Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82f851f5-6c09-3d99-a865-b9e7eaaa4951.roa
File:                     82f851f5-6c09-3d99-a865-b9e7eaaa4951.roa (raw, json)
Hash identifier:          /CJbJ6Bv2AmGaGErpd9soWxxPo+L0r7fofdpn5soSWw=
Subject key identifier:   2E:83:B0:43:1C:4F:C9:DB:C2:D2:9C:60:D7:C8:B0:2A:BC:F8:A6:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E8666B4DABEC97C7C8545000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82f851f5-6c09-3d99-a865-b9e7eaaa4951.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.226.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:6b:4d:ab:ec:97:c7:c8:54:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=1ab01a86-a220-4aa3-874f-19685c6440eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:52:16:78:60:ae:87:28:66:a1:b9:48:d4:
                    bb:2f:6c:c8:67:1d:df:81:83:b6:50:75:c8:1d:bf:
                    0f:18:30:48:b0:33:27:6e:75:2a:a8:28:4d:72:a9:
                    35:1f:8b:c2:c7:a8:6c:cb:dc:df:b0:09:d7:07:97:
                    3c:96:e3:77:9e:59:21:cf:ae:0c:8c:14:50:8d:1b:
                    e6:e9:0f:d5:24:0f:47:5d:6e:f3:1d:5f:08:4e:57:
                    e5:8c:92:69:50:4e:de:46:9c:ef:dc:13:8d:47:99:
                    60:d3:2f:8c:45:78:b2:3c:70:99:fb:78:6b:61:8d:
                    4a:b8:47:f7:66:ec:0e:9f:3e:51:04:46:d9:39:80:
                    dd:ac:f1:f9:96:17:9d:3b:77:42:7c:2c:c7:f9:23:
                    38:04:57:56:ec:25:36:50:b8:cf:45:00:2c:20:73:
                    90:99:5c:fa:5a:f1:aa:98:12:68:92:0e:90:7a:b4:
                    bb:9c:78:98:92:7f:b6:30:26:f4:82:8b:91:82:80:
                    85:c4:09:93:bb:e4:a8:c2:f6:e4:be:63:86:ea:a2:
                    6d:fc:57:98:56:dd:79:1b:5f:04:ef:07:cd:6a:87:
                    86:49:90:ef:92:58:c5:1f:d2:7a:eb:a9:bc:76:bd:
                    a6:69:a2:45:7b:27:6c:b3:e3:53:ff:1e:62:fa:da:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:83:B0:43:1C:4F:C9:DB:C2:D2:9C:60:D7:C8:B0:2A:BC:F8:A6:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82f851f5-6c09-3d99-a865-b9e7eaaa4951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ce:bf:b1:13:37:ed:57:40:16:a4:83:66:dc:b0:32:4e:25:
         65:95:c6:35:7b:56:8a:24:d1:7a:ee:42:8d:30:f1:d4:b6:b8:
         ee:fe:ec:2d:92:bb:f3:99:d7:03:fb:34:97:27:c4:e2:59:24:
         d9:83:ea:44:c3:9e:b2:4e:ef:79:fc:86:78:0e:08:72:8d:90:
         02:31:74:23:84:2a:ac:1a:4d:fc:9a:07:fe:6a:c2:b8:b8:bd:
         aa:28:77:8f:6c:91:90:1f:58:56:7f:9d:72:e4:fa:a9:ee:33:
         28:18:6d:8a:48:7e:d6:ba:16:5a:fb:f2:37:05:25:1b:ea:d7:
         9a:56:2b:3c:71:0c:d1:e6:0d:a5:29:e4:ea:b3:73:8b:dc:98:
         2c:2f:4a:34:97:33:4d:13:46:2a:d2:94:69:51:0f:97:d8:96:
         de:83:c3:e7:28:f4:57:cc:b9:9c:10:5e:59:15:66:22:5e:00:
         16:fd:2e:44:3f:a9:8d:c6:11:20:c1:39:6c:0f:cc:27:02:bc:
         74:33:75:ec:09:d8:8f:d1:d3:83:cb:42:e1:bb:46:7c:9e:8d:
         6e:f3:19:a0:e9:ea:16:bc:c7:25:f7:b3:46:1c:42:7a:06:e9:
         0b:ac:f6:1a:4b:2e:a2:19:a0:66:17:14:33:20:3d:d7:ea:b9:
         b4:27:e2:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmtNq+yXx8hUUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk
MWFiMDFhODYtYTIyMC00YWEzLTg3NGYtMTk2ODVjNjQ0MGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljhSFnhgrocoZqG5SNS7L2zIZx3fgYO2UHXI
Hb8PGDBIsDMnbnUqqChNcqk1H4vCx6hsy9zfsAnXB5c8luN3nlkhz64MjBRQjRvm
6Q/VJA9HXW7zHV8ITlfljJJpUE7eRpzv3BONR5lg0y+MRXiyPHCZ+3hrYY1KuEf3
ZuwOnz5RBEbZOYDdrPH5lhedO3dCfCzH+SM4BFdW7CU2ULjPRQAsIHOQmVz6WvGq
mBJokg6QerS7nHiYkn+2MCb0gouRgoCFxAmTu+SowvbkvmOG6qJt/FeYVt15G18E
7wfNaoeGSZDvkljFH9J666m8dr2maaJFeydss+NT/x5i+trNoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6DsEMcT8nbwtKcYNfIsCq8+KahMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODJmODUxZjUtNmMwOS0z
ZDk5LWE4NjUtYjllN2VhYWE0OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruIQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHOv7ETN+1XQBakg2bcsDJOJWWVxjV7Vook0XruQo0w8dS2uO7+7C2S
u/OZ1wP7NJcnxOJZJNmD6kTDnrJO73n8hngOCHKNkAIxdCOEKqwaTfyaB/5qwri4
vaood49skZAfWFZ/nXLk+qnuMygYbYpIfta6Flr78jcFJRvq15pWKzxxDNHmDaUp
5Oqzc4vcmCwvSjSXM00TRirSlGlRD5fYlt6Dw+co9FfMuZwQXlkVZiJeABb9LkQ/
qY3GESDBOWwPzCcCvHQzdewJ2I/R04PLQuG7RnyejW7zGaDp6ha8xyX3s0YcQnoG
6Qus9hpLLqIZoGYXFDMgPdfqubQn4iA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:17 2025 by rpki-client