Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/b162d766-e883-3edb-97b5-e88b65947837.roa
File:                     b162d766-e883-3edb-97b5-e88b65947837.roa (raw, json)
Hash identifier:          rjb+ltcVmOY5bs5XI/XvnrLgwOEwfgAERHes+IJTvVM=
Subject key identifier:   5E:42:DC:92:2E:54:B1:D1:DD:C5:80:51:17:79:55:32:93:5A:E0:9A
Certificate issuer:       /CN=221cdd91-10e9-41bb-8765-69edc6f1e631
Certificate serial:       010D0C9F432858490E16BEAAB0D5B013F96FBC80
Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/b162d766-e883-3edb-97b5-e88b65947837.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        130.50.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:be:aa:b0:d5:b0:13:f9:6f:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=173ae92b-c95e-4d53-949e-089e10c6db34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:7b:93:77:fe:d1:c7:7f:f9:09:16:4c:6b:
                    dd:7a:9c:62:44:e1:9f:77:58:38:6e:3a:27:7b:70:
                    a1:08:2c:49:95:29:78:b4:b3:14:99:38:5c:ba:3d:
                    f8:8f:f2:0a:66:4e:fc:63:6e:83:f9:f8:55:fa:44:
                    6d:ca:36:ef:4b:fa:e8:a2:a7:7c:58:ad:54:da:6e:
                    55:65:c5:bd:3d:ee:d8:93:28:6d:34:d6:fb:24:54:
                    39:18:53:47:08:e8:08:3b:72:97:25:71:43:6d:22:
                    26:04:c3:63:93:1c:fb:b1:e5:a9:cd:80:90:09:29:
                    d6:30:d7:ec:40:79:5a:5f:02:9b:bf:7f:68:f2:f1:
                    14:8b:26:81:31:6e:85:c3:91:e5:97:07:e1:2a:9c:
                    7b:80:79:76:05:d4:fc:38:25:27:bc:29:21:21:d5:
                    cc:a8:67:cc:4c:bc:6b:e4:92:56:8f:bc:bd:0a:6e:
                    ba:56:f8:f3:95:9c:95:d8:66:0e:f5:2e:06:a0:25:
                    f3:cd:4e:c7:51:69:7a:2e:14:57:9e:bb:51:d1:b6:
                    53:7d:78:87:37:41:c1:88:10:d9:5c:99:ae:6e:48:
                    9c:45:7d:70:32:1d:dd:49:89:6e:30:63:37:cc:c2:
                    9a:43:0c:b9:51:dd:43:df:6b:b8:46:86:d1:42:3c:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:42:DC:92:2E:54:B1:D1:DD:C5:80:51:17:79:55:32:93:5A:E0:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/b162d766-e883-3edb-97b5-e88b65947837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl

            X509v3 Authority Key Identifier:
                keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.50.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e1:fe:3e:6c:7f:2d:20:17:f0:53:19:c6:94:24:30:83:11:
         fa:31:c4:8e:03:94:3a:91:4f:16:0e:e2:35:5b:d5:a1:7c:20:
         4b:ea:4f:38:da:be:53:6d:b7:a8:0d:06:ba:28:c2:73:16:a3:
         81:44:cd:3f:fb:40:98:3f:c1:b9:70:dc:7a:b7:26:22:cd:bd:
         39:6f:b5:5b:7f:1a:3b:66:ee:e6:56:33:71:42:c4:80:e5:b8:
         93:a4:7c:a3:d4:a5:b1:2a:30:01:b8:2a:1d:10:3e:a5:44:8f:
         d1:5b:99:b3:1b:69:2f:df:0a:f9:8b:68:e5:f3:38:30:4b:36:
         68:12:56:42:8d:dc:5f:69:43:61:c1:8d:d0:fa:45:e6:fb:b3:
         42:da:06:bf:ca:f0:0e:86:84:1d:53:e0:31:a7:c9:c8:62:3e:
         67:b0:ec:8a:af:01:06:d6:0a:4c:e4:99:8f:de:c0:40:67:e6:
         3a:16:b2:37:ed:07:25:0e:f8:2b:77:9b:36:13:3d:0f:7e:70:
         8c:14:97:58:ea:80:b4:98:98:f8:dc:b2:16:cb:79:f1:08:c8:
         fb:a4:25:20:0d:91:f1:81:db:b2:e9:45:c1:0f:62:ba:89:ee:
         c7:f0:1b:14:ca:e3:01:29:0b:f1:ff:c3:8f:c5:24:28:bb:c3:
         bb:42:0c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:47 2025 by rpki-client