Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/17571fe2-5e51-3939-a350-1d485c4f87e3.roa
File:                     17571fe2-5e51-3939-a350-1d485c4f87e3.roa (raw, json)
Hash identifier:          I9AzCZ8vTQ7cIgXNTg/fPhQkp9BchuJrVetPVWtJUyA=
Subject key identifier:   55:95:91:5F:CB:59:DB:EA:D0:39:5A:E9:90:2C:B7:65:46:F9:2F:7D
Certificate issuer:       /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial:       010D0C9F432858498128ECCFE8ABAC238E080B40
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/17571fe2-5e51-3939-a350-1d485c4f87e3.roa
Signing time:             Sat 12 Apr 2025 19:15:34 +0000
ROA not before:           Sat 12 Apr 2025 19:15:34 +0000
ROA not after:            Fri 11 Jul 2025 19:15:34 +0000
asID:                     834
IP address blocks:        212.115.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:28:ec:cf:e8:ab:ac:23:8e:08:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
        Validity
            Not Before: Apr 12 19:15:34 2025 GMT
            Not After : Jul 11 19:15:34 2025 GMT
        Subject: CN=8af3bc35-d36f-413c-98d9-98427789ca55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:e3:be:37:29:29:15:eb:cb:c9:62:d5:f4:
                    32:e9:65:e7:5a:ea:de:ba:24:d8:a5:7b:b7:1b:d9:
                    53:1f:4b:f1:d5:a9:1f:5b:07:ff:f8:69:f1:14:14:
                    42:9f:53:02:16:09:ad:66:1d:c2:bc:b4:22:fb:38:
                    db:90:48:86:ee:c4:92:6c:f8:59:87:37:0b:60:a2:
                    f4:55:96:8d:75:c4:ba:43:09:19:45:7e:fb:86:55:
                    93:63:c7:12:19:2d:5e:00:dc:d6:24:f4:e0:95:24:
                    d9:28:97:f8:cf:ca:d9:73:a0:ad:2e:33:4d:48:2c:
                    6c:8f:92:ec:98:f0:a9:67:8a:16:84:7e:fc:46:f7:
                    5d:24:b3:51:ab:08:11:72:a4:3b:22:74:96:ef:2f:
                    26:71:c6:96:d5:18:8e:30:02:7e:2e:be:f6:67:01:
                    af:9b:b6:86:99:de:8c:28:81:59:0a:24:8c:98:77:
                    00:30:b0:3d:c8:10:19:31:74:f8:63:f8:c7:8c:38:
                    b0:68:21:78:f2:02:19:5a:f3:10:50:5e:42:2c:cc:
                    ae:2b:da:2c:1d:77:eb:e2:1a:f8:ff:38:b5:26:88:
                    87:64:75:01:60:bf:7f:89:4f:d5:5e:be:2c:72:b0:
                    61:96:33:a9:75:f5:66:23:f1:da:81:eb:fc:e9:b4:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:95:91:5F:CB:59:DB:EA:D0:39:5A:E9:90:2C:B7:65:46:F9:2F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/17571fe2-5e51-3939-a350-1d485c4f87e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl

            X509v3 Authority Key Identifier:
                keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:b5:01:9b:1e:6b:f1:b2:41:70:10:8d:b8:14:46:1a:a2:
         32:56:46:27:dc:90:fc:0b:98:fa:47:aa:91:cd:de:15:80:d2:
         eb:fa:29:92:0e:d7:92:61:9f:59:05:77:1e:56:b4:ce:ff:e9:
         5e:78:96:c7:ee:a1:a9:21:3e:65:65:45:d8:a5:d3:e7:a7:98:
         c8:a1:09:8c:ab:05:d0:90:9b:ac:e4:82:e8:6a:6d:29:5b:74:
         32:71:1a:fa:80:61:25:66:9e:66:e4:c9:e5:87:65:d4:b3:16:
         06:c8:32:3f:bf:8e:79:08:61:31:1c:d6:6d:f0:e2:3e:51:3b:
         b8:c5:3e:be:c6:83:00:02:e7:1c:94:b9:64:61:c5:c5:85:ba:
         fa:23:8b:12:98:61:91:c7:3f:0b:f5:86:40:bf:06:e1:38:38:
         30:7c:d0:ad:91:cf:fb:96:fa:08:36:9a:73:c8:10:cb:fa:83:
         ec:83:7a:3d:0d:8c:0f:f3:8c:11:ba:d0:84:3e:86:fd:bf:bd:
         52:bd:9f:e0:33:42:c3:2f:64:06:7a:55:cb:bf:42:2c:64:ba:
         a6:51:58:23:13:4b:54:4b:7f:ff:6a:45:c5:87:bf:d4:9a:74:
         9e:e7:43:a7:e6:ac:dd:ed:08:63:97:5b:eb:3b:3f:48:10:1e:
         e9:f4:74:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmBKOzP6KusI44IC0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNjMTRkYzQtNjc2OC00M2MxLTlkOTUtYzg5YTU1MjAy
MGMxMB4XDTI1MDQxMjE5MTUzNFoXDTI1MDcxMTE5MTUzNFowLzEtMCsGA1UEAxMk
OGFmM2JjMzUtZDM2Zi00MTNjLTk4ZDktOTg0Mjc3ODljYTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f/jvjcpKRXry8li1fQy6WXnWureuiTYpXu3
G9lTH0vx1akfWwf/+GnxFBRCn1MCFgmtZh3CvLQi+zjbkEiG7sSSbPhZhzcLYKL0
VZaNdcS6QwkZRX77hlWTY8cSGS1eANzWJPTglSTZKJf4z8rZc6CtLjNNSCxsj5Ls
mPCpZ4oWhH78RvddJLNRqwgRcqQ7InSW7y8mccaW1RiOMAJ+Lr72ZwGvm7aGmd6M
KIFZCiSMmHcAMLA9yBAZMXT4Y/jHjDiwaCF48gIZWvMQUF5CLMyuK9osHXfr4hr4
/zi1JoiHZHUBYL9/iU/VXr4scrBhljOpdfVmI/Hagev86bTuWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWVkV/LWdvq0Dla6ZAst2VG+S99MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hY2Mx
NGRjNC02NzY4LTQzYzEtOWQ5NS1jODlhNTUyMDIwYzEvMTc1NzFmZTItNWU1MS0z
OTM5LWEzNTAtMWQ0ODVjNGY4N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWNjMTRkYzQtNjc2OC00M2MxLTlk
OTUtYzg5YTU1MjAyMGMxL2FjYzE0ZGM0LTY3NjgtNDNjMS05ZDk1LWM4OWE1NTIw
MjBjMS5jcmwwHwYDVR0jBBgwFoAUIuC90W13RbxlN/JAwkXcP6qjhiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hY2MxNGRjNC02NzY4LTQzYzEtOWQ5NS1jODlh
NTUyMDIwYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HN9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADu0tQGbHmvxskFwEI24FEYaojJWRifckPwLmPpHqpHN3hWA0uv6KZIO
15Jhn1kFdx5WtM7/6V54lsfuoakhPmVlRdil0+enmMihCYyrBdCQm6zkguhqbSlb
dDJxGvqAYSVmnmbkyeWHZdSzFgbIMj+/jnkIYTEc1m3w4j5RO7jFPr7GgwAC5xyU
uWRhxcWFuvojixKYYZHHPwv1hkC/BuE4ODB80K2Rz/uW+gg2mnPIEMv6g+yDej0N
jA/zjBG60IQ+hv2/vVK9n+AzQsMvZAZ6Vcu/QixkuqZRWCMTS1RLf/9qRcWHv9Sa
dJ7nQ6fmrN3tCGOXW+s7P0gQHun0dCM=
-----END CERTIFICATE-----
Generated at Sun May 11 14:37:44 2025 by rpki-client