Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/474dafb4-bdbf-3811-9590-621c54dad4b2.roa
File:                     474dafb4-bdbf-3811-9590-621c54dad4b2.roa (raw, json)
Hash identifier:          bDM4e35jJyN+6GIpRE+ORDwcAoA5Wm2eNMIGNDhbb20=
Subject key identifier:   22:A9:5E:11:83:D3:0E:94:C1:4D:63:3A:04:8C:96:9C:9E:B4:F3:7F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7FD3B8F35A120A44DB41580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/474dafb4-bdbf-3811-9590-621c54dad4b2.roa
Signing time:             Wed 05 Feb 2025 11:22:59 +0000
ROA not before:           Wed 05 Feb 2025 11:22:59 +0000
ROA not after:            Tue 06 May 2025 10:22:59 +0000
asID:                     30036
IP address blocks:        173.16.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fd:3b:8f:35:a1:20:a4:4d:b4:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:22:59 2025 GMT
            Not After : May  6 10:22:59 2025 GMT
        Subject: CN=79ec61a6-3f51-4dc0-9a5e-cf7608b41736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d0:2c:2f:bd:78:e9:0b:32:ed:fe:12:dc:06:
                    61:63:93:94:c6:c2:61:2a:44:ab:90:77:50:e6:e5:
                    a4:24:33:86:9b:7e:d0:b3:95:66:11:21:34:54:f4:
                    c1:23:ac:3e:2e:aa:f5:39:a0:44:1e:cf:c0:d4:5d:
                    ad:86:e2:00:d3:b8:6b:5f:31:20:9f:36:1a:5f:10:
                    99:36:6d:af:d5:44:86:5f:98:04:43:9c:9a:72:fc:
                    8a:00:1d:08:64:46:7e:17:9f:3c:4f:77:24:39:07:
                    69:f9:5d:db:7e:b0:ce:ad:b8:82:e2:a3:40:37:04:
                    fc:03:7f:d2:5a:9b:fe:4e:ec:fc:33:92:cf:bd:56:
                    79:58:c6:46:27:78:97:03:b8:d0:8e:a7:af:96:14:
                    87:d0:ac:d1:d6:61:ea:33:45:f4:9d:b4:77:0d:c1:
                    f4:1a:15:38:0d:27:a1:48:ac:13:a1:27:7e:94:b3:
                    79:6c:4a:58:68:57:72:65:1d:e2:c9:64:ea:96:35:
                    58:40:d0:c4:ee:36:3f:bb:c1:26:c4:03:cb:aa:46:
                    14:bd:9c:21:6b:c9:ee:a1:42:e4:92:49:9d:b6:54:
                    f3:90:c2:29:0e:2e:c3:12:f6:db:9f:88:24:28:3d:
                    66:52:06:c9:0d:9b:67:63:7b:d7:37:50:98:3b:16:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A9:5E:11:83:D3:0E:94:C1:4D:63:3A:04:8C:96:9C:9E:B4:F3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/474dafb4-bdbf-3811-9590-621c54dad4b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:81:59:2c:46:99:19:4a:78:00:5c:97:75:39:4c:1f:2f:
         bf:d9:43:93:70:9a:07:e4:57:77:dd:64:3f:f9:db:c2:e6:c1:
         f1:bb:fa:10:41:ec:6e:13:48:46:07:5f:cc:83:66:f3:36:32:
         a2:a4:11:09:96:9d:23:12:53:84:37:14:bf:3c:1f:1d:f2:fb:
         b9:19:3c:a0:04:11:71:d1:7d:34:6e:c5:e8:66:62:ce:7d:20:
         ff:15:97:db:f7:df:ab:5a:e7:f7:bf:fb:20:fb:d2:90:9e:51:
         7d:54:52:8c:fa:f4:5a:16:20:3d:fc:86:ce:de:bd:c3:fd:df:
         cd:49:0c:34:93:31:7f:bd:48:ae:cb:ac:23:e1:f5:75:23:fb:
         bd:ae:12:df:ad:81:30:c4:a8:80:87:7f:c8:6d:fd:e5:89:bf:
         45:35:69:e9:c2:cf:e6:e7:4f:b1:ad:1f:1a:a6:f5:35:ee:09:
         61:8f:31:48:88:5c:4f:4b:23:ce:92:9f:36:88:9f:1d:17:ac:
         6b:3c:b8:2b:5d:be:1c:22:7d:90:f4:8d:b0:cd:83:8a:91:41:
         f3:7a:00:c0:f2:3b:cb:2d:d6:49:fb:a7:9b:31:7c:18:4d:51:
         f6:83:8d:f0:9e:42:47:2d:43:5b:46:39:2e:22:f9:20:f0:0a:
         85:95:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:00:52 2025 by rpki-client