Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eede67f4-330b-301c-9a3e-a7265389051f.roa
File:                     eede67f4-330b-301c-9a3e-a7265389051f.roa (raw, json)
Hash identifier:          MUwLj6047pj+Ua07P33V9bduDSlxTyMg4hbzN4IBRno=
Subject key identifier:   08:15:2E:9F:FB:DF:D2:B9:3C:B0:20:9E:B9:4C:3C:29:4E:85:5D:53
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C58211CEE126B73B58C148A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eede67f4-330b-301c-9a3e-a7265389051f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.70.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:11:ce:e1:26:b7:3b:58:c1:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=200e9413-b06b-4c83-866a-24e9e5f52082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:d2:5e:63:8d:b5:ef:d6:1f:09:15:ca:e8:
                    a3:62:de:e6:d5:1a:63:e0:46:26:e4:73:e8:8d:85:
                    40:3e:51:08:a2:06:3b:e5:f1:ad:5e:eb:3d:ba:12:
                    d5:93:7c:83:57:a6:53:da:0f:b0:6c:7d:09:55:a9:
                    fa:8f:f6:1d:01:e7:8f:ef:53:32:7b:9c:2b:54:a3:
                    3e:bb:64:fd:87:b2:9c:4e:49:49:04:2a:e2:f6:34:
                    48:9a:d9:db:fd:7e:c8:6d:37:20:27:3d:c6:c0:87:
                    91:23:c3:26:db:c3:b2:b3:d4:99:2f:d5:43:98:99:
                    38:02:a7:01:94:92:75:f2:39:41:e8:c0:80:d0:a4:
                    03:f2:15:fb:b5:f7:c9:43:c8:d4:27:c5:4c:6c:ee:
                    4b:eb:88:e2:3e:d3:62:0a:17:f8:1a:3f:cd:27:20:
                    c8:83:f9:f5:46:39:15:2d:fb:b6:29:a0:59:71:56:
                    03:30:8c:91:b7:6b:11:01:cb:b8:da:3d:72:a8:09:
                    24:5b:2f:99:22:dc:99:5d:b6:15:08:16:f3:62:da:
                    14:3d:0f:7b:a1:be:58:8e:65:33:2e:d3:ad:6a:df:
                    cf:ed:88:5d:42:1b:83:85:e8:bf:e4:22:bc:48:b0:
                    d4:cd:0d:d3:8e:a9:67:89:99:b9:bb:6b:1b:06:69:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:15:2E:9F:FB:DF:D2:B9:3C:B0:20:9E:B9:4C:3C:29:4E:85:5D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eede67f4-330b-301c-9a3e-a7265389051f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ba:d9:3c:7f:53:b6:9a:bd:f2:45:5a:54:54:90:d8:d1:6c:
         0b:fb:1a:3a:7f:d2:f1:69:d1:11:49:1d:0f:9d:42:25:fc:69:
         39:c1:41:d6:59:28:5e:1b:9e:d2:f2:b3:fc:66:e1:40:b8:43:
         23:c5:7f:15:87:f0:71:19:aa:e0:72:bf:53:7f:b8:fb:93:61:
         f9:1d:cb:7c:3c:11:ab:92:52:d1:84:c0:da:ed:6a:9b:66:72:
         41:b4:3d:2c:a6:e8:de:2c:ee:69:28:f5:70:14:74:42:80:dd:
         a9:76:2a:03:da:fc:2f:42:40:85:96:4c:46:05:d1:ed:dc:14:
         81:f1:b9:b7:49:7d:41:71:f2:f4:0e:98:7f:df:53:ee:91:f0:
         a6:6e:c6:15:b0:4e:0a:a5:bc:fb:8d:13:a8:26:8c:36:72:98:
         2a:c8:46:c6:79:a6:8c:fe:7c:20:fe:ca:9c:13:ac:45:ed:d8:
         7f:86:78:91:16:cd:78:93:da:d9:fc:95:a6:75:b3:b2:c0:1c:
         c5:37:2a:4c:d6:9e:da:3a:e7:c7:b2:13:b2:c4:32:1b:12:4b:
         5d:b9:90:f2:a5:52:ef:49:0d:1b:02:40:8e:8c:d3:8b:9b:03:
         d3:9d:c4:41:7c:5a:06:9b:5f:da:aa:e8:55:d2:ae:8e:cd:4f:
         ea:70:56:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghHO4Sa3O1jBSKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MjAwZTk0MTMtYjA2Yi00YzgzLTg2NmEtMjRlOWU1ZjUyMDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLjSXmONte/WHwkVyuijYt7m1Rpj4EYm5HPo
jYVAPlEIogY75fGtXus9uhLVk3yDV6ZT2g+wbH0JVan6j/YdAeeP71Mye5wrVKM+
u2T9h7KcTklJBCri9jRImtnb/X7IbTcgJz3GwIeRI8Mm28Oys9SZL9VDmJk4AqcB
lJJ18jlB6MCA0KQD8hX7tffJQ8jUJ8VMbO5L64jiPtNiChf4Gj/NJyDIg/n1RjkV
Lfu2KaBZcVYDMIyRt2sRAcu42j1yqAkkWy+ZItyZXbYVCBbzYtoUPQ97ob5YjmUz
LtOtat/P7YhdQhuDhei/5CK8SLDUzQ3TjqlniZm5u2sbBmlk+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgVLp/739K5PLAgnrlMPClOhV1TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZWVkZTY3ZjQtMzMwYi0z
MDFjLTlhM2UtYTcyNjUzODkwNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGq62Tx/U7aavfJFWlRUkNjRbAv7Gjp/0vFp0RFJHQ+dQiX8aTnBQdZZ
KF4bntLys/xm4UC4QyPFfxWH8HEZquByv1N/uPuTYfkdy3w8EauSUtGEwNrtaptm
ckG0PSym6N4s7mko9XAUdEKA3al2KgPa/C9CQIWWTEYF0e3cFIHxubdJfUFx8vQO
mH/fU+6R8KZuxhWwTgqlvPuNE6gmjDZymCrIRsZ5poz+fCD+ypwTrEXt2H+GeJEW
zXiT2tn8laZ1s7LAHMU3KkzWnto658eyE7LEMhsSS125kPKlUu9JDRsCQI6M04ub
A9OdxEF8WgabX9qq6FXSro7NT+pwVvQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:19 2025 by rpki-client