0e:02:34:0d:4c:be:d6:69:eb:29:
         ee:35:f8:f5:3e:fd:b5:08:a9:4e:8d:26:2a:6a:08:28:c9:e8:
         b0:f1:f5:2b:20:d0:6f:10:05:9f:4e:9e:ac:ea:92:1c:26:9a:
         bc:a1:ee:ba:33:09:ef:b3:7a:fa:44:44:15:26:53:7b:38:e4:
         0b:94:c3:b8:2b:8c:79:4c:d6:3f:72:50:1d:e5:66:13:d2:77:
         e0:97:68:39:98:ae:5e:3f:b6:63:20:5c:82:45:78:49:fd:ab:
         4c:06:fd:b9:2d:8d:9a:af:c7:7c:73:a4:d9:4d:d6:6b:33:c6:
         ee:27:89:f8:99:58:ff:0b:82:59:18:5a:e9:81:6d:c9:20:18:
         c6:12:83:91:d2:bc:f6:c1:8d:f9:e2:d0:29:4d:2c:2c:e1:c1:
         f6:7d:25:69:bf:80:28:76:9a:b4:25:cc:09:8f:4e:b0:55:07:
         1d:2f:a0:0d:b9:52:5c:a7:a3:b1:53:74:e1:6b:bc:a9:2b:86:
         c6:0f:78:15:69:43:ee:00:6d:a2:6a:19:ec:c2:ee:09:08:48:
         82:b4:3e:ae:0e:1f:9e:c8:42:1a:49:d1:af:04:9a:71:62:90:
         34:85:ea:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQU6XP08MoPgjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk
NmEzMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MGYzNzEyODUtZmMxYy00NTU0LWFjNjYtNzU1NGY3NGUwMmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NjThylCBbVYenQLxoOaSYlX+UrZjezaJttu
Zfp0dakWVzzP1DZrT9a6CWzyx0SQi1Sy8Lbjx2yuCh/AXpKVfzeF9K+rOzlk9Wob
6KQKC6wNfoQFNPXcMyFZkmJv/YRsyNcjbKUWctXv9KdcQnX5rSuwq9nfoPQTVE50
iBs3tU8bdgLtm1HKJOSPnHoLgUZEwBKtZ7+ZRlOsV87+M+bXKJ0MD+xghyVeV5Dx
2bfqNLckGQP1pAu1v5AI9Ir2ou1kYLE5TxfOunwPl0JrBpJCH9iBklK59vaPFqdo
QyUo8HzF0p4ixf7A+0I5UQPXkbG2/Vo+mqyuN3G/bJWumCaGxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAN5aNsC0YGAUcqdtq8Jdfx/Ch27MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj
YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvYjBlYzE3NWItMDk4ZC0z
Mzc0LWE2NTQtYTg5MGQ5ZjlmODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw
MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3
ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4
ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTdQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqjE+XfWxmRrA47Yb9Yge7RUI4T3rhLlpScDgI0DUy+1mnrKe41+PU+
/bUIqU6NJipqCCjJ6LDx9Ssg0G8QBZ9Onqzqkhwmmryh7rozCe+zevpERBUmU3s4
5AuUw7grjHlM1j9yUB3lZhPSd+CXaDmYrl4/tmMgXIJFeEn9q0wG/bktjZqvx3xz
pNlN1mszxu4nifiZWP8LglkYWumBbckgGMYSg5HSvPbBjfni0ClNLCzhwfZ9JWm/
gCh2mrQlzAmPTrBVBx0voA25Ulyno7FTdOFrvKkrhsYPeBVpQ+4AbaJqGezC7gkI
SIK0Pq4OH57IQhpJ0a8EmnFikDSF6hk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:29 2025 by rpki-client