Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9b48e1e-80c2-3cc2-bf52-5255095404e3.roa
File:                     c9b48e1e-80c2-3cc2-bf52-5255095404e3.roa (raw, json)
Hash identifier:          mZgpWuUuva3s517SBqh3Nrihql2Fyvq/oaYvNjVm9zA=
Subject key identifier:   DF:2D:84:DB:5E:39:C7:27:9B:D7:A7:6C:F6:37:CF:DB:14:00:23:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB457B071C7703CFF1C100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9b48e1e-80c2-3cc2-bf52-5255095404e3.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     701
IP address blocks:        141.152.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:45:7b:07:1c:77:03:cf:f1:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=f7107082-14e7-483c-a5e1-30709872ab4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:bc:14:80:36:42:21:e4:00:75:60:11:72:
                    5a:ec:af:ed:d7:fa:b5:da:85:03:d2:b7:a4:76:7e:
                    7c:d5:8a:e9:dd:e5:05:35:e0:82:c1:12:74:17:4b:
                    68:bb:e8:fb:dd:97:9d:ca:bf:f7:fb:50:a1:05:5c:
                    43:4d:97:d5:ab:0d:c5:c1:7b:d3:60:5b:61:0c:6c:
                    7d:d9:08:46:04:d2:80:38:3e:4b:44:58:61:15:46:
                    8d:4f:e0:1a:bf:4c:1b:f4:57:ca:45:5d:4c:b2:91:
                    1a:dd:d7:dd:a1:8e:a8:a1:2c:fd:71:6e:fc:b3:99:
                    42:04:76:7a:2a:c8:36:d3:d6:51:4a:ef:ee:9e:2c:
                    8c:f0:a1:8a:2c:03:30:ad:e8:9d:64:4b:6a:60:cd:
                    e2:82:92:8e:52:e9:32:dc:e9:f4:42:e8:84:11:2b:
                    ad:9c:0e:6e:72:30:81:15:c6:90:dd:a0:8b:63:3d:
                    d2:97:2c:43:0b:f1:94:67:e1:75:11:d7:10:ba:f2:
                    61:fc:61:42:6b:97:6d:cb:fc:1e:78:6b:b8:ba:71:
                    53:2c:17:d3:76:d1:c8:12:1c:55:bb:e0:ae:34:12:
                    31:cc:84:60:d6:aa:82:e6:fe:65:16:5b:b4:f7:92:
                    1b:c7:55:ba:24:23:7d:13:31:00:58:0c:cb:a3:c8:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2D:84:DB:5E:39:C7:27:9B:D7:A7:6C:F6:37:CF:DB:14:00:23:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9b48e1e-80c2-3cc2-bf52-5255095404e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.152.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:45:f9:68:b6:aa:34:5f:27:ee:a6:df:52:a4:97:ba:6a:b4:
         3d:31:f5:e0:02:6b:63:50:8f:fb:1e:c1:16:18:9c:09:f2:fd:
         fe:73:91:a8:c5:cb:53:83:6a:13:eb:40:c2:33:79:58:33:4a:
         32:6a:61:2f:96:d5:3f:31:aa:c2:0f:6f:bb:23:a8:21:57:ab:
         2d:fc:f5:e9:ca:e7:b9:7d:42:93:20:71:74:cc:ed:46:9e:c1:
         97:3f:89:51:d6:16:67:ac:f5:4d:89:3c:c5:1e:73:31:c7:dc:
         15:04:ca:5b:dd:2c:cc:40:be:10:45:00:26:3c:aa:87:1a:66:
         6a:2a:c7:77:1c:53:3d:c5:f9:ca:33:89:c1:c7:f0:9a:9b:e7:
         81:6c:ad:89:e0:9e:8f:e5:54:72:51:33:83:59:55:bb:6e:4b:
         d3:53:f2:73:b7:de:66:13:82:ea:a0:1e:f8:c1:3c:2b:1c:a6:
         24:9b:68:24:52:04:ba:9d:0a:74:d8:18:41:6a:98:9d:5b:c0:
         b4:80:48:ca:ec:ec:08:19:10:0d:0e:66:96:97:11:77:ed:dd:
         29:a9:cb:93:85:57:00:2a:29:8f:43:d7:4b:dd:6a:9c:90:1c:
         bc:7c:5f:0e:57:92:84:4c:2e:50:0c:77:de:5b:75:88:3d:ee:
         44:3c:03:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh860V7Bxx3A8/xwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjcxMDcwODItMTRlNy00ODNjLWE1ZTEtMzA3MDk4NzJhYjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJS8FIA2QiHkAHVgEXJa7K/t1/q12oUD0rek
dn581Yrp3eUFNeCCwRJ0F0tou+j73Zedyr/3+1ChBVxDTZfVqw3FwXvTYFthDGx9
2QhGBNKAOD5LRFhhFUaNT+Aav0wb9FfKRV1MspEa3dfdoY6ooSz9cW78s5lCBHZ6
Ksg209ZRSu/uniyM8KGKLAMwreidZEtqYM3igpKOUuky3On0QuiEESutnA5ucjCB
FcaQ3aCLYz3SlyxDC/GUZ+F1EdcQuvJh/GFCa5dty/weeGu4unFTLBfTdtHIEhxV
u+CuNBIxzIRg1qqC5v5lFlu095Ibx1W6JCN9EzEAWAzLo8gCRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8thNteOccnm9enbPY3z9sUACNdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzliNDhlMWUtODBjMi0z
Y2MyLWJmNTItNTI1NTA5NTQwNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjZhMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtF+Wi2qjRfJ+6m31Kkl7pqtD0x9eACa2NQj/sewRYYnAny/f5zkajF
y1ODahPrQMIzeVgzSjJqYS+W1T8xqsIPb7sjqCFXqy389enK57l9QpMgcXTM7Uae
wZc/iVHWFmes9U2JPMUeczHH3BUEylvdLMxAvhBFACY8qocaZmoqx3ccUz3F+coz
icHH8Jqb54FsrYngno/lVHJRM4NZVbtuS9NT8nO33mYTguqgHvjBPCscpiSbaCRS
BLqdCnTYGEFqmJ1bwLSASMrs7AgZEA0OZpaXEXft3Smpy5OFVwAqKY9D10vdapyQ
HLx8Xw5XkoRMLlAMd95bdYg97kQ8A/g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:07 2025 by rpki-client