Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/80b27743-32d4-3b53-bf56-8021fd482c60.roa
File:                     80b27743-32d4-3b53-bf56-8021fd482c60.roa (raw, json)
Hash identifier:          1shR7h+wxLdf7SIm62F2NrhFuOxvPXW0TEfSeoYwYRU=
Subject key identifier:   13:2F:55:B9:52:9C:6C:F3:52:5B:AE:75:73:8F:D6:61:92:D3:FD:73
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F432858493C093DB0139FA2AE76F86480
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/80b27743-32d4-3b53-bf56-8021fd482c60.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     26380
IP address blocks:        216.119.208.0/22 maxlen: 22
                          216.119.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:3d:b0:13:9f:a2:ae:76:f8:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=2a5fd7a9-b1f4-4454-97aa-dd7ee3f64daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e5:dc:6f:d5:da:03:18:b2:ae:ab:a2:18:3e:
                    15:31:8a:8b:e3:e1:97:75:40:7a:bb:34:0c:c5:10:
                    1b:e5:25:32:27:5e:52:07:10:55:7a:85:ee:bb:4e:
                    5b:60:ca:62:90:e9:87:d7:7e:ed:cb:a0:0d:7c:63:
                    96:d5:0b:52:51:47:ff:b9:e1:7d:43:f8:bd:ab:2f:
                    6d:87:bb:e2:95:9a:89:49:fb:cf:cb:05:f4:bf:94:
                    1c:48:44:2f:18:d2:ef:f8:db:f8:97:62:bc:3c:c5:
                    ac:1e:95:74:1e:da:7e:75:b4:93:a5:e2:0e:3c:93:
                    b2:1c:10:c9:96:04:6d:40:64:01:70:dd:d9:2b:16:
                    78:75:7a:c6:74:02:aa:92:fc:71:56:9d:f4:32:79:
                    00:7b:de:23:32:d7:66:d4:99:28:de:96:58:5c:3d:
                    c0:97:5a:11:8a:c2:7f:a1:42:6f:6e:d8:6b:72:c2:
                    a9:a3:6f:fe:59:75:30:7f:2f:4a:b1:4f:86:db:dc:
                    56:76:c1:72:19:ea:1d:40:c8:56:e3:08:68:2c:66:
                    cb:b6:5c:bb:ea:1e:74:11:63:b9:9f:70:73:55:b6:
                    be:7e:1e:cb:63:58:4d:e1:96:01:59:d8:f1:88:46:
                    9b:a4:6e:cd:73:c1:2f:b9:87:55:8d:f3:d7:da:be:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:55:B9:52:9C:6C:F3:52:5B:AE:75:73:8F:D6:61:92:D3:FD:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/80b27743-32d4-3b53-bf56-8021fd482c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.208.0/22
                  216.119.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f3:e2:d0:bc:d6:91:ee:73:73:2d:54:d1:69:6b:70:e4:7d:
         88:ea:d8:2f:58:2b:1a:82:57:0d:f9:b1:f9:77:cf:c8:f8:15:
         af:3e:60:33:41:c8:20:04:a5:4f:07:e1:c5:56:d1:33:44:8c:
         86:11:ff:b6:be:ca:26:65:78:a1:4f:aa:99:fe:1d:58:45:71:
         21:14:be:63:f4:a8:36:bb:52:a6:cc:ce:dc:f3:e2:77:60:92:
         6a:f8:34:2f:dc:46:46:15:db:e6:97:b7:40:83:cd:82:56:f1:
         81:e7:f4:26:55:83:71:f8:29:a9:75:90:d7:a5:a6:fe:de:39:
         c6:c5:69:6d:90:98:22:57:5c:40:ee:80:12:55:60:b2:eb:02:
         10:da:67:ee:4f:8d:b1:38:77:91:40:8b:16:c9:d6:3a:f1:bb:
         2f:5d:b5:e3:8f:ab:f8:cf:07:17:bb:47:61:79:60:8c:54:0e:
         11:53:4c:9d:7b:70:f0:84:6b:2b:67:25:89:74:f3:c2:00:7e:
         c8:6b:ee:08:d4:b8:7b:9b:23:1f:72:00:97:d3:1c:67:3f:85:
         61:dd:b8:36:8b:fe:95:0e:94:8a:ef:18:40:07:32:3a:97:90:
         ee:b7:4a:94:ca:24:56:93:44:ce:9f:f6:cd:8e:dd:a7:50:7c:
         5b:45:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:09 2025 by rpki-client