Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d397a0a6-fc3d-35ad-816b-11dd2db91505.roa
File:                     d397a0a6-fc3d-35ad-816b-11dd2db91505.roa (raw, json)
Hash identifier:          Y2QAubgyIYnU2/Wh7zEQT+eXnrlbWkhxibd4Y/0i4zI=
Subject key identifier:   EC:E5:A9:C3:1C:FC:18:CC:E3:A7:33:4B:79:37:D4:E6:38:EC:13:E0
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C581844AD505AE5EF00F7000
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d397a0a6-fc3d-35ad-816b-11dd2db91505.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36040
IP address blocks:        208.117.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:84:4a:d5:05:ae:5e:f0:0f:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=26c8ef4a-718f-48bc-a654-e6fd9e60308e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:41:41:fe:68:1a:72:11:91:c1:f2:84:ed:
                    78:c3:53:2a:77:ce:49:5e:cf:94:a9:cf:37:43:3b:
                    d8:22:49:ab:8e:0e:41:85:51:e2:04:73:2f:c6:50:
                    96:21:b2:9a:2c:2c:c7:90:00:e0:da:b7:06:60:db:
                    2d:bd:0b:e6:e4:a5:f5:f8:49:39:2e:12:b3:a0:13:
                    63:6e:96:d4:f2:1b:2d:1d:e9:d2:06:a5:f5:43:9d:
                    4b:1d:e0:f3:64:e1:c2:0a:ee:e3:2d:b7:ff:eb:f7:
                    1d:59:2c:cf:af:9d:41:21:db:ca:52:2f:c9:5d:14:
                    7c:f7:49:72:95:62:e2:7c:fc:ea:7d:a6:0a:fa:a5:
                    4f:4d:2f:23:a6:6d:6a:7c:c8:08:31:c7:99:b2:f9:
                    92:10:72:3d:7e:4a:9e:3a:dc:16:76:30:64:d6:61:
                    ce:c7:9d:2d:4b:74:27:67:d1:f6:06:e8:80:36:15:
                    11:49:7f:6f:b3:b8:a0:00:04:61:d7:8a:56:8c:e0:
                    74:1e:28:e3:33:09:e2:fc:62:d9:a0:08:0c:24:14:
                    c6:fa:97:06:7b:0e:24:6c:35:23:47:df:e3:e6:63:
                    af:60:09:0c:f4:46:c4:18:30:2a:8c:de:fc:5a:b4:
                    b6:c7:4a:f7:79:19:b8:7b:47:48:9b:9c:2a:a4:ed:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E5:A9:C3:1C:FC:18:CC:E3:A7:33:4B:79:37:D4:E6:38:EC:13:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d397a0a6-fc3d-35ad-816b-11dd2db91505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:51:2e:d5:10:48:03:76:be:07:f9:6f:b4:84:f8:22:b7:
         b7:55:e9:b3:95:04:27:da:2c:71:d5:51:c6:91:f6:d2:33:8a:
         20:6f:ad:e9:f9:3b:db:07:70:0d:90:c6:a7:b7:dd:01:f7:fe:
         3c:53:25:86:70:ed:7b:38:32:f7:dd:d8:f7:f2:ed:bd:1a:d5:
         53:67:a1:f3:37:68:d5:f8:9d:c8:62:e5:3d:53:94:3f:1f:d5:
         63:51:91:db:cd:1d:34:87:23:6c:d7:09:9d:a8:34:c1:54:bb:
         07:24:7c:ce:cb:46:e8:6a:31:58:0e:70:b3:b9:d3:5c:a9:6c:
         4c:15:0c:9c:ea:21:0b:49:3b:99:c8:ee:aa:3c:d2:64:06:07:
         87:ce:98:81:b8:90:26:b2:e7:c3:a0:14:63:19:ef:11:5d:7f:
         e3:63:59:27:ad:6a:f8:e6:8e:39:6a:be:7a:f3:11:6e:16:fe:
         01:69:24:07:b7:19:61:b9:da:50:ce:33:b8:be:56:4d:9a:a8:
         bb:7c:9a:d7:13:2e:19:14:51:71:09:9c:f7:db:8b:b1:34:2d:
         b4:d7:3f:4a:0b:1c:78:4e:4a:c2:fc:29:b6:d7:03:1f:a6:62:
         a9:71:a2:c6:98:2b:d6:31:95:f9:dd:de:2c:d7:27:39:c7:0a:
         a5:e4:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:14:49 2025 by rpki-client