Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9e7492d4-a2cf-3439-b333-ebe5fb6dc2a0.roa
File:                     9e7492d4-a2cf-3439-b333-ebe5fb6dc2a0.roa (raw, json)
Hash identifier:          d+RKVsYUB4HU2f5HpjtKkuFLW0yz4FPG/ej/059E8+I=
Subject key identifier:   2B:E0:2E:89:D2:93:AF:1B:43:FF:B1:CD:6F:DC:EA:3B:BE:D1:33:43
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848A101F547A075702812529040
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9e7492d4-a2cf-3439-b333-ebe5fb6dc2a0.roa
Signing time:             Wed 22 Jan 2025 12:15:59 +0000
ROA not before:           Wed 22 Jan 2025 12:15:59 +0000
ROA not after:            Tue 22 Apr 2025 11:15:59 +0000
asID:                     1239
IP address blocks:        67.159.31.0/24 maxlen: 24
                          67.159.63.0/24 maxlen: 24
                          2001:49f0:d119::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:01:f5:47:a0:75:70:28:12:52:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jan 22 12:15:59 2025 GMT
            Not After : Apr 22 11:15:59 2025 GMT
        Subject: CN=041158cf-3a6a-473c-82c6-19aadf75b27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8f:03:ae:ff:d9:68:50:63:6a:98:1c:31:42:
                    fd:48:38:3b:b2:32:1a:f5:78:f4:7e:70:64:2d:0e:
                    10:30:52:33:49:ca:7b:b7:5b:69:08:08:5f:59:86:
                    d1:24:41:b8:7d:ab:f6:43:95:ea:14:bf:e4:0f:32:
                    1c:6a:cf:6c:45:b4:5a:33:cf:58:45:19:5d:b3:95:
                    fe:86:f8:51:cb:2d:6c:4a:40:bf:63:76:af:ea:4a:
                    97:dd:89:0f:80:40:a7:5b:8b:5e:64:c4:23:f0:92:
                    d2:84:19:08:2b:1f:be:a6:40:5f:7e:ae:cd:d4:17:
                    d3:d1:4b:ca:c4:11:06:34:bd:85:62:a3:89:00:a5:
                    10:12:d9:15:1f:02:09:50:97:6d:fa:7a:90:74:8b:
                    9e:ab:9a:66:b1:14:79:94:bc:8c:55:8d:98:4a:de:
                    f0:e9:a3:6b:9a:ec:d6:76:ea:73:cf:78:91:e5:4a:
                    25:21:d7:7c:6b:59:e5:45:89:77:c6:b0:f5:1b:44:
                    e0:42:a5:65:8c:6e:1d:ce:ba:eb:03:dc:6f:df:f6:
                    f3:f8:c4:f7:31:7f:12:0b:d0:8d:bb:0b:e6:78:4f:
                    ba:ad:e7:3f:2e:72:d3:44:85:bd:8f:c2:4b:be:5c:
                    26:e7:dd:e1:28:98:e5:f9:84:2a:c7:e1:c6:ab:23:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E0:2E:89:D2:93:AF:1B:43:FF:B1:CD:6F:DC:EA:3B:BE:D1:33:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9e7492d4-a2cf-3439-b333-ebe5fb6dc2a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.31.0/24
                  67.159.63.0/24
                IPv6:
                  2001:49f0:d119::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a0:12:8f:b7:c1:56:30:0a:b3:21:ba:ed:1b:6c:b6:bb:27:
         8a:14:0d:19:79:6d:8e:d0:f5:f4:a4:23:30:ad:d7:f4:f4:11:
         58:87:37:30:c4:9b:86:7f:c3:23:ba:8e:2b:1b:44:d8:35:72:
         49:b0:1e:12:0c:3d:b0:2e:01:cc:97:64:b3:60:9c:89:59:34:
         11:9a:c8:0e:4b:f0:bf:0b:72:b1:fc:75:7b:c8:89:a5:5c:6f:
         73:a1:07:11:04:99:93:49:e7:0e:17:1f:25:62:37:79:89:06:
         55:e0:cc:4b:7f:45:95:87:59:ad:21:18:87:1b:c1:ce:0a:e4:
         bd:f5:04:9d:7e:46:00:07:4d:c8:79:07:ad:43:e2:11:76:d2:
         f3:c1:c5:20:d7:53:be:65:90:14:30:4a:f5:d4:7c:ee:ce:b2:
         b6:30:3f:57:49:1f:cd:6b:cf:9b:2e:31:4a:30:05:21:26:87:
         09:89:c0:2a:a5:35:da:fe:2d:c7:08:ba:23:44:e5:6c:07:86:
         5d:60:f6:66:a4:5f:42:8a:b7:bb:b6:cc:fe:48:6c:08:02:dc:
         ea:5d:1f:2b:ed:ac:b1:1c:06:3d:31:68:7a:64:14:22:d9:86:
         3a:44:9c:a5:14:16:48:0a:64:e8:35:2b:84:72:a6:42:0a:0a:
         c3:63:0b:7e
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEihAfVHoHVwKBJSkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDEyMjEyMTU1OVoXDTI1MDQyMjExMTU1OVowLzEtMCsGA1UEAxMk
MDQxMTU4Y2YtM2E2YS00NzNjLTgyYzYtMTlhYWRmNzViMjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi48Drv/ZaFBjapgcMUL9SDg7sjIa9Xj0fnBk
LQ4QMFIzScp7t1tpCAhfWYbRJEG4fav2Q5XqFL/kDzIcas9sRbRaM89YRRlds5X+
hvhRyy1sSkC/Y3av6kqX3YkPgECnW4teZMQj8JLShBkIKx++pkBffq7N1BfT0UvK
xBEGNL2FYqOJAKUQEtkVHwIJUJdt+nqQdIueq5pmsRR5lLyMVY2YSt7w6aNrmuzW
dupzz3iR5UolIdd8a1nlRYl3xrD1G0TgQqVljG4dzrrrA9xv3/bz+MT3MX8SC9CN
uwvmeE+6rec/LnLTRIW9j8JLvlwm593hKJjl+YQqx+HGqyMt+QIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFCvgLonSk68bQ/+xzW/c6ju+0TNDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOWU3NDkyZDQtYTJjZi0z
NDM5LWIzMzMtZWJlNWZiNmRjMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQ58fAwQA
Q58/MA8EAgACMAkDBwAgAUnw0RkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI6ASj7fBVjAKsyG67Rtstrsn
ihQNGXltjtD19KQjMK3X9PQRWIc3MMSbhn/DI7qOKxtE2DVySbAeEgw9sC4BzJdk
s2CciVk0EZrIDkvwvwtysfx1e8iJpVxvc6EHEQSZk0nnDhcfJWI3eYkGVeDMS39F
lYdZrSEYhxvBzgrkvfUEnX5GAAdNyHkHrUPiEXbS88HFINdTvmWQFDBK9dR87s6y
tjA/V0kfzWvPmy4xSjAFISaHCYnAKqU12v4txwi6I0TlbAeGXWD2ZqRfQoq3u7bM
/khsCALc6l0fK+2ssRwGPTFoemQUItmGOkScpRQWSApk6DUrhHKmQgoKw2MLfg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:10 2025 by rpki-client