Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa
File:                     34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa (raw, json)
Hash identifier:          dymwLXxCe4iyM2xhQPDD7tuFVu+BhLr0v4ubHQxELBU=
Subject key identifier:   EB:CC:07:58:63:05:D4:DD:E0:AC:1E:91:C8:86:A0:23:44:74:E3:14
Certificate issuer:       /CN=b2456e11-ca83-4345-8884-0becc0831fb7
Certificate serial:       010D0C9F4328584940394F039C0891AF631A7480
Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        216.181.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:4f:03:9c:08:91:af:63:1a:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=41398a32-cba5-4b8e-a9f9-2b2f1d40c255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8a:56:cf:61:03:12:3b:41:01:00:3d:38:5a:
                    bb:47:59:5d:e7:02:27:b0:95:7a:93:44:e5:e3:f8:
                    01:22:b5:e6:dc:a0:0c:c6:51:c4:9c:80:f4:c6:16:
                    bc:9d:85:ac:eb:fa:e8:a0:70:05:25:ca:b4:82:c8:
                    95:45:29:dc:bb:e4:49:1c:b2:79:4b:5b:ef:90:b6:
                    53:d7:10:de:c4:c3:aa:28:00:e2:39:d9:a9:09:f8:
                    fa:19:65:03:36:14:04:9e:54:cf:6a:ec:49:f2:33:
                    bf:76:93:66:dc:d0:05:4c:81:0a:50:15:c6:6f:a1:
                    73:03:8e:2e:b9:23:3a:d3:2b:9a:8b:2c:db:dc:f6:
                    7a:61:7e:46:b5:12:a5:8c:5e:d1:f6:84:95:1a:ae:
                    a2:a2:70:62:d6:ce:76:a9:58:93:ad:a9:36:66:1b:
                    7c:d2:35:07:fc:27:7e:07:04:01:77:93:43:19:5e:
                    95:db:8a:84:0b:98:7b:24:d7:93:9c:25:f6:6b:7a:
                    8a:32:c3:3e:13:8c:d6:7f:93:d0:67:5d:51:1c:ea:
                    d5:87:09:ad:5a:d9:22:15:9a:ed:a9:fc:cf:9b:a5:
                    ee:ff:f7:89:88:db:e7:8c:4f:8f:0a:88:b8:78:c5:
                    dd:8e:c0:48:30:e1:f8:88:2b:15:00:a1:1c:bd:6a:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:07:58:63:05:D4:DD:E0:AC:1E:91:C8:86:A0:23:44:74:E3:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl

            X509v3 Authority Key Identifier:
                keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:18:63:03:db:68:ec:91:50:26:57:46:48:9f:78:94:1d:e9:
         33:6c:75:74:13:5f:f6:2f:40:f8:57:e1:ee:cd:43:1d:41:d0:
         bb:8d:7d:cd:e6:da:16:70:7d:e2:14:5c:a3:58:31:9a:e0:8e:
         22:b9:5e:58:d2:88:a5:72:28:9d:69:59:38:18:6a:56:a6:fe:
         41:f9:1a:b2:0c:e3:c4:d8:6f:ee:4d:69:0f:68:37:53:c8:10:
         2a:db:bd:82:9f:f1:b6:85:d9:78:5d:d0:94:33:c5:50:be:50:
         ca:ba:ce:78:29:f9:96:f7:7e:ec:63:80:6a:a8:d9:d0:a1:16:
         56:e4:92:e8:96:18:05:15:6f:3d:54:b4:f0:c4:7a:37:9c:b6:
         05:f8:24:90:6a:a8:13:4e:18:45:68:7b:54:d8:ce:0f:c4:76:
         89:5e:dc:8e:11:8a:1d:ea:f0:92:24:ea:b9:e4:ba:33:d9:76:
         52:26:03:20:8c:3b:8d:f6:a4:a6:8a:62:aa:af:bb:5e:16:de:
         06:84:fe:fe:7d:5c:95:f9:42:be:42:6a:aa:0b:0e:c4:d9:0b:
         20:40:95:a2:e6:80:a2:aa:a7:31:20:d1:cf:eb:98:43:b9:bb:
         00:7c:46:44:31:98:84:9e:ca:e4:cd:f6:64:06:99:6f:30:f2:
         db:6e:ae:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:05 2025 by rpki-client