Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/e3e4358e-71e7-33cc-879b-77be7c1f3164.roa
File:                     e3e4358e-71e7-33cc-879b-77be7c1f3164.roa (raw, json)
Hash identifier:          YOLii3p6Zf4CVY854boS3IeWBbe9IlKUOhxgVav9+0U=
Subject key identifier:   AE:0B:D4:54:CA:23:80:66:EE:5B:DC:99:DC:1D:67:78:62:31:8C:CC
Certificate issuer:       /CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
Certificate serial:       010D0C9F43285849357676664ECFA163EE0F21C0
Authority key identifier: 33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/e3e4358e-71e7-33cc-879b-77be7c1f3164.roa
Signing time:             Sun 16 Mar 2025 16:30:21 +0000
ROA not before:           Sun 16 Mar 2025 16:30:21 +0000
ROA not after:            Sat 14 Jun 2025 16:30:21 +0000
asID:                     401332
IP address blocks:        103.17.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:76:76:66:4e:cf:a1:63:ee:0f:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183b17d1-ce8d-47f9-b190-0ed35fb35be0
        Validity
            Not Before: Mar 16 16:30:21 2025 GMT
            Not After : Jun 14 16:30:21 2025 GMT
        Subject: CN=de7e658f-7448-47c8-a657-e5cc5d9ce3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:ad:1d:ea:5a:ac:da:42:b7:f8:cf:e6:73:
                    35:34:24:23:02:3b:62:9e:a2:33:82:cd:1f:81:18:
                    f9:52:8e:6d:86:1f:6e:5a:64:9f:e8:ea:2b:03:c7:
                    f4:be:ea:96:51:12:23:a1:31:eb:a2:40:5f:e0:fc:
                    4b:97:6e:85:f0:c3:43:fb:c4:00:b9:fb:99:52:d3:
                    77:39:d0:a8:b3:23:75:2f:a7:e6:6d:7c:fa:2d:ff:
                    73:5f:44:41:d6:c3:58:d2:2e:3f:80:36:8b:4d:ba:
                    0c:7f:ae:b2:5f:a6:aa:78:1b:10:87:3f:d8:7c:2b:
                    a2:11:cf:26:eb:d2:0f:d4:c9:43:4f:bd:4b:86:2f:
                    46:c2:ba:13:b7:43:72:9a:9b:bc:4d:c8:77:8b:51:
                    99:4d:ad:6c:cd:11:8e:d4:18:7a:fe:67:d7:09:81:
                    c3:56:65:16:f9:d7:8f:69:a4:ab:65:5b:10:70:6e:
                    87:ef:81:ce:56:71:6d:46:55:47:83:62:d2:b4:3f:
                    5c:0a:ad:bc:d9:7b:2c:ae:b8:b9:69:10:39:2f:12:
                    6d:e5:1d:a0:f1:5a:94:42:06:6a:e7:cd:1d:79:4f:
                    86:a2:e2:7d:de:d1:63:6c:9c:b1:74:12:c1:b3:f1:
                    a3:88:ab:f3:ee:87:bf:40:8f:2e:a8:b9:2d:25:3f:
                    3f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0B:D4:54:CA:23:80:66:EE:5B:DC:99:DC:1D:67:78:62:31:8C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/e3e4358e-71e7-33cc-879b-77be7c1f3164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0/183b17d1-ce8d-47f9-b190-0ed35fb35be0.crl

            X509v3 Authority Key Identifier:
                keyid:33:60:21:57:27:9B:69:AA:1D:B2:5A:65:FE:A9:0E:CB:D0:D8:1F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/183b17d1-ce8d-47f9-b190-0ed35fb35be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:80:82:e5:39:c0:d3:6c:d6:03:f9:64:a8:9d:f3:e6:38:
         b2:d4:5a:de:73:40:8c:62:fb:04:db:de:95:9f:44:5b:b2:9e:
         17:fd:ef:38:cf:dd:72:87:49:3f:02:91:1e:73:e9:4e:c3:95:
         65:ae:d3:a3:90:6e:0b:a4:bf:a7:ed:27:5a:ee:3a:c3:cf:16:
         8e:06:6e:e9:76:59:f9:d6:2c:1f:c3:54:6c:b2:81:c4:77:4c:
         37:c3:21:87:a2:94:1c:15:a2:37:f6:06:4e:e3:bd:62:7f:bb:
         15:57:6d:55:72:b2:14:c2:e6:cb:a7:b2:00:8a:73:59:f9:d2:
         8f:be:25:26:44:75:f5:de:bd:ca:7e:c8:09:70:cd:c5:14:ee:
         f3:83:c9:ab:bc:47:e6:54:83:3e:5a:eb:bb:35:d7:c2:51:62:
         a0:81:07:8a:3a:f6:63:ea:e6:ae:c0:a5:58:52:9b:d9:58:36:
         56:8a:30:84:ed:ff:f3:cf:78:d7:c4:a9:ea:51:59:47:31:71:
         4f:89:b0:7e:77:f5:1a:b1:5c:06:cc:23:5e:1f:fc:57:74:27:
         d2:79:27:ff:f9:90:e1:32:7e:e7:c7:8c:d9:b9:d6:96:55:e3:
         0a:09:8f:af:03:70:b1:dc:f9:8d:bc:c4:fd:0b:b4:c7:4e:88:
         ec:d6:3a:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1dnZmTs+hY+4PIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTgzYjE3ZDEtY2U4ZC00N2Y5LWIxOTAtMGVkMzVmYjM1
YmUwMB4XDTI1MDMxNjE2MzAyMVoXDTI1MDYxNDE2MzAyMVowLzEtMCsGA1UEAxMk
ZGU3ZTY1OGYtNzQ0OC00N2M4LWE2NTctZTVjYzVkOWNlM2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj+tHeparNpCt/jP5nM1NCQjAjtinqIzgs0f
gRj5Uo5thh9uWmSf6OorA8f0vuqWURIjoTHrokBf4PxLl26F8MND+8QAufuZUtN3
OdCosyN1L6fmbXz6Lf9zX0RB1sNY0i4/gDaLTboMf66yX6aqeBsQhz/YfCuiEc8m
69IP1MlDT71Lhi9GwroTt0Nympu8Tch3i1GZTa1szRGO1Bh6/mfXCYHDVmUW+deP
aaSrZVsQcG6H74HOVnFtRlVHg2LStD9cCq282Xssrri5aRA5LxJt5R2g8VqUQgZq
580deU+GouJ93tFjbJyxdBLBs/GjiKvz7oe/QI8uqLktJT8/jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4L1FTKI4Bm7lvcmdwdZ3hiMYzMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xODNi
MTdkMS1jZThkLTQ3ZjktYjE5MC0wZWQzNWZiMzViZTAvZTNlNDM1OGUtNzFlNy0z
M2NjLTg3OWItNzdiZTdjMWYzMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTgzYjE3ZDEtY2U4ZC00N2Y5LWIx
OTAtMGVkMzVmYjM1YmUwLzE4M2IxN2QxLWNlOGQtNDdmOS1iMTkwLTBlZDM1ZmIz
NWJlMC5jcmwwHwYDVR0jBBgwFoAUM2AhVyebaaodslpl/qkOy9DYHyYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xODNiMTdkMS1jZThkLTQ3ZjktYjE5MC0wZWQz
NWZiMzViZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxGYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhOgILlOcDTbNYD+WSonfPmOLLUWt5zQIxi+wTb3pWfRFuynhf97zjP
3XKHST8CkR5z6U7DlWWu06OQbgukv6ftJ1ruOsPPFo4Gbul2WfnWLB/DVGyygcR3
TDfDIYeilBwVojf2Bk7jvWJ/uxVXbVVyshTC5sunsgCKc1n50o++JSZEdfXevcp+
yAlwzcUU7vODyau8R+ZUgz5a67s118JRYqCBB4o69mPq5q7ApVhSm9lYNlaKMITt
//PPeNfEqepRWUcxcU+JsH539RqxXAbMI14f/Fd0J9J5J//5kOEyfufHjNm51pZV
4woJj68DcLHc+Y28xP0LtMdOiOzWOnk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:42 2025 by rpki-client