Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a1564071-3f26-3ec8-b6e7-2a48a4d19f8c.roa
File:                     a1564071-3f26-3ec8-b6e7-2a48a4d19f8c.roa (raw, json)
Hash identifier:          JqXoZ1KBp9xzYWkfcGaNk8A7vBcG3E+dTmYNxEeRaK4=
Subject key identifier:   80:85:0D:AE:8B:81:2A:B2:5E:D2:43:E8:13:97:5A:47:A6:17:A8:EB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848A1361BCCDC9D3D8034107900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a1564071-3f26-3ec8-b6e7-2a48a4d19f8c.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     395681
IP address blocks:        66.103.214.0/24 maxlen: 24
                          74.48.197.0/24 maxlen: 24
                          74.48.198.0/24 maxlen: 24
                          74.48.199.0/24 maxlen: 24
                          74.48.216.0/24 maxlen: 24
                          142.171.96.0/24 maxlen: 24
                          142.171.97.0/24 maxlen: 24
                          142.171.98.0/24 maxlen: 24
                          142.171.99.0/24 maxlen: 24
                          142.171.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:1b:cc:dc:9d:3d:80:34:10:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=48ee8c46-ff10-4796-99ee-51c28bb83a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:23:1b:6c:08:aa:26:dd:c0:b4:e6:cb:a0:
                    af:fd:48:eb:ee:3f:e2:d5:07:9f:99:2a:a0:68:1d:
                    46:d0:27:fa:0b:fa:f9:25:a1:a5:51:33:f6:1b:88:
                    18:0a:b7:7b:23:0c:c0:08:72:a1:1b:fe:a0:80:6b:
                    d3:be:ed:e4:2b:ae:48:04:5a:b0:15:fa:0e:b2:9b:
                    e2:bc:4a:0a:61:5e:a0:52:f3:53:60:4e:7f:26:65:
                    46:e9:2f:d7:78:b2:20:4f:60:bf:be:ff:dd:c2:64:
                    5f:e2:c0:68:b2:5c:5b:ee:a3:0f:4b:0d:ee:67:a9:
                    e5:97:c2:07:44:32:15:72:33:01:93:54:4f:6d:74:
                    bf:4c:bc:5e:81:53:ef:9c:0d:78:a0:0d:d7:e8:72:
                    80:e3:09:2f:f9:a5:4b:7b:99:4a:6a:77:24:1d:50:
                    e7:c2:31:44:3f:bf:1b:b4:b4:f7:4c:46:4a:65:10:
                    7d:a1:33:8f:04:93:28:dc:93:12:f0:c8:bc:0c:7a:
                    a0:69:55:8d:f6:c0:c3:4e:9b:5f:b5:dd:73:08:9f:
                    d6:e7:23:e0:6b:fd:42:04:ec:df:ab:5d:12:6c:ec:
                    b5:f1:99:9f:44:bb:ec:da:64:e3:a3:46:b2:a5:a1:
                    68:fc:52:9f:99:f4:b1:cc:2c:f5:b5:fa:89:ea:ad:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:85:0D:AE:8B:81:2A:B2:5E:D2:43:E8:13:97:5A:47:A6:17:A8:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a1564071-3f26-3ec8-b6e7-2a48a4d19f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.214.0/24
                  74.48.197.0-74.48.199.255
                  74.48.216.0/24
                  142.171.96.0-142.171.100.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:d9:2e:b6:94:e8:2d:b9:3a:43:b7:cc:20:c5:3a:67:62:
         ae:60:22:ff:3d:f3:6f:e5:13:a7:f0:27:11:c5:34:d7:56:8d:
         6c:09:a8:98:1a:3e:11:6c:2f:b6:58:fe:4d:c2:6d:20:1b:42:
         b9:cc:c0:1d:9f:7b:41:ab:f3:5d:43:8f:bc:4b:20:dc:36:66:
         9c:dc:22:65:e2:09:88:33:ae:a5:51:2b:a2:d8:4f:59:a2:07:
         6f:93:2e:1f:1b:7f:04:88:df:a8:22:13:a8:d5:c5:55:32:5b:
         69:2e:05:3a:5b:01:48:34:d6:a2:64:80:0f:e4:a2:38:73:e3:
         45:d5:f3:5b:e9:b9:7c:35:07:ac:dd:fa:92:fb:ad:9b:1e:38:
         37:04:73:aa:a0:7d:f9:bd:db:78:dd:26:52:3a:0e:f2:50:10:
         af:df:26:a6:62:7f:84:4f:60:71:99:f9:4f:52:ab:81:70:f4:
         19:69:a3:6e:7b:9a:de:9f:bd:bd:20:ba:7b:00:a5:25:d5:ce:
         a9:fa:1f:f7:5c:86:bb:68:d9:85:25:76:f3:ed:f6:c3:97:1e:
         97:b1:f1:d7:fc:df:ca:9c:ff:c4:d0:c5:c3:da:26:b2:5b:dc:
         d0:04:63:46:7c:9d:c2:b5:60:8d:4f:b1:0c:48:50:03:d8:17:
         60:54:33:3d
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEihNhvM3J09gDQQeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
NDhlZThjNDYtZmYxMC00Nzk2LTk5ZWUtNTFjMjhiYjgzYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlcjG2wIqibdwLTmy6Cv/Ujr7j/i1QefmSqg
aB1G0Cf6C/r5JaGlUTP2G4gYCrd7IwzACHKhG/6ggGvTvu3kK65IBFqwFfoOspvi
vEoKYV6gUvNTYE5/JmVG6S/XeLIgT2C/vv/dwmRf4sBoslxb7qMPSw3uZ6nll8IH
RDIVcjMBk1RPbXS/TLxegVPvnA14oA3X6HKA4wkv+aVLe5lKanckHVDnwjFEP78b
tLT3TEZKZRB9oTOPBJMo3JMS8Mi8DHqgaVWN9sDDTptftd1zCJ/W5yPga/1CBOzf
q10SbOy18ZmfRLvs2mTjo0aypaFo/FKfmfSxzCz1tfqJ6q3XcQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFICFDa6LgSqyXtJD6BOXWkemF6jrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTE1NjQwNzEtM2YyNi0z
ZWM4LWI2ZTctMmE0OGE0ZDE5ZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAQmfWMAwD
BABKMMUDBANKMMADBABKMNgwDAMEBY6rYAMEAI6rZDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCsQNkutpTo
Lbk6Q7fMIMU6Z2KuYCL/PfNv5ROn8CcRxTTXVo1sCaiYGj4RbC+2WP5Nwm0gG0K5
zMAdn3tBq/NdQ4+8SyDcNmac3CJl4gmIM66lUSui2E9Zogdvky4fG38EiN+oIhOo
1cVVMltpLgU6WwFINNaiZIAP5KI4c+NF1fNb6bl8NQes3fqS+62bHjg3BHOqoH35
vdt43SZSOg7yUBCv3yamYn+ET2BxmflPUquBcPQZaaNue5ren729ILp7AKUl1c6p
+h/3XIa7aNmFJXbz7fbDlx6XsfHX/N/KnP/E0MXD2iayW9zQBGNGfJ3CtWCNT7EM
SFAD2BdgVDM9
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:14:02 2025 by rpki-client