Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23990d3a-3326-375b-a6bb-9754f63016b6.roa
File:                     23990d3a-3326-375b-a6bb-9754f63016b6.roa (raw, json)
Hash identifier:          bPnZ7I7vQ3x1kCkjTaoN0fXaTqOp3Esv1Pah2Fk6sFo=
Subject key identifier:   11:BA:1E:5F:72:05:8C:16:57:BB:4E:52:8D:E0:55:7A:B1:AD:0C:11
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849287E6FFB486553B9F7F22100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23990d3a-3326-375b-a6bb-9754f63016b6.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        104.79.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6f:fb:48:65:53:b9:f7:f2:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=a3116d87-ce6b-4869-aabb-1cebac9e0789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:13:6e:60:3f:29:00:f7:5f:8c:6a:e5:ed:0e:
                    6c:a2:d5:81:a7:d9:5d:6a:42:b7:14:b9:ae:51:34:
                    e0:07:aa:4d:96:ab:5a:c2:0f:e2:d0:43:5c:8e:33:
                    95:97:64:5f:28:81:4b:6c:de:f1:0e:3a:e3:ed:3f:
                    b6:3e:9a:8f:69:57:39:78:17:c0:05:8d:97:15:67:
                    be:54:6e:45:33:0e:9d:8b:21:92:ce:b6:10:42:94:
                    c9:92:ab:70:2e:3b:99:d4:46:4a:a0:cb:76:78:ef:
                    de:f6:83:0c:88:74:45:4e:f3:df:7d:96:a6:11:77:
                    70:51:40:29:98:1e:05:f9:91:6c:95:68:7b:bc:fe:
                    8a:d7:4f:f0:43:2a:5f:09:0d:27:2b:ee:56:f7:9e:
                    71:fa:82:12:f9:71:a2:da:02:1f:85:9e:31:23:4a:
                    04:6a:f4:08:2e:7e:18:a8:db:2d:bb:ec:18:99:e0:
                    12:53:83:02:b0:59:ef:c6:c3:dd:e4:14:8f:ab:6a:
                    45:a6:53:57:9c:a6:c0:47:d7:1d:62:95:84:23:6c:
                    94:2b:3f:7c:31:b6:21:88:f1:c6:f7:1e:cb:d3:40:
                    b5:dc:f0:8a:2b:1e:e2:00:00:d0:e6:6e:f6:16:00:
                    3d:f2:be:f3:87:f2:5b:82:3a:56:b0:06:d0:9a:e1:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BA:1E:5F:72:05:8C:16:57:BB:4E:52:8D:E0:55:7A:B1:AD:0C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23990d3a-3326-375b-a6bb-9754f63016b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.79.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b7:95:d2:9c:80:0c:f7:9b:4c:9d:bd:6d:b4:32:e1:3a:e1:
         19:33:97:98:17:80:24:d1:9f:33:9a:92:ee:b4:37:f0:c6:a8:
         5c:99:ed:a4:88:7a:2b:b5:d9:30:34:3b:78:d0:3d:61:3b:2a:
         13:d6:19:4e:4d:79:8b:db:7c:6e:ec:af:84:31:06:2d:88:7d:
         ef:f0:bb:e9:92:7a:83:16:ab:28:bf:ba:48:32:7d:51:32:89:
         d5:98:8c:ca:d2:94:0e:49:fd:92:5c:87:78:1b:13:ac:66:37:
         0c:5d:9d:4d:6a:e4:61:b6:47:f0:c6:8d:33:4a:c7:99:7b:15:
         4e:b2:df:91:59:00:4f:5d:6c:d7:11:28:45:c6:f8:cd:6a:67:
         12:b9:57:26:a0:f5:30:2f:1a:13:32:48:fe:d8:af:f0:4b:9c:
         79:86:f2:d8:92:b1:ab:1b:d6:22:ff:30:d7:18:9f:8e:3a:b8:
         98:62:81:7c:04:67:29:a3:be:d9:21:12:51:4f:c0:0b:87:7b:
         45:2f:70:6e:c4:2d:73:12:72:bb:dd:e7:5d:b3:31:57:41:c2:
         98:7a:f8:43:46:60:00:ad:38:d4:90:6c:9d:c2:59:20:79:7e:
         b6:7e:73:74:a4:d6:6f:97:c0:26:4c:46:86:db:3f:5f:28:a2:
         e2:d9:65:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofm/7SGVTuffyIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
YTMxMTZkODctY2U2Yi00ODY5LWFhYmItMWNlYmFjOWUwNzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBNuYD8pAPdfjGrl7Q5sotWBp9ldakK3FLmu
UTTgB6pNlqtawg/i0ENcjjOVl2RfKIFLbN7xDjrj7T+2PpqPaVc5eBfABY2XFWe+
VG5FMw6diyGSzrYQQpTJkqtwLjuZ1EZKoMt2eO/e9oMMiHRFTvPffZamEXdwUUAp
mB4F+ZFslWh7vP6K10/wQypfCQ0nK+5W955x+oIS+XGi2gIfhZ4xI0oEavQILn4Y
qNstu+wYmeASU4MCsFnvxsPd5BSPq2pFplNXnKbAR9cdYpWEI2yUKz98MbYhiPHG
9x7L00C13PCKKx7iAADQ5m72FgA98r7zh/JbgjpWsAbQmuE8awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBG6Hl9yBYwWV7tOUo3gVXqxrQwRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjM5OTBkM2EtMzMyNi0z
NzViLWE2YmItOTc1NGY2MzAxNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaE9cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAa3ldKcgAz3m0ydvW20MuE64Rkzl5gXgCTRnzOaku60N/DGqFyZ7aSI
eiu12TA0O3jQPWE7KhPWGU5NeYvbfG7sr4QxBi2Ife/wu+mSeoMWqyi/ukgyfVEy
idWYjMrSlA5J/ZJch3gbE6xmNwxdnU1q5GG2R/DGjTNKx5l7FU6y35FZAE9dbNcR
KEXG+M1qZxK5Vyag9TAvGhMySP7Yr/BLnHmG8tiSsasb1iL/MNcYn446uJhigXwE
ZymjvtkhElFPwAuHe0UvcG7ELXMScrvd512zMVdBwph6+ENGYACtONSQbJ3CWSB5
frZ+c3Sk1m+XwCZMRobbP18oouLZZQA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:50 2025 by rpki-client