Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa
File:                     7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa (raw, json)
Hash identifier:          i1WzV13FsbaagMd4QOPfET8IpzrydMdpkN9GRHtCouE=
Subject key identifier:   5A:51:8C:7B:B7:46:E6:64:A5:DF:A5:6E:00:21:6B:5B:AD:E5:A9:EF
Certificate issuer:       /CN=f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8
Certificate serial:       010D0C9F43285849088194F42D2CF9A8914EF900
Authority key identifier: 7D:3C:6F:EE:64:A5:DD:6E:94:A6:94:A7:7D:7E:19:2C:46:EF:3D:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     53848
IP address blocks:        23.252.176.0/20 maxlen: 20
                          52.124.22.0/23 maxlen: 23
                          64.45.182.0/23 maxlen: 23
                          104.254.40.0/22 maxlen: 22
                          104.255.160.0/21 maxlen: 21
                          199.202.0.0/19 maxlen: 19
                          209.127.128.0/21 maxlen: 21
                          216.211.144.0/20 maxlen: 20
                          2607:a80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:94:f4:2d:2c:f9:a8:91:4e:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=476da30a-cf2b-4d85-b05b-51dfbe0f4998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:c1:97:91:2a:c3:1d:92:19:af:08:1c:a1:
                    03:31:31:99:8e:6c:7f:8a:2d:5d:51:60:2f:9d:d2:
                    08:de:b2:da:a9:cc:68:81:61:fd:36:c5:cc:75:40:
                    1c:6e:48:49:74:42:1c:30:c7:85:ea:c7:46:08:0f:
                    da:7a:4d:dc:80:e1:ab:9f:52:a5:97:eb:4a:1f:84:
                    92:11:ca:5d:63:c7:3c:fa:fc:59:ad:e2:70:fe:2d:
                    5d:12:59:f0:45:76:68:a7:fd:c6:ed:d0:b3:f1:54:
                    53:01:22:d5:61:e8:60:04:a8:bf:b6:62:3b:e5:17:
                    b4:33:a9:c6:6f:14:9b:b2:a5:34:c4:5f:83:85:22:
                    ec:f5:58:c7:61:02:f6:3b:ac:9a:05:52:5b:5c:2a:
                    b3:2f:c4:20:38:cc:5b:52:24:06:3d:0f:16:f0:a0:
                    62:08:70:03:1e:15:51:82:2a:88:5b:35:d9:c3:af:
                    44:b4:19:d3:51:9c:09:9c:b7:67:b4:56:57:59:b8:
                    f1:31:1e:f8:ec:53:55:98:b1:5f:b4:93:42:25:60:
                    e7:ec:bb:35:7e:ca:fe:90:01:a6:a5:4c:1b:ab:66:
                    a9:c3:1e:23:af:cf:c8:fa:ff:28:cd:6d:a1:6e:dc:
                    51:7f:6b:10:3e:79:13:43:73:c9:6e:f1:04:3b:a0:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:51:8C:7B:B7:46:E6:64:A5:DF:A5:6E:00:21:6B:5B:AD:E5:A9:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.crl

            X509v3 Authority Key Identifier:
                keyid:7D:3C:6F:EE:64:A5:DD:6E:94:A6:94:A7:7D:7E:19:2C:46:EF:3D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.176.0/20
                  52.124.22.0/23
                  64.45.182.0/23
                  104.254.40.0/22
                  104.255.160.0/21
                  199.202.0.0/19
                  209.127.128.0/21
                  216.211.144.0/20
                IPv6:
                  2607:a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:81:be:5c:b8:ce:1c:e5:96:b4:f7:41:9f:0c:d6:7e:6e:b0:
         3b:cc:56:47:dd:9c:ad:90:cb:de:c6:f2:cf:ba:96:81:d1:fb:
         96:0b:94:ac:22:d5:87:bf:b3:c1:dd:de:9f:a5:df:6d:01:93:
         ca:18:c9:88:5f:d7:b6:49:64:4c:f9:c1:ff:89:1b:c5:e3:32:
         bd:9d:b3:17:69:26:53:28:07:20:c6:1c:ba:cc:ad:2f:74:c1:
         6c:1c:72:50:5c:39:2a:4c:b3:40:3d:6b:e9:04:77:9e:68:f2:
         93:c7:ca:cb:2b:e6:98:ee:37:1e:64:08:ad:70:23:93:09:b0:
         11:00:49:4f:62:24:9a:67:4e:a1:07:09:ea:c4:d7:39:ed:ba:
         09:97:c1:31:55:55:86:90:51:94:8f:6f:9b:8a:41:36:44:df:
         40:73:09:e9:7a:73:38:67:52:d3:4d:08:51:15:90:36:87:83:
         81:31:05:4c:81:00:9c:d2:1c:8d:74:fb:1a:22:e7:84:ef:6d:
         57:1f:d4:35:98:d7:d0:f5:3d:9c:4e:d2:6d:c0:02:0f:9b:88:
         ed:66:ce:64:0a:86:07:bd:f6:f4:b0:76:03:21:2a:34:df:99:
         95:e7:18:7b:33:fa:e9:aa:8b:68:45:7d:2e:5d:ae:c5:a1:3b:
         14:46:fb:41
-----BEGIN CERTIFICATE-----
MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWEkIgZT0LSz5qJFO+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjE0ZWI2YmYtNTE0MS00ZTlkLWEwZmEtNTcxYWEyNGFk
NWI4MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
NDc2ZGEzMGEtY2YyYi00ZDg1LWIwNWItNTFkZmJlMGY0OTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl/Bl5Eqwx2SGa8IHKEDMTGZjmx/ii1dUWAv
ndII3rLaqcxogWH9NsXMdUAcbkhJdEIcMMeF6sdGCA/aek3cgOGrn1Kll+tKH4SS
EcpdY8c8+vxZreJw/i1dElnwRXZop/3G7dCz8VRTASLVYehgBKi/tmI75Re0M6nG
bxSbsqU0xF+DhSLs9VjHYQL2O6yaBVJbXCqzL8QgOMxbUiQGPQ8W8KBiCHADHhVR
giqIWzXZw69EtBnTUZwJnLdntFZXWbjxMR747FNVmLFftJNCJWDn7Ls1fsr+kAGm
pUwbq2apwx4jr8/I+v8ozW2hbtxRf2sQPnkTQ3PJbvEEO6BdOQIDAQABo4IDjjCC
A4owHQYDVR0OBBYEFFpRjHu3RuZkpd+lbgAha1ut5anvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMTRl
YjZiZi01MTQxLTRlOWQtYTBmYS01NzFhYTI0YWQ1YjgvN2Y0MjI3NTUtNGQ4ZC0z
YmUwLTllMWMtNjBhZDFmNTk5NmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjE0ZWI2YmYtNTE0MS00ZTlkLWEw
ZmEtNTcxYWEyNGFkNWI4L2YxNGViNmJmLTUxNDEtNGU5ZC1hMGZhLTU3MWFhMjRh
ZDViOC5jcmwwHwYDVR0jBBgwFoAUfTxv7mSl3W6UppSnfX4ZLEbvPYwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMTRlYjZiZi01MTQxLTRlOWQtYTBmYS01NzFh
YTI0YWQ1YjguY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQEF/ywAwQB
NHwWAwQBQC22AwQCaP4oAwQDaP+gAwQFx8oAAwQD0X+AAwQE2NOQMA0EAgACMAcD
BQAmBwqAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAMCBvly4zhzllrT3QZ8M1n5usDvMVkfdnK2Qy97G8s+6
loHR+5YLlKwi1Ye/s8Hd3p+l320Bk8oYyYhf17ZJZEz5wf+JG8XjMr2dsxdpJlMo
ByDGHLrMrS90wWwcclBcOSpMs0A9a+kEd55o8pPHyssr5pjuNx5kCK1wI5MJsBEA
SU9iJJpnTqEHCerE1zntugmXwTFVVYaQUZSPb5uKQTZE30BzCel6czhnUtNNCFEV
kDaHg4ExBUyBAJzSHI10+xoi54TvbVcf1DWY19D1PZxO0m3AAg+biO1mzmQKhge9
9vSwdgMhKjTfmZXnGHsz+umqi2hFfS5drsWhOxRG+0E=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:07 2025 by rpki-client