Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6017d4b-c65c-33ab-96ea-6f0868cef09b.roa
File:                     c6017d4b-c65c-33ab-96ea-6f0868cef09b.roa (raw, json)
Hash identifier:          RtKjKG8GifH4peWY1ItN6xvbFfsScIgeBw5nmJriCIU=
Subject key identifier:   11:81:E2:CF:03:C7:9D:55:FE:77:A0:CE:B9:85:24:EE:7E:F5:5B:F7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B01577EEEA3F7E8DF500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6017d4b-c65c-33ab-96ea-6f0868cef09b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        75.186.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b0:15:77:ee:ea:3f:7e:8d:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=0c652173-3b77-4b62-b74d-7f16af179298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:c0:a7:fb:bf:f7:2b:55:47:54:ed:32:89:
                    a8:4f:dc:f3:bb:e5:83:bc:cf:e4:0c:1f:55:31:d6:
                    4a:48:2d:cc:ac:5f:33:b2:05:13:46:27:90:0b:42:
                    2f:ac:79:47:1b:dd:42:79:f0:fb:ea:9a:6d:5d:65:
                    e3:4c:53:d2:ab:da:fe:9c:f2:10:75:36:8b:9f:5d:
                    05:e8:a6:4a:4b:dd:7a:c0:88:20:56:cc:47:4c:84:
                    59:01:c5:1c:9e:56:bb:bb:4f:ed:b2:3c:d2:94:bd:
                    69:90:0f:0b:cb:8e:36:2a:28:46:52:07:54:89:92:
                    5a:29:39:33:2d:03:0c:0f:5a:00:4b:30:e7:4e:9f:
                    f8:f0:2b:e4:e8:47:1b:b1:1a:bc:13:f4:f9:b4:57:
                    18:9d:c3:9f:c9:03:fa:6f:21:2f:d8:66:07:cc:68:
                    78:6e:fd:1c:c5:c4:9f:4d:58:84:a4:69:24:ef:37:
                    7d:09:55:04:2d:39:3b:99:a8:20:94:ef:f4:55:ba:
                    2a:ea:39:8e:1c:f9:41:36:ba:ee:90:2e:71:5a:f7:
                    10:74:98:a7:80:23:65:6d:10:62:3d:3d:e3:7f:30:
                    35:1b:49:1d:d5:2d:27:03:0d:bc:47:98:fc:56:1a:
                    9a:ab:97:a3:10:99:73:54:c7:cc:e4:0a:6b:35:c8:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:81:E2:CF:03:C7:9D:55:FE:77:A0:CE:B9:85:24:EE:7E:F5:5B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6017d4b-c65c-33ab-96ea-6f0868cef09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.186.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:39:20:3f:2f:c2:d3:06:16:3a:b0:c6:9a:a5:09:c6:e4:df:
         3d:a0:47:7e:fa:5a:4a:07:7e:40:a6:a7:b4:63:7b:aa:cf:67:
         53:e8:53:8d:28:9f:f1:c2:81:d3:e0:3c:85:5f:19:2d:c5:20:
         ed:ca:46:c0:45:40:dd:d5:a9:3e:f5:1a:67:a8:d5:58:bd:b8:
         e0:6a:2a:7c:63:13:6c:1d:24:6f:4c:f8:37:8b:ae:a1:f0:11:
         af:4b:5e:07:35:89:d1:b0:94:65:b1:00:37:4f:af:93:25:78:
         fd:ed:ac:69:5a:6e:bd:b0:f5:3a:d7:32:e7:25:fb:ea:cc:0b:
         c0:36:76:af:cb:fe:f9:83:61:14:1b:54:18:48:8e:29:e9:4c:
         d0:f4:f0:d2:8c:3d:64:bd:59:08:9e:7f:d7:3b:cf:72:bd:49:
         be:5c:23:af:56:ed:cc:71:49:28:a0:1e:44:57:96:ef:86:c9:
         89:4e:1a:8a:5d:9b:38:e0:dd:e2:d5:53:e4:47:95:e7:c8:3e:
         49:91:97:26:02:5b:e9:40:28:15:c4:74:17:cf:31:62:d9:fa:
         91:9f:7a:88:26:27:3b:ab:75:50:c6:54:98:cd:ad:e9:45:0d:
         1d:22:db:3b:99:af:d9:30:ae:40:be:b6:c8:e2:b8:ad:01:a8:
         16:76:0e:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0bAVd+7qP36N9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MGM2NTIxNzMtM2I3Ny00YjYyLWI3NGQtN2YxNmFmMTc5Mjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT/Ap/u/9ytVR1TtMomoT9zzu+WDvM/kDB9V
MdZKSC3MrF8zsgUTRieQC0IvrHlHG91CefD76pptXWXjTFPSq9r+nPIQdTaLn10F
6KZKS916wIggVsxHTIRZAcUcnla7u0/tsjzSlL1pkA8Ly442KihGUgdUiZJaKTkz
LQMMD1oASzDnTp/48Cvk6EcbsRq8E/T5tFcYncOfyQP6byEv2GYHzGh4bv0cxcSf
TViEpGkk7zd9CVUELTk7magglO/0Vboq6jmOHPlBNrrukC5xWvcQdJingCNlbRBi
PT3jfzA1G0kd1S0nAw28R5j8Vhqaq5ejEJlzVMfM5AprNcjh7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGB4s8Dx51V/negzrmFJO5+9Vv3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYzYwMTdkNGItYzY1Yy0z
M2FiLTk2ZWEtNmYwODY4Y2VmMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHS7qAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIc5ID8vwtMGFjqwxpqlCcbk3z2gR376WkoHfkCmp7Rje6rPZ1PoU40o
n/HCgdPgPIVfGS3FIO3KRsBFQN3VqT71Gmeo1Vi9uOBqKnxjE2wdJG9M+DeLrqHw
Ea9LXgc1idGwlGWxADdPr5MleP3trGlabr2w9TrXMucl++rMC8A2dq/L/vmDYRQb
VBhIjinpTND08NKMPWS9WQief9c7z3K9Sb5cI69W7cxxSSigHkRXlu+GyYlOGopd
mzjg3eLVU+RHlefIPkmRlyYCW+lAKBXEdBfPMWLZ+pGfeogmJzurdVDGVJjNrelF
DR0i2zuZr9kwrkC+tsjiuK0BqBZ2Dk4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:15 2025 by rpki-client