Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/e0798679-f191-3f8b-bac4-79b4e7aa7b1a.roa
File:                     e0798679-f191-3f8b-bac4-79b4e7aa7b1a.roa (raw, json)
Hash identifier:          cq/9YE7+Tt4fzDKIQwjQF3A877IJzTiyBJcqk/j5SfQ=
Subject key identifier:   A0:85:23:90:CF:73:FD:A6:E6:75:5B:1D:CC:F5:FE:5E:4C:14:9B:91
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285848CF4635339A7CB0E2D5BC24A0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/e0798679-f191-3f8b-bac4-79b4e7aa7b1a.roa
Signing time:             Sat 08 Feb 2025 02:00:38 +0000
ROA not before:           Sat 08 Feb 2025 02:00:38 +0000
ROA not after:            Fri 09 May 2025 01:00:38 +0000
asID:                     11260
IP address blocks:        76.11.32.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cf:46:35:33:9a:7c:b0:e2:d5:bc:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Feb  8 02:00:38 2025 GMT
            Not After : May  9 01:00:38 2025 GMT
        Subject: CN=595a847b-7e64-430f-a38e-2fa251b3a75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4d:1d:90:30:57:df:fe:89:a5:4d:f9:de:fa:
                    b2:2d:7b:96:ff:77:2a:b2:ba:5f:1a:e6:92:76:2e:
                    0d:a3:40:92:79:b0:34:7a:db:13:1c:aa:c3:21:21:
                    d1:75:4a:3a:dc:6c:c1:9f:a7:a0:15:95:17:9f:bc:
                    da:58:20:18:b4:a3:63:e6:72:57:b1:1f:4d:07:9d:
                    dd:34:c7:3c:d8:ab:b5:4d:c2:9e:26:e3:61:09:3c:
                    0e:6e:e3:53:60:f7:89:e1:33:f7:e5:15:89:97:38:
                    a6:cb:46:ff:37:9d:85:fd:6f:f2:f7:87:bb:6c:5f:
                    0f:34:50:de:ad:c5:9d:68:07:2f:55:aa:ca:2a:9d:
                    92:8b:20:18:f0:ad:52:49:42:ef:91:23:f4:99:f7:
                    0a:3f:ac:b1:d3:9d:a7:88:28:3a:8e:ef:ce:8a:1d:
                    b4:f3:be:f7:9c:1c:16:68:c5:f1:88:e1:ca:4e:13:
                    70:b2:2c:0b:fe:bf:de:a2:fc:f7:20:f8:4e:ed:58:
                    1e:4a:91:e5:d9:1d:a2:94:3d:6f:11:93:d8:93:5c:
                    22:e4:d9:2e:77:49:4c:1d:10:18:64:d3:72:0e:48:
                    0e:4d:25:3b:4a:36:e2:62:11:f1:13:ec:79:37:ce:
                    85:7f:fb:98:02:c5:12:ca:cc:84:bb:5d:a3:0c:0c:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:85:23:90:CF:73:FD:A6:E6:75:5B:1D:CC:F5:FE:5E:4C:14:9B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/e0798679-f191-3f8b-bac4-79b4e7aa7b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.11.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:c9:87:4b:d4:9f:f9:c4:a1:4f:5f:68:62:93:54:fa:79:
         5a:d8:e1:18:f2:42:c4:71:07:f3:f2:5f:a1:e6:05:25:21:a1:
         07:9a:12:61:fd:aa:b1:6a:8e:2e:0c:46:9f:ed:d8:43:ae:60:
         5d:e5:e2:e4:0c:b0:65:26:6f:26:bf:b7:9c:e3:00:a8:32:08:
         9c:d1:19:6e:7e:8f:3e:01:58:eb:78:72:62:53:e9:a3:db:62:
         55:72:f8:e1:3d:2a:0a:44:83:41:57:7f:25:a5:9c:0c:4d:b5:
         a9:e4:f1:a9:00:39:43:56:71:30:c3:06:3e:6d:54:5a:21:f9:
         00:ec:82:e4:7a:bc:87:77:b0:23:25:70:43:c8:2c:58:c4:fc:
         81:a5:4a:9b:a4:7e:d0:64:ec:30:ca:bf:78:b6:8f:4d:0d:55:
         6a:b5:a8:bd:27:44:6f:47:c8:b0:f1:d3:5e:77:bd:02:0f:ff:
         68:41:8b:55:1a:3c:2e:e5:a0:60:54:6e:62:b9:e6:8e:f6:20:
         a0:ff:4f:a0:7d:aa:89:4e:b5:72:7c:86:04:ec:7a:9f:60:56:
         76:f0:59:15:b4:b6:bf:4a:29:a2:b5:6d:9e:18:15:39:b4:2f:
         c2:22:a7:c7:43:91:34:53:ba:8b:68:64:a2:85:04:4b:5f:40:
         08:87:f4:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjPRjUzmnyw4tW8JKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4
OTViMB4XDTI1MDIwODAyMDAzOFoXDTI1MDUwOTAxMDAzOFowLzEtMCsGA1UEAxMk
NTk1YTg0N2ItN2U2NC00MzBmLWEzOGUtMmZhMjUxYjNhNzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U0dkDBX3/6JpU353vqyLXuW/3cqsrpfGuaS
di4No0CSebA0etsTHKrDISHRdUo63GzBn6egFZUXn7zaWCAYtKNj5nJXsR9NB53d
NMc82Ku1TcKeJuNhCTwObuNTYPeJ4TP35RWJlzimy0b/N52F/W/y94e7bF8PNFDe
rcWdaAcvVarKKp2SiyAY8K1SSULvkSP0mfcKP6yx052niCg6ju/Oih208773nBwW
aMXxiOHKThNwsiwL/r/eovz3IPhO7VgeSpHl2R2ilD1vEZPYk1wi5Nkud0lMHRAY
ZNNyDkgOTSU7SjbiYhHxE+x5N86Ff/uYAsUSysyEu12jDAx1uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCFI5DPc/2m5nVbHcz1/l5MFJuRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4
MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvZTA3OTg2NzktZjE5MS0z
ZjhiLWJhYzQtNzliNGU3YWE3YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi
NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh
ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy
M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTAsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICcyYdL1J/5xKFPX2hik1T6eVrY4RjyQsRxB/PyX6HmBSUhoQeaEmH9
qrFqji4MRp/t2EOuYF3l4uQMsGUmbya/t5zjAKgyCJzRGW5+jz4BWOt4cmJT6aPb
YlVy+OE9KgpEg0FXfyWlnAxNtank8akAOUNWcTDDBj5tVFoh+QDsguR6vId3sCMl
cEPILFjE/IGlSpukftBk7DDKv3i2j00NVWq1qL0nRG9HyLDx0153vQIP/2hBi1Ua
PC7loGBUbmK55o72IKD/T6B9qolOtXJ8hgTsep9gVnbwWRW0tr9KKaK1bZ4YFTm0
L8Iip8dDkTRTuotoZKKFBEtfQAiH9Ec=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:50 2025 by rpki-client