Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa
File:                     8b95ee2f-7ef0-380e-848e-47d344eab792.roa (raw, json)
Hash identifier:          HXNY9Pg8HBrnGD15u9OK4wpnvHEbJU2Ol6dPGvXGsQw=
Subject key identifier:   6A:60:CE:EF:F3:67:12:2E:2F:56:62:88:6F:3B:EC:19:5A:CE:41:7C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150DD76F3A51DD029908F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.214.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:dd:76:f3:a5:1d:d0:29:90:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=8b039725-0704-4c82-8beb-eab9e99e3ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6f:e4:6d:1c:a8:b4:a2:e9:1d:96:ce:fb:40:
                    f4:57:00:c3:4b:a1:f0:c5:c2:3c:5d:81:de:93:be:
                    e0:23:88:28:0a:8a:3d:c5:c1:28:a0:96:fa:5d:a5:
                    1c:ab:0b:cb:ad:98:98:d5:8a:8d:73:79:d7:b7:4b:
                    d9:fc:66:2e:c5:03:3d:e1:33:e0:05:9c:35:fe:31:
                    9d:ab:05:4a:97:30:30:35:d7:ba:10:5d:8e:36:37:
                    a5:8f:77:3b:a4:3c:d7:f9:df:a4:fa:73:b2:1a:b3:
                    69:e7:b7:3a:7a:be:7a:ff:72:b8:32:df:fb:9b:8d:
                    71:7e:d3:86:46:b2:96:08:ba:24:b4:14:2d:66:18:
                    1c:86:aa:0d:3f:11:7c:f2:4a:fa:1b:2b:dd:f2:4d:
                    eb:02:c0:26:23:b5:05:51:c0:52:a6:55:17:c4:eb:
                    41:4b:50:9b:82:92:ff:f5:63:be:c8:21:b2:7b:c3:
                    55:09:d7:92:21:86:d2:91:d4:50:44:06:cc:9a:c8:
                    44:ac:f9:60:22:e2:ac:a6:d7:0b:98:b3:dd:b3:d5:
                    f4:35:2f:c3:de:9b:bd:8f:54:6d:3e:48:3d:f2:8d:
                    ba:1a:2e:0d:85:25:0d:17:94:ed:e0:79:5f:25:7a:
                    0f:c2:f1:38:b8:ef:c4:cb:de:fa:6f:d9:c0:ce:1d:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:60:CE:EF:F3:67:12:2E:2F:56:62:88:6F:3B:EC:19:5A:CE:41:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ed:6a:73:2a:84:b3:c4:02:05:54:d4:17:b7:e3:86:d4:09:
         50:1e:ca:2d:5b:7a:de:3d:d5:4b:7d:ad:0b:d8:29:3b:ae:84:
         ad:8f:2c:56:f4:26:0c:f1:48:95:be:a1:0c:81:50:3d:f3:2a:
         2b:5e:6b:ec:fc:98:b6:8b:74:45:a9:9a:97:b6:fd:8b:66:05:
         7d:47:5c:3c:0f:ca:b7:0e:37:18:02:30:86:19:72:a0:d9:84:
         96:68:9c:10:85:38:01:48:30:ff:1b:26:e8:e8:38:c0:7d:07:
         4e:b3:cc:de:86:ae:58:6e:c8:b9:ef:0a:86:fd:61:4c:b8:77:
         cc:5e:9f:70:63:be:39:0f:81:b5:f6:e9:9d:8a:fb:6b:59:a4:
         c8:85:dd:2b:c1:cb:bd:3b:7d:04:97:cd:86:1b:e4:41:02:3f:
         a4:1e:30:5b:44:21:02:4a:3f:b5:a8:96:7e:79:de:70:1b:16:
         1a:8f:3d:7b:94:59:85:d0:cc:1e:04:d1:f7:4e:08:a3:52:b8:
         db:4c:64:75:b2:47:13:48:81:39:54:c0:a6:cf:2f:3c:73:92:
         6d:c2:00:e3:19:83:69:df:62:2e:3c:ec:f8:16:0e:43:b5:d8:
         9e:be:8f:2c:bf:b8:73:79:0b:6b:1d:1a:28:db:33:b8:40:35:
         d8:77:94:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUN1286Ud0CmQj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
OGIwMzk3MjUtMDcwNC00YzgyLThiZWItZWFiOWU5OWUzY2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82/kbRyotKLpHZbO+0D0VwDDS6HwxcI8XYHe
k77gI4goCoo9xcEooJb6XaUcqwvLrZiY1YqNc3nXt0vZ/GYuxQM94TPgBZw1/jGd
qwVKlzAwNde6EF2ONjelj3c7pDzX+d+k+nOyGrNp57c6er56/3K4Mt/7m41xftOG
RrKWCLoktBQtZhgchqoNPxF88kr6Gyvd8k3rAsAmI7UFUcBSplUXxOtBS1CbgpL/
9WO+yCGye8NVCdeSIYbSkdRQRAbMmshErPlgIuKsptcLmLPds9X0NS/D3pu9j1Rt
Pkg98o26Gi4NhSUNF5Tt4HlfJXoPwvE4uO/Ey976b9nAzh17GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpgzu/zZxIuL1ZiiG877BlazkF8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGI5NWVlMmYtN2VmMC0z
ODBlLTg0OGUtNDdkMzQ0ZWFiNzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALTtanMqhLPEAgVU1Be344bUCVAeyi1bet491Ut9rQvYKTuuhK2PLFb0
JgzxSJW+oQyBUD3zKitea+z8mLaLdEWpmpe2/YtmBX1HXDwPyrcONxgCMIYZcqDZ
hJZonBCFOAFIMP8bJujoOMB9B06zzN6GrlhuyLnvCob9YUy4d8xen3BjvjkPgbX2
6Z2K+2tZpMiF3SvBy707fQSXzYYb5EECP6QeMFtEIQJKP7Woln553nAbFhqPPXuU
WYXQzB4E0fdOCKNSuNtMZHWyRxNIgTlUwKbPLzxzkm3CAOMZg2nfYi487PgWDkO1
2J6+jyy/uHN5C2sdGijbM7hANdh3lAM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:22 2025 by rpki-client