Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27ed4d17-c3dc-3cba-b1e5-752e88b077ab.roa
File:                     27ed4d17-c3dc-3cba-b1e5-752e88b077ab.roa (raw, json)
Hash identifier:          dI3Qm2IhqRLgbnHMx9Of+X25tKiBS32gJOfZ0fgS+mc=
Subject key identifier:   9E:6E:F3:EB:A0:67:41:0B:84:11:35:16:0D:C9:09:99:96:09:55:B6
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F43285849194183D1CC09ADFB28BB4700
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27ed4d17-c3dc-3cba-b1e5-752e88b077ab.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     400544
IP address blocks:        104.156.128.0/24 maxlen: 24
                          2607:76c0:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:83:d1:cc:09:ad:fb:28:bb:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=adf6e56e-ff0c-4ef9-a388-484ea3f198cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:4b:3d:a1:d3:5c:39:7d:e9:8a:09:1f:dc:
                    41:f2:16:f6:d2:02:cd:a7:b6:0d:27:30:f8:33:35:
                    c5:d1:6a:22:00:17:d4:86:10:b8:db:89:25:58:0c:
                    53:25:44:ef:1a:a0:93:e5:20:84:2c:34:cf:c4:9c:
                    ac:96:7c:eb:da:ba:a7:7b:48:b4:68:63:f4:f2:73:
                    b3:a4:83:41:77:45:a3:04:f9:6b:fe:fe:41:92:a1:
                    2b:84:fc:07:36:e2:0c:ba:50:3b:86:94:a6:2c:e9:
                    bf:89:ea:d7:f0:0c:68:c3:bd:32:d3:53:44:00:24:
                    dd:15:27:8b:0a:ae:05:03:2d:9a:cf:c8:21:df:18:
                    95:13:d9:ae:3f:f6:b8:91:31:56:38:92:3c:10:44:
                    03:d1:ce:95:66:70:32:4a:86:f6:7a:ee:51:e4:5f:
                    43:71:2b:d5:5b:2b:da:4a:8a:11:b3:a5:bb:52:7a:
                    ac:a7:e7:78:0a:72:9b:47:8f:56:be:4e:2a:c2:07:
                    26:cc:2a:88:b1:74:34:7d:2a:e9:13:31:f8:7c:63:
                    81:dc:ad:c4:c6:4c:5e:48:ac:c2:5c:3d:0e:06:45:
                    67:b1:9e:a1:0c:2a:67:f1:88:eb:ec:70:e0:f4:56:
                    2d:a8:6f:fb:e1:4c:fa:d7:b3:80:5c:21:f5:3c:c0:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6E:F3:EB:A0:67:41:0B:84:11:35:16:0D:C9:09:99:96:09:55:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27ed4d17-c3dc-3cba-b1e5-752e88b077ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.128.0/24
                IPv6:
                  2607:76c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:d7:5b:78:14:a3:9e:09:9a:df:97:f5:f7:65:a8:64:5c:
         cd:ed:fd:29:6f:bd:09:73:b4:97:cf:76:b8:5c:e2:2a:ec:72:
         45:e9:8b:9b:3e:2c:b3:bf:81:bc:6f:43:c3:9f:46:0c:30:56:
         a3:86:c8:15:0a:c9:f3:2d:ee:a1:02:e5:2b:2d:f4:ce:6c:e6:
         31:ed:8a:7d:de:01:25:0f:49:ef:6e:55:3d:67:14:d9:be:e2:
         d3:64:81:eb:8c:27:15:93:6a:eb:f0:81:54:cb:73:9d:43:e5:
         85:e7:87:f9:31:d7:d5:a3:98:d1:29:df:6b:6b:51:d2:a1:af:
         b9:97:b0:4b:e0:54:18:9a:09:bb:99:e8:d8:df:53:d4:f3:4d:
         4e:32:05:66:bd:6f:87:40:b4:b1:e1:7a:44:8d:7a:43:b7:d7:
         a7:e1:49:7f:bf:19:0c:2a:c3:74:21:51:65:a0:33:4b:2a:0f:
         f4:5f:4a:04:e4:15:f3:5b:a4:80:23:39:ac:82:92:6a:b5:22:
         4b:a8:68:80:fa:21:bb:86:61:3c:c2:11:12:26:3f:23:00:5e:
         b6:7d:03:92:91:ce:42:67:6c:00:ed:e9:6c:b3:dc:81:07:d4:
         6a:cb:53:cb:26:5d:97:41:dc:7e:9c:14:96:9f:a3:5f:f5:77:
         08:66:62:9a
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkZQYPRzAmt+yi7RwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgxYmFjZDgtZjdkOS00N2Q3LWFhMjQtNTM5MTA0OWY5
YzgyMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk
YWRmNmU1NmUtZmYwYy00ZWY5LWEzODgtNDg0ZWEzZjE5OGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2FLPaHTXDl96YoJH9xB8hb20gLNp7YNJzD4
MzXF0WoiABfUhhC424klWAxTJUTvGqCT5SCELDTPxJyslnzr2rqne0i0aGP08nOz
pINBd0WjBPlr/v5BkqErhPwHNuIMulA7hpSmLOm/ierX8Axow70y01NEACTdFSeL
Cq4FAy2az8gh3xiVE9muP/a4kTFWOJI8EEQD0c6VZnAySob2eu5R5F9DcSvVWyva
SooRs6W7Unqsp+d4CnKbR49Wvk4qwgcmzCqIsXQ0fSrpEzH4fGOB3K3ExkxeSKzC
XD0OBkVnsZ6hDCpn8Yjr7HDg9FYtqG/74Uz617OAXCH1PMBflQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFJ5u8+ugZ0ELhBE1Fg3JCZmWCVW2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFi
YWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5ZjljODIvMjdlZDRkMTctYzNkYy0z
Y2JhLWIxZTUtNzUyZTg4YjA3N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgxYmFjZDgtZjdkOS00N2Q3LWFh
MjQtNTM5MTA0OWY5YzgyL2Y4MWJhY2Q4LWY3ZDktNDdkNy1hYTI0LTUzOTEwNDlm
OWM4Mi5jcmwwHwYDVR0jBBgwFoAU7P3I67I287uW2sRk65LZqan3Ez0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01Mzkx
MDQ5ZjljODIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaJyAMA8E
AgACMAkDBwAmB3bAAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKe/XW3gUo54Jmt+X9fdlqGRcze39KW+9
CXO0l892uFziKuxyRemLmz4ss7+BvG9Dw59GDDBWo4bIFQrJ8y3uoQLlKy30zmzm
Me2Kfd4BJQ9J725VPWcU2b7i02SB64wnFZNq6/CBVMtznUPlheeH+THX1aOY0Snf
a2tR0qGvuZewS+BUGJoJu5no2N9T1PNNTjIFZr1vh0C0seF6RI16Q7fXp+FJf78Z
DCrDdCFRZaAzSyoP9F9KBOQV81ukgCM5rIKSarUiS6hogPohu4ZhPMIREiY/IwBe
tn0DkpHOQmdsAO3pbLPcgQfUastTyyZdl0HcfpwUlp+jX/V3CGZimg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:41 2025 by rpki-client