Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffb6238a-6c3d-32a1-8f14-3a8d6ea71c22.roa
File:                     ffb6238a-6c3d-32a1-8f14-3a8d6ea71c22.roa (raw, json)
Hash identifier:          uw5F3YhB9r/i1sKY97sfd/bRbtATdnJO0UKow7VTgW0=
Subject key identifier:   A7:97:98:43:53:9B:BC:CB:90:FA:C8:44:CD:0F:3E:2F:9E:21:A0:8A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5759020A0F2301459D3BC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffb6238a-6c3d-32a1-8f14-3a8d6ea71c22.roa
Signing time:             Tue 04 Feb 2025 13:38:00 +0000
ROA not before:           Tue 04 Feb 2025 13:38:00 +0000
ROA not after:            Mon 05 May 2025 12:38:00 +0000
asID:                     30036
IP address blocks:        173.27.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:75:90:20:a0:f2:30:14:59:d3:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:38:00 2025 GMT
            Not After : May  5 12:38:00 2025 GMT
        Subject: CN=aa3eb06a-8666-486b-915b-d9d0a4ad96ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:27:31:eb:08:c9:28:72:2b:28:8b:bb:3f:
                    3c:e9:a9:46:10:e8:22:d6:9a:38:4a:85:a3:a8:d8:
                    b7:6e:6d:10:53:7d:40:58:25:9a:05:09:5e:83:02:
                    42:b0:82:d0:f5:75:6b:8a:fc:e1:84:01:96:f2:de:
                    f5:d7:13:0b:ac:4b:32:42:ef:fc:38:80:31:89:15:
                    16:18:e3:0e:d1:58:a0:fb:0d:81:51:3b:60:a4:29:
                    94:6d:53:29:8d:66:c5:af:10:36:f5:a5:a1:b9:76:
                    31:56:d8:27:05:db:6b:73:e4:6e:02:ee:0e:2c:84:
                    3d:f4:4f:72:7f:de:32:e4:e1:a5:9c:7c:22:9f:b5:
                    42:18:65:aa:92:dd:ff:dd:e6:7e:b8:d4:29:78:99:
                    cf:ba:27:7c:10:19:0b:c0:a3:c2:b6:07:10:c0:b6:
                    36:05:39:55:6e:ba:e4:91:53:7d:ea:27:12:37:c3:
                    06:ec:18:85:ca:f3:2c:3d:01:d0:50:82:5a:24:5f:
                    11:cb:ac:c5:ec:06:7f:39:bd:73:9b:ea:3d:ea:7c:
                    50:ce:9f:a4:e8:55:2e:ee:fc:a8:9d:c7:ff:cb:b8:
                    b6:e7:e3:fb:d3:ac:0e:60:f0:38:5d:08:d8:5a:98:
                    70:8f:0f:32:5f:d7:63:30:66:0a:ca:07:ac:1f:e1:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:97:98:43:53:9B:BC:CB:90:FA:C8:44:CD:0F:3E:2F:9E:21:A0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffb6238a-6c3d-32a1-8f14-3a8d6ea71c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:78:f5:04:9a:51:93:2e:0f:77:12:29:a7:f1:9e:f6:c9:d5:
         18:cb:99:eb:00:80:d0:6e:b5:48:ff:b5:5e:66:10:08:50:1b:
         b1:af:e8:9d:08:43:50:07:40:33:f2:4e:44:88:e2:af:6b:28:
         9d:ec:06:97:07:33:bd:34:b6:cf:20:1a:40:33:81:43:73:0e:
         f6:40:fc:6a:2b:bb:c2:c1:ae:df:08:d6:7f:8b:06:d7:86:7a:
         98:45:41:79:5e:7d:16:16:2b:9b:93:8d:4e:75:76:9d:59:20:
         fd:49:79:a6:69:9c:21:c0:d9:89:15:05:6f:bc:48:95:05:4e:
         71:2f:10:10:7e:56:13:53:c6:ea:4e:00:1f:b3:f2:f4:05:7c:
         8f:5e:c4:f0:23:09:72:93:74:3a:5d:ca:22:63:c6:62:b1:c1:
         74:55:b4:03:22:12:99:33:e0:17:ff:1b:ff:90:fa:54:c3:0b:
         88:19:69:be:eb:b0:5d:37:f8:d5:c6:20:8b:54:ac:0a:3c:5c:
         74:2d:a0:32:33:1b:d4:56:09:1f:fb:64:b3:0f:4b:43:dc:e6:
         6e:9a:9e:75:42:1d:86:c9:83:8c:3e:63:39:b3:69:ee:41:d0:
         88:10:5d:45:13:b1:b1:0b:f0:29:93:0a:6a:54:9a:a4:6e:be:
         82:0f:e9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:38 2025 by rpki-client