Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a490aad9-547a-3971-a472-5898573587a4.roa
File:                     a490aad9-547a-3971-a472-5898573587a4.roa (raw, json)
Hash identifier:          0hLlWOtSABbWOX7Ozti2jmF2C2FJ4JWvr9ivAoXPCNc=
Subject key identifier:   54:15:85:FC:D6:D4:F9:A2:1C:0A:56:1F:CF:D2:CA:3C:07:E2:A4:C0
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584F7BB30E8C20928BEDC3527B48
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a490aad9-547a-3971-a472-5898573587a4.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     14618
IP address blocks:        66.114.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:0e:8c:20:92:8b:ed:c3:52:7b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=610d412c-0daa-435f-af45-a204e2472f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:e0:a5:19:35:b8:8b:f5:11:1c:0c:85:6c:
                    57:be:3d:53:ab:0a:63:a9:60:f9:7a:e5:d1:81:fc:
                    c3:e2:c6:c5:ce:f8:aa:95:c4:85:bd:37:fb:03:83:
                    8d:ea:68:ec:09:d6:ef:a7:92:cc:c5:21:c5:b9:2f:
                    20:b0:47:f7:17:a3:a7:ae:1e:b4:7d:bf:b2:4a:02:
                    05:ae:d3:54:b4:f6:fc:ff:90:01:16:f8:2c:8b:24:
                    12:35:14:e7:70:93:fa:c7:6a:47:a4:af:33:93:d9:
                    43:0a:7d:8b:40:2e:35:f1:82:50:e8:ab:1c:d9:a8:
                    5b:c6:54:18:9b:04:69:44:d0:20:2d:2e:6c:13:89:
                    92:de:f5:5b:9f:1e:fb:f6:6e:43:f1:98:10:17:8a:
                    02:7f:ef:5a:6a:fb:83:11:91:be:11:ae:b6:5b:a9:
                    a8:b9:12:67:b9:13:a6:d1:9a:e8:00:35:b5:7d:4d:
                    49:3e:87:44:e2:02:9e:6e:4a:b5:5c:27:42:d6:90:
                    a9:ec:e4:70:75:78:0f:ea:91:f9:39:7f:e7:db:da:
                    70:ca:29:c0:02:97:a0:de:72:7c:67:94:73:c3:b4:
                    71:ee:3f:59:21:ce:90:94:35:61:9e:91:41:4a:5d:
                    e6:af:0e:c2:3a:d6:74:82:5f:ed:ab:a9:b7:24:9d:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:15:85:FC:D6:D4:F9:A2:1C:0A:56:1F:CF:D2:CA:3C:07:E2:A4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a490aad9-547a-3971-a472-5898573587a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:a0:cd:a6:3f:1a:d1:1c:85:f3:a9:7d:15:08:c5:82:ac:
         7d:b0:06:93:6b:c4:41:d3:ba:48:7f:d7:70:44:8f:ee:b0:f8:
         41:7f:29:19:44:89:be:f7:5a:4f:7f:01:e2:b8:3a:2e:3c:ff:
         2b:bf:30:38:29:d7:2e:63:45:49:18:d6:3f:31:28:45:46:c9:
         ac:a9:56:e8:88:2a:a8:45:d6:8f:0d:46:01:55:2e:d4:c3:7a:
         5e:e5:9e:5e:57:43:85:13:cb:49:07:72:55:1d:0b:d2:75:79:
         5b:33:7f:d1:8b:e0:90:66:a7:cb:09:31:e2:46:44:91:27:48:
         66:e9:00:d0:ae:d6:35:fe:ac:d9:57:4b:3d:01:a1:52:10:f6:
         70:df:ed:ff:6e:61:3c:bf:37:f6:ee:95:18:24:34:13:62:68:
         ab:cf:5d:b9:cd:2b:30:6c:89:56:34:52:e2:c4:0e:f2:ca:1e:
         77:33:a2:2f:72:9e:b3:c9:41:69:34:e9:2c:4b:0b:92:61:8e:
         ab:47:59:ba:31:95:16:ab:13:5b:bc:93:5a:b4:6e:41:63:78:
         66:09:d2:ff:83:96:71:cb:d7:b7:3e:55:33:cc:4d:f5:cc:a7:
         9d:f8:84:71:97:4c:0b:44:93:3c:00:1e:83:d4:9d:97:6d:86:
         04:88:62:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sw6MIJKL7cNSe0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5
OTg4MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk
NjEwZDQxMmMtMGRhYS00MzVmLWFmNDUtYTIwNGUyNDcyZjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwHgpRk1uIv1ERwMhWxXvj1TqwpjqWD5euXR
gfzD4sbFzviqlcSFvTf7A4ON6mjsCdbvp5LMxSHFuS8gsEf3F6Onrh60fb+ySgIF
rtNUtPb8/5ABFvgsiyQSNRTncJP6x2pHpK8zk9lDCn2LQC418YJQ6Ksc2ahbxlQY
mwRpRNAgLS5sE4mS3vVbnx779m5D8ZgQF4oCf+9aavuDEZG+Ea62W6mouRJnuROm
0ZroADW1fU1JPodE4gKebkq1XCdC1pCp7ORwdXgP6pH5OX/n29pwyinAApeg3nJ8
Z5Rzw7Rx7j9ZIc6QlDVhnpFBSl3mrw7COtZ0gl/tq6m3JJ3GmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQVhfzW1PmiHApWH8/SyjwH4qTAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2
NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvYTQ5MGFhZDktNTQ3YS0z
OTcxLWE0NzItNTg5ODU3MzU4N2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz
ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3
OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm
N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnJMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5ToM2mPxrRHIXzqX0VCMWCrH2wBpNrxEHTukh/13BEj+6w+EF/KRlE
ib73Wk9/AeK4Oi48/yu/MDgp1y5jRUkY1j8xKEVGyaypVuiIKqhF1o8NRgFVLtTD
el7lnl5XQ4UTy0kHclUdC9J1eVszf9GL4JBmp8sJMeJGRJEnSGbpANCu1jX+rNlX
Sz0BoVIQ9nDf7f9uYTy/N/bulRgkNBNiaKvPXbnNKzBsiVY0UuLEDvLKHnczoi9y
nrPJQWk06SxLC5JhjqtHWboxlRarE1u8k1q0bkFjeGYJ0v+DlnHL17c+VTPMTfXM
p534hHGXTAtEkzwAHoPUnZdthgSIYk8=
-----END CERTIFICATE-----