Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d0191c6-c612-38ba-91e0-b427b794a35b.roa
File:                     5d0191c6-c612-38ba-91e0-b427b794a35b.roa (raw, json)
Hash identifier:          p5ezOkEjVOlxFkKhKqN5lZF9+a3nSYwoY4y4hBIzLf4=
Subject key identifier:   6B:7F:DA:A0:00:DB:53:3C:AB:00:CD:F4:29:54:6E:01:EF:4C:28:2D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1BD814EECADBE1EC5AF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d0191c6-c612-38ba-91e0-b427b794a35b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11351
IP address blocks:        98.1.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:bd:81:4e:ec:ad:be:1e:c5:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=9b3805b7-4d8c-405e-9cba-a457754a13ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:6d:49:c8:3e:75:64:dd:93:1f:fe:5a:59:
                    1f:a3:ba:1f:8b:61:65:d6:7d:d8:0f:1a:8f:9b:84:
                    11:77:04:ea:41:dc:5a:36:93:a8:bf:d3:1a:70:fc:
                    ce:95:dd:f5:e3:79:8b:0b:e9:97:da:05:ae:e8:88:
                    0f:72:86:29:c9:5b:7d:c2:30:6e:df:31:14:ac:76:
                    57:71:7e:36:f8:85:de:36:75:0b:a6:d6:cb:fb:b9:
                    16:bc:a7:52:de:a7:f9:29:d1:7a:7c:3c:ec:2c:da:
                    38:ae:5e:82:d3:58:ed:2d:f4:a8:f1:60:aa:11:42:
                    a6:9f:ba:b8:e6:d8:1b:24:df:70:71:e2:84:3b:3b:
                    b1:05:95:ea:e6:66:73:55:80:2b:3e:6b:c6:85:1e:
                    95:d2:07:98:a9:e0:57:0f:9d:fa:76:4d:5c:33:62:
                    62:0f:e6:f2:05:81:85:2f:cf:37:0d:e9:8b:fb:47:
                    4e:e3:0a:75:9c:a8:5d:5e:49:80:10:10:a2:53:94:
                    15:85:82:88:8d:77:9a:d9:bc:81:b9:a4:4e:12:b1:
                    c4:45:15:ad:63:85:1e:4c:6a:e4:bd:05:25:5c:57:
                    7d:41:00:d3:6f:7a:e1:6a:91:6d:25:46:64:3a:c3:
                    e2:7a:b9:fb:69:97:b8:cd:cc:73:f9:78:87:51:16:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7F:DA:A0:00:DB:53:3C:AB:00:CD:F4:29:54:6E:01:EF:4C:28:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d0191c6-c612-38ba-91e0-b427b794a35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.1.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:76:25:66:39:2e:da:83:a7:47:38:83:5f:29:6c:65:11:df:
         9e:6f:74:d1:75:74:d2:21:bc:24:da:06:4e:ed:fb:86:31:bc:
         e8:fa:c0:eb:2d:1c:29:14:fe:39:2b:f8:c6:30:0e:28:83:4c:
         4c:5a:0c:f2:51:52:c1:1e:e5:14:53:7c:44:a9:a4:fe:ea:be:
         e9:ff:25:83:fc:ea:71:41:10:ae:ad:5c:f4:b3:3e:fd:4f:ba:
         79:6f:29:9f:9f:72:a5:98:e8:d4:e4:1f:d0:c6:22:33:d3:4c:
         28:9e:13:52:37:b4:01:e6:02:d3:2a:8a:b0:28:b4:5f:7d:d2:
         75:a4:cc:1e:61:dc:98:23:60:12:83:69:7b:dc:4d:03:bf:f0:
         5a:3c:a1:c7:48:3f:db:1c:6c:c8:9c:5b:4a:68:e6:a8:79:9f:
         60:8c:59:05:68:79:bf:32:18:c7:12:62:1e:d9:5e:83:4f:45:
         e9:37:1f:7d:b0:15:a2:4d:8b:85:a3:dc:a6:46:4d:57:e0:40:
         e7:ad:9c:59:f5:7b:f2:d6:c5:32:e9:15:63:b4:85:f1:ec:48:
         1d:52:26:e0:f0:3b:aa:d8:0b:6f:a6:bf:24:36:7d:e2:cc:b8:
         2b:73:08:a1:d0:85:fa:3a:d4:8e:66:ea:3e:c0:97:5e:14:61:
         df:19:08:f1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEji0b2BTuytvh7Fr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
OWIzODA1YjctNGQ4Yy00MDVlLTljYmEtYTQ1Nzc1NGExM2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ptScg+dWTdkx/+Wlkfo7ofi2Fl1n3YDxqP
m4QRdwTqQdxaNpOov9MacPzOld3143mLC+mX2gWu6IgPcoYpyVt9wjBu3zEUrHZX
cX42+IXeNnULptbL+7kWvKdS3qf5KdF6fDzsLNo4rl6C01jtLfSo8WCqEUKmn7q4
5tgbJN9wceKEOzuxBZXq5mZzVYArPmvGhR6V0geYqeBXD536dk1cM2JiD+byBYGF
L883DemL+0dO4wp1nKhdXkmAEBCiU5QVhYKIjXea2byBuaROErHERRWtY4UeTGrk
vQUlXFd9QQDTb3rhapFtJUZkOsPiern7aZe4zcxz+XiHURbuwQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGt/2qAA21M8qwDN9ClUbgHvTCgtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNWQwMTkxYzYtYzYxMi0z
OGJhLTkxZTAtYjQyN2I3OTRhMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYgEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAa3YlZjku2oOnRziDXylsZRHfnm900XV00iG8JNoGTu37hjG86PrA6y0c
KRT+OSv4xjAOKINMTFoM8lFSwR7lFFN8RKmk/uq+6f8lg/zqcUEQrq1c9LM+/U+6
eW8pn59ypZjo1OQf0MYiM9NMKJ4TUje0AeYC0yqKsCi0X33SdaTMHmHcmCNgEoNp
e9xNA7/wWjyhx0g/2xxsyJxbSmjmqHmfYIxZBWh5vzIYxxJiHtleg09F6TcffbAV
ok2LhaPcpkZNV+BA562cWfV78tbFMukVY7SF8exIHVIm4PA7qtgLb6a/JDZ94sy4
K3MIodCF+jrUjmbqPsCXXhRh3xkI8Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:59:20 2025 by rpki-client