Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa
File:                     311a88de-2cdd-364b-86de-991a81a95792.roa (raw, json)
Hash identifier:          wtbw2lVuId1/7bUG1RRKM7XrUMMAAjOWAEvfh108mT0=
Subject key identifier:   9C:97:16:65:2C:BD:44:98:BF:09:A4:BB:30:26:37:47:2D:B5:82:51
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F432858491676BF0FAF981457D16B4A80
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa
Signing time:             Wed 05 Mar 2025 14:00:51 +0000
ROA not before:           Wed 05 Mar 2025 14:00:51 +0000
ROA not after:            Tue 03 Jun 2025 13:00:51 +0000
asID:                     33598
IP address blocks:        138.8.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:16:76:bf:0f:af:98:14:57:d1:6b:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Mar  5 14:00:51 2025 GMT
            Not After : Jun  3 13:00:51 2025 GMT
        Subject: CN=93267326-aadc-4be7-b119-71e37045cde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:2a:e4:85:fd:57:8f:58:2f:0d:c9:c2:a6:
                    d2:f3:90:a5:5b:23:12:17:fc:9c:37:75:2c:71:a1:
                    16:06:ab:ae:6a:1b:34:4d:9d:01:c5:0b:81:77:d6:
                    3f:4a:03:da:4b:37:46:07:bb:43:e7:6e:4f:47:7b:
                    bb:05:3c:41:69:75:35:a2:41:da:85:03:ad:93:6d:
                    25:25:8b:fa:70:72:fa:11:96:50:6c:d7:61:3c:32:
                    3c:06:4e:0f:d0:c7:ce:d9:03:96:d0:da:8e:3e:63:
                    b9:a0:f4:92:23:d8:0b:2e:29:89:f9:c6:4d:98:c9:
                    bb:ce:6b:1b:be:32:39:ec:01:ff:58:1d:3f:cf:fc:
                    0d:87:ba:55:1e:70:e8:05:b3:63:89:82:92:e0:44:
                    7d:4f:53:ba:dc:94:f1:96:7a:b0:07:30:e2:bc:39:
                    f9:9b:0a:d0:08:11:bb:6e:0f:8b:2c:15:15:ca:b6:
                    df:e6:3d:37:17:78:5a:08:c1:ae:1a:cc:79:9a:85:
                    fe:4d:a1:2b:e9:6c:6e:b2:a1:06:a2:6b:53:ca:55:
                    67:b6:fb:18:0c:c9:9d:b3:76:00:1c:07:07:3b:09:
                    77:cc:40:e5:1d:62:9c:58:51:88:85:da:70:62:03:
                    29:95:96:d6:98:3c:fd:3d:c6:6c:72:5a:86:a1:d5:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:97:16:65:2C:BD:44:98:BF:09:A4:BB:30:26:37:47:2D:B5:82:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.8.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c9:9b:e1:29:7b:b9:e3:7b:d3:14:66:b8:3e:ab:0c:f7:73:
         98:5a:ae:b2:f6:d1:91:21:d0:67:1d:4d:f6:86:e0:84:4c:0a:
         a1:ca:7f:fb:4b:52:5f:b4:98:9b:af:48:d0:3d:33:aa:07:89:
         57:1f:7b:9f:2f:86:29:61:69:12:93:24:c5:a4:54:03:2f:63:
         ab:c8:78:3a:51:7f:6b:c6:62:2d:78:c6:ac:eb:69:e4:b0:a4:
         6c:2e:2d:2a:ce:7e:b3:57:73:cb:bd:c4:a0:23:58:2c:66:0c:
         59:80:5a:77:51:ad:25:e5:ac:da:32:25:0d:f3:3c:c9:40:d5:
         a9:a6:c0:19:28:2d:69:48:39:b3:9c:27:df:a7:98:2b:5a:74:
         e0:78:77:92:16:1b:aa:83:58:d3:79:cb:15:e6:db:0a:67:06:
         48:03:69:2e:57:2a:6e:a7:ec:3a:4f:7c:d5:14:ce:0b:bf:41:
         88:18:d2:e8:a2:53:7f:3d:66:80:99:07:4e:fe:f8:91:89:55:
         c1:9c:6b:ca:11:6e:c8:84:25:b2:cb:f8:a6:d4:6a:ee:9d:65:
         91:45:b7:d9:5d:a2:81:08:3c:cd:e7:04:89:ab:48:5f:43:1c:
         8c:a0:bd:eb:9c:82:6c:ff:e9:e4:7e:01:fd:12:93:03:85:9d:
         0c:e8:ac:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWdr8Pr5gUV9FrSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4
MGJlMB4XDTI1MDMwNTE0MDA1MVoXDTI1MDYwMzEzMDA1MVowLzEtMCsGA1UEAxMk
OTMyNjczMjYtYWFkYy00YmU3LWIxMTktNzFlMzcwNDVjZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Uwq5IX9V49YLw3JwqbS85ClWyMSF/ycN3Us
caEWBquuahs0TZ0BxQuBd9Y/SgPaSzdGB7tD525PR3u7BTxBaXU1okHahQOtk20l
JYv6cHL6EZZQbNdhPDI8Bk4P0MfO2QOW0NqOPmO5oPSSI9gLLimJ+cZNmMm7zmsb
vjI57AH/WB0/z/wNh7pVHnDoBbNjiYKS4ER9T1O63JTxlnqwBzDivDn5mwrQCBG7
bg+LLBUVyrbf5j03F3haCMGuGsx5moX+TaEr6WxusqEGomtTylVntvsYDMmds3YA
HAcHOwl3zEDlHWKcWFGIhdpwYgMplZbWmDz9PcZsclqGodU5awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJyXFmUsvUSYvwmkuzAmN0cttYJRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm
NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMzExYTg4ZGUtMmNkZC0z
NjRiLTg2ZGUtOTkxYTgxYTk1NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk
ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy
ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2
YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDJm+Epe7nje9MUZrg+qwz3c5harrL20ZEh0GcdTfaG4IRMCqHKf/tL
Ul+0mJuvSNA9M6oHiVcfe58vhilhaRKTJMWkVAMvY6vIeDpRf2vGYi14xqzraeSw
pGwuLSrOfrNXc8u9xKAjWCxmDFmAWndRrSXlrNoyJQ3zPMlA1ammwBkoLWlIObOc
J9+nmCtadOB4d5IWG6qDWNN5yxXm2wpnBkgDaS5XKm6n7DpPfNUUzgu/QYgY0uii
U389ZoCZB07++JGJVcGca8oRbsiEJbLL+KbUau6dZZFFt9ldooEIPM3nBImrSF9D
HIygveucgmz/6eR+Af0SkwOFnQzorNU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:07 2025 by rpki-client