Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/91856ba1-c47a-3668-9814-7c459f83fcd1.roa
File:                     91856ba1-c47a-3668-9814-7c459f83fcd1.roa (raw, json)
Hash identifier:          xQIFRy3j/eQ/IWymsYPPqj8u36botHdX+WElR85ETSg=
Subject key identifier:   2D:C2:E8:89:0F:11:7D:D6:D3:05:C7:50:DD:F6:FF:70:FD:55:09:C1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584919418067F1046AFB6170AA00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/91856ba1-c47a-3668-9814-7c459f83fcd1.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     3131
IP address blocks:        64.184.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:80:67:f1:04:6a:fb:61:70:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=67257edd-cb46-4725-9ac0-7e6a192e1e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:6c:f7:63:74:3c:70:07:5f:50:74:b7:73:
                    d8:fc:df:4a:67:ed:f1:0f:24:92:19:2f:4a:e9:ff:
                    03:03:68:6a:0c:40:3e:57:26:33:21:00:8c:7d:b5:
                    11:39:4b:43:3d:ec:95:b8:b9:c0:df:76:ac:32:ba:
                    24:ee:ad:a1:dc:da:92:ae:e6:25:31:7e:86:79:12:
                    5a:df:ee:0d:4c:b3:df:e3:db:16:a7:0f:9b:6b:b2:
                    66:28:e9:1c:10:2f:47:71:7a:dc:c0:94:4b:09:0c:
                    fe:cf:da:17:db:cd:16:76:a3:f1:46:63:d4:0a:ef:
                    6f:84:2f:73:15:00:40:ef:9b:37:6b:8f:29:d5:03:
                    9b:3b:41:91:d9:fe:3a:69:98:c3:8c:03:03:98:c7:
                    ab:42:d6:b2:32:49:33:86:e0:42:6c:aa:12:ff:27:
                    23:e6:d2:94:a8:42:bc:7e:0a:13:10:31:0f:a8:5d:
                    de:93:42:fd:1d:e3:55:f3:f2:b8:fb:a1:3e:57:5a:
                    ff:32:26:7e:97:8a:15:ea:82:85:67:3b:02:1e:b4:
                    df:e2:db:08:d0:41:a0:99:da:9c:2e:df:f3:56:f0:
                    3f:82:8a:60:bd:9f:2e:7a:07:61:98:71:fc:98:c9:
                    40:3a:69:5d:2b:d6:1d:fa:66:52:1d:8b:29:e0:ff:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C2:E8:89:0F:11:7D:D6:D3:05:C7:50:DD:F6:FF:70:FD:55:09:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/91856ba1-c47a-3668-9814-7c459f83fcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c5:3f:1f:03:da:11:cd:e3:56:5b:cb:27:59:17:3d:71:87:
         1d:07:7d:be:02:c8:13:85:3a:37:7a:a1:5d:09:b8:2c:ce:77:
         c2:5b:70:c8:35:d7:c3:3c:95:56:19:06:a8:3a:08:b3:63:fc:
         e1:02:8e:05:9f:ed:f8:b3:8e:ea:a1:43:9b:43:33:89:45:2d:
         41:fb:41:4f:61:8f:70:e0:4d:f0:96:1e:ee:f8:4f:9f:03:24:
         f5:ba:55:8c:59:77:e1:ee:ff:1c:c0:65:c9:04:dd:c0:3c:0b:
         8b:65:e6:e2:99:57:7a:c3:2b:35:74:7d:94:bf:e1:91:bb:a0:
         f7:ce:b4:27:15:c6:b0:2c:ba:df:72:77:1d:af:e9:b0:1c:e5:
         c1:d7:9c:ba:82:17:f7:f3:b0:f1:40:0c:8c:ed:0e:43:3e:d3:
         c7:8c:9c:08:09:e8:3c:f6:29:37:52:20:18:0b:9c:5e:c4:62:
         11:ef:2e:72:c7:27:c7:18:6d:62:46:8a:35:98:da:c2:e6:f4:
         d3:1f:88:ef:c3:e2:8c:87:c0:48:4b:44:12:83:8e:de:fb:9b:
         52:7a:4f:8c:78:0f:47:02:0d:e6:29:64:8f:8c:fc:46:66:e0:
         da:d7:91:03:e0:93:ba:a2:0e:bb:74:a7:09:6d:2c:a2:18:ff:
         34:f0:b4:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQYBn8QRq+2FwqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk
NjcyNTdlZGQtY2I0Ni00NzI1LTlhYzAtN2U2YTE5MmUxZTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKts92N0PHAHX1B0t3PY/N9KZ+3xDySSGS9K
6f8DA2hqDEA+VyYzIQCMfbUROUtDPeyVuLnA33asMrok7q2h3NqSruYlMX6GeRJa
3+4NTLPf49sWpw+ba7JmKOkcEC9HcXrcwJRLCQz+z9oX280WdqPxRmPUCu9vhC9z
FQBA75s3a48p1QObO0GR2f46aZjDjAMDmMerQtayMkkzhuBCbKoS/ycj5tKUqEK8
fgoTEDEPqF3ek0L9HeNV8/K4+6E+V1r/MiZ+l4oV6oKFZzsCHrTf4tsI0EGgmdqc
Lt/zVvA/gopgvZ8uegdhmHH8mMlAOmldK9Yd+mZSHYsp4P+4MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3C6IkPEX3W0wXHUN32/3D9VQnBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOTE4NTZiYTEtYzQ3YS0z
NjY4LTk4MTQtN2M0NTlmODNmY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLhwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvFPx8D2hHN41ZbyydZFz1xhx0Hfb4CyBOFOjd6oV0JuCzOd8JbcMg1
18M8lVYZBqg6CLNj/OECjgWf7fizjuqhQ5tDM4lFLUH7QU9hj3DgTfCWHu74T58D
JPW6VYxZd+Hu/xzAZckE3cA8C4tl5uKZV3rDKzV0fZS/4ZG7oPfOtCcVxrAsut9y
dx2v6bAc5cHXnLqCF/fzsPFADIztDkM+08eMnAgJ6Dz2KTdSIBgLnF7EYhHvLnLH
J8cYbWJGijWY2sLm9NMfiO/D4oyHwEhLRBKDjt77m1J6T4x4D0cCDeYpZI+M/EZm
4NrXkQPgk7qiDrt0pwltLKIY/zTwtLI=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:46:55 2025 by rpki-client