Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/28c1eeab-c5dc-30c5-b684-5d677df94974.roa
File:                     28c1eeab-c5dc-30c5-b684-5d677df94974.roa (raw, json)
Hash identifier:          gIYZB6H7JGwftMbNOt4nI0Pi90diaDOBWtl1EpYAJTI=
Subject key identifier:   12:E1:02:0D:F0:5C:17:31:A4:09:7A:18:EF:02:9B:76:4B:C9:AD:70
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F432858488AE0993AF4F66915B6099200
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/28c1eeab-c5dc-30c5-b684-5d677df94974.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     13760
IP address blocks:        142.190.2.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:99:3a:f4:f6:69:15:b6:09:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=3620c75d-51bd-4a56-bdf1-f5672cc203fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:64:a2:0c:c7:f7:d2:12:42:dd:01:ff:5f:60:
                    5a:f5:e0:12:d0:62:3d:ec:28:c8:c9:5a:4f:b8:45:
                    9c:ac:ef:55:a7:0f:b9:ae:a0:92:25:d1:72:5d:60:
                    5e:1e:0e:f9:92:83:02:13:03:64:20:ac:a9:81:51:
                    f1:3e:cc:81:c8:d7:7b:ac:66:cc:55:ef:e4:aa:b5:
                    3e:d5:71:2e:8d:a8:b2:28:72:ba:dd:4b:59:ea:cf:
                    c2:20:e5:0c:bb:54:5e:77:2d:4e:1c:6f:60:95:48:
                    d3:be:ce:6f:bd:50:8b:5d:aa:08:30:ed:13:4c:e6:
                    73:9e:11:6d:bd:29:c9:2b:71:7e:3a:59:97:4e:a2:
                    d4:86:47:71:aa:99:b6:b4:31:d0:73:3e:f5:18:c2:
                    7a:2d:8d:ea:74:0e:ff:f2:54:cc:53:42:61:25:68:
                    ae:92:1e:b2:b6:8e:93:68:26:95:32:97:10:01:36:
                    96:3a:aa:58:42:04:61:2c:3a:bc:e1:5b:42:1c:e4:
                    34:ff:d6:68:bf:7c:6a:4d:89:7e:fe:f1:da:fb:f6:
                    76:c5:6e:f8:e8:68:81:4a:b8:54:11:14:b6:18:e5:
                    ed:d4:7c:be:07:ac:bc:f6:a8:62:39:d9:1e:ab:19:
                    34:88:b2:07:71:be:51:d8:22:53:d7:fd:c0:a0:52:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E1:02:0D:F0:5C:17:31:A4:09:7A:18:EF:02:9B:76:4B:C9:AD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/28c1eeab-c5dc-30c5-b684-5d677df94974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9f:47:fa:3e:13:ff:d8:9d:0f:1e:13:0c:df:78:a4:d0:b5:
         4a:01:39:0c:e8:a6:3a:70:59:50:26:86:8b:a5:6e:20:57:92:
         55:f5:34:15:3e:66:cc:e2:4b:3d:8a:4e:e0:18:a1:66:49:ae:
         7a:f0:32:2d:3f:1d:30:b8:a2:71:18:a5:d2:bd:e2:70:e4:89:
         a6:7a:50:76:4c:3d:c4:a7:10:5d:50:35:f8:d5:31:3e:cd:9d:
         db:5b:42:81:2f:64:7f:d9:3d:9a:b9:5f:62:df:13:01:f9:ae:
         b5:a2:8e:40:bc:0a:df:81:af:8f:9c:98:09:10:9b:60:2a:31:
         1a:bc:77:7f:db:fe:96:30:83:72:7b:fb:bf:25:c6:d7:03:b2:
         bc:2f:b2:df:7d:02:90:7e:d1:aa:3b:d3:b4:fe:49:c5:33:9a:
         be:68:01:2d:bb:0e:35:97:d3:96:c4:43:1d:06:ab:ca:a2:66:
         65:18:2e:35:94:32:32:c5:ec:45:57:af:92:b2:b1:9c:9b:3a:
         8a:c9:bd:08:41:c0:19:54:27:55:45:33:e3:d9:a8:73:bb:d7:
         68:d3:29:8d:9b:a5:60:95:45:4e:af:18:95:52:d8:d2:06:9b:
         e5:6d:16:8c:a3:cf:81:a9:e1:58:73:c6:68:2e:ee:8e:ed:fb:
         3a:52:24:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4Jk69PZpFbYJkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
MzYyMGM3NWQtNTFiZC00YTU2LWJkZjEtZjU2NzJjYzIwM2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWSiDMf30hJC3QH/X2Ba9eAS0GI97CjIyVpP
uEWcrO9Vpw+5rqCSJdFyXWBeHg75koMCEwNkIKypgVHxPsyByNd7rGbMVe/kqrU+
1XEujaiyKHK63UtZ6s/CIOUMu1Redy1OHG9glUjTvs5vvVCLXaoIMO0TTOZznhFt
vSnJK3F+OlmXTqLUhkdxqpm2tDHQcz71GMJ6LY3qdA7/8lTMU0JhJWiukh6yto6T
aCaVMpcQATaWOqpYQgRhLDq84VtCHOQ0/9Zov3xqTYl+/vHa+/Z2xW746GiBSrhU
ERS2GOXt1Hy+B6y89qhiOdkeqxk0iLIHcb5R2CJT1/3AoFKm8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLhAg3wXBcxpAl6GO8Cm3ZLya1wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvMjhjMWVlYWItYzVkYy0z
MGM1LWI2ODQtNWQ2NzdkZjk0OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjr4CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEafR/o+E//YnQ8eEwzfeKTQtUoBOQzopjpwWVAmhoulbiBXklX1NBU+
ZsziSz2KTuAYoWZJrnrwMi0/HTC4onEYpdK94nDkiaZ6UHZMPcSnEF1QNfjVMT7N
ndtbQoEvZH/ZPZq5X2LfEwH5rrWijkC8Ct+Br4+cmAkQm2AqMRq8d3/b/pYwg3J7
+78lxtcDsrwvst99ApB+0ao707T+ScUzmr5oAS27DjWX05bEQx0Gq8qiZmUYLjWU
MjLF7EVXr5KysZybOorJvQhBwBlUJ1VFM+PZqHO712jTKY2bpWCVRU6vGJVS2NIG
m+VtFoyjz4Gp4Vhzxmgu7o7t+zpSJFw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:33 2025 by rpki-client