Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/ec3db294-ec2d-3dd6-b4a7-bd63f4580c13.roa
File:                     ec3db294-ec2d-3dd6-b4a7-bd63f4580c13.roa (raw, json)
Hash identifier:          vaOxoDzukkX0b024Kk97ZfUpeWqJOPhVppAkyBlePYA=
Subject key identifier:   56:A7:93:05:E6:9C:83:7E:E8:47:DF:BC:09:5C:1C:65:E7:B1:C1:1D
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F43285849ADCBD207EFC99806592820C0
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/ec3db294-ec2d-3dd6-b4a7-bd63f4580c13.roa
Signing time:             Mon 28 Apr 2025 18:59:21 +0000
ROA not before:           Mon 28 Apr 2025 18:59:21 +0000
ROA not after:            Sun 27 Jul 2025 18:59:21 +0000
asID:                     5065
IP address blocks:        216.132.26.0/24 maxlen: 24
                          216.132.27.0/24 maxlen: 24
                          216.132.28.0/24 maxlen: 24
                          216.132.29.0/24 maxlen: 24
                          216.132.30.0/24 maxlen: 24
                          216.132.31.0/24 maxlen: 24
                          216.132.96.0/24 maxlen: 24
                          216.132.97.0/24 maxlen: 24
                          216.132.98.0/24 maxlen: 24
                          216.132.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:cb:d2:07:ef:c9:98:06:59:28:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 28 18:59:21 2025 GMT
            Not After : Jul 27 18:59:21 2025 GMT
        Subject: CN=bb66fc19-3fa8-482c-af75-3ebcd26e63b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:1b:68:39:a1:2f:22:ab:92:d6:ce:f9:f3:
                    2c:84:50:bd:10:b2:47:a2:a0:0b:be:ee:08:60:5d:
                    f7:c7:8d:af:09:a7:ba:ea:fa:16:a0:c1:56:ad:82:
                    03:17:04:9a:d9:7d:3d:9f:ce:b1:6e:4c:f7:64:d6:
                    d1:ca:a1:f9:a3:d4:21:d8:3b:7b:94:3c:ef:d5:0c:
                    aa:c0:12:1a:fb:2d:f7:ad:d7:18:4c:cf:bb:d3:44:
                    d8:58:ef:0b:de:f6:4c:f5:01:15:c7:20:75:12:ce:
                    d1:30:15:88:83:76:22:7e:28:32:e2:de:fd:f3:2c:
                    c4:76:d2:f3:f7:92:f4:f4:a0:10:6f:b1:ca:47:b8:
                    83:45:fa:20:0a:69:46:ac:dc:93:7b:8e:e1:e4:3e:
                    50:83:cd:b2:0c:d4:85:d1:fa:9c:27:b1:20:bd:2b:
                    7b:0a:3d:e2:13:e5:b3:ba:12:19:cc:f9:0e:ba:97:
                    94:e0:2d:81:7b:d7:45:99:b7:67:19:40:de:bf:c1:
                    63:13:25:c8:13:6d:06:12:82:43:c1:41:0b:a3:4b:
                    22:57:aa:18:c5:27:00:1f:9c:e0:06:4f:04:79:07:
                    d3:aa:be:74:42:46:05:03:73:9c:3a:a0:30:83:6a:
                    c9:73:d2:8e:a7:1b:71:73:97:ee:5f:fe:33:b3:01:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A7:93:05:E6:9C:83:7E:E8:47:DF:BC:09:5C:1C:65:E7:B1:C1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/ec3db294-ec2d-3dd6-b4a7-bd63f4580c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.26.0-216.132.31.255
                  216.132.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:00:14:a5:96:8b:bc:50:3d:0e:7b:df:ab:20:44:5f:91:36:
         5d:83:e9:d0:5a:d8:d2:ea:fe:b8:a3:3a:e8:50:09:b4:cd:e8:
         5c:c0:b4:46:5c:a4:6c:31:60:31:8a:d3:d7:61:f4:47:e8:f2:
         f5:5a:a8:43:17:ef:43:73:3f:0d:ac:5c:83:a7:00:0c:65:71:
         bd:2e:8e:be:5c:8a:12:d6:14:70:2b:d9:d5:90:09:1e:33:9c:
         09:50:17:04:9d:27:14:59:b2:a3:4b:aa:a7:43:55:49:5e:0f:
         29:bf:9e:a1:ad:de:bb:e4:1d:f2:7f:dc:d2:c4:40:ed:25:c0:
         d6:a9:d9:69:9d:1d:10:67:96:42:83:7b:c3:73:50:fc:8d:78:
         ab:21:47:24:85:ac:90:c4:36:66:a5:1e:5b:94:be:8b:13:71:
         2c:50:43:f9:2e:c0:49:79:8c:a1:17:9f:f9:eb:c8:8e:ce:77:
         e0:87:59:79:e9:d1:a8:81:71:5a:67:d2:02:df:9e:96:fa:98:
         09:44:9a:ee:a9:93:dc:11:fe:1c:17:4a:dd:4d:b7:cc:c5:5c:
         75:4f:56:6c:8d:0c:f1:9d:9e:a0:95:69:1b:51:fc:9a:42:72:
         76:69:8a:61:96:6f:6f:2c:bf:38:f8:76:c2:a4:06:7d:af:b8:
         ff:df:f8:c6
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEmty9IH78mYBlkoIMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5
ZTg3MB4XDTI1MDQyODE4NTkyMVoXDTI1MDcyNzE4NTkyMVowLzEtMCsGA1UEAxMk
YmI2NmZjMTktM2ZhOC00ODJjLWFmNzUtM2ViY2QyNmU2M2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrIbaDmhLyKrktbO+fMshFC9ELJHoqALvu4I
YF33x42vCae66voWoMFWrYIDFwSa2X09n86xbkz3ZNbRyqH5o9Qh2Dt7lDzv1Qyq
wBIa+y33rdcYTM+700TYWO8L3vZM9QEVxyB1Es7RMBWIg3Yifigy4t798yzEdtLz
95L09KAQb7HKR7iDRfogCmlGrNyTe47h5D5Qg82yDNSF0fqcJ7EgvSt7Cj3iE+Wz
uhIZzPkOupeU4C2Be9dFmbdnGUDev8FjEyXIE20GEoJDwUELo0siV6oYxScAH5zg
Bk8EeQfTqr50QkYFA3OcOqAwg2rJc9KOpxtxc5fuX/4zswGZiwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFFankwXmnIN+6EffvAlcHGXnscEdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1
OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvZWMzZGIyOTQtZWMyZC0z
ZGQ2LWI0YTctYmQ2M2Y0NTgwYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi
ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy
OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl
MTBhMjllODcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHYhBoD
BAXYhAADBALYhGAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAAAAUpZaLvFA9DnvfqyBEX5E2XYPp0FrY0ur+
uKM66FAJtM3oXMC0RlykbDFgMYrT12H0R+jy9VqoQxfvQ3M/Daxcg6cADGVxvS6O
vlyKEtYUcCvZ1ZAJHjOcCVAXBJ0nFFmyo0uqp0NVSV4PKb+eoa3eu+Qd8n/c0sRA
7SXA1qnZaZ0dEGeWQoN7w3NQ/I14qyFHJIWskMQ2ZqUeW5S+ixNxLFBD+S7ASXmM
oRef+evIjs534IdZeenRqIFxWmfSAt+elvqYCUSa7qmT3BH+HBdK3U23zMVcdU9W
bI0M8Z2eoJVpG1H8mkJydmmKYZZvbyy/OPh2wqQGfa+4/9/4xg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 12:37:15 2025 by rpki-client