Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/91a4f5f1-55f8-362f-8749-06e8445d5fd0.roa
File:                     91a4f5f1-55f8-362f-8749-06e8445d5fd0.roa (raw, json)
Hash identifier:          hH2c4EXy0F5+aHwZo6aMdo26zAN+0KBT0p1j/E5JMVY=
Subject key identifier:   DB:2B:C6:73:F6:D0:F2:87:A0:DA:2D:8E:F7:F4:80:11:41:D9:54:E8
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F43285848F22C6DE8F20AA770F2856020
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/91a4f5f1-55f8-362f-8749-06e8445d5fd0.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     7794
IP address blocks:        216.59.224.0/19 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:6d:e8:f2:0a:a7:70:f2:85:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=831f2167-ae6e-49ef-9620-b5d0c8f4e7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:b1:75:b6:08:51:e6:f8:0f:5b:d5:54:5f:
                    fd:fd:6c:46:bd:d8:02:08:43:97:64:6e:43:42:70:
                    16:d3:ac:5c:f1:dd:cb:e0:1f:be:7b:6d:f2:e3:a1:
                    7c:f5:fe:4c:59:02:84:d4:bc:7e:3e:13:47:b2:8e:
                    eb:83:a5:f6:c1:cc:2f:51:db:c9:9d:63:36:43:f5:
                    d8:6a:7c:a2:73:f5:c6:02:9e:2a:39:94:d9:52:7c:
                    ad:e3:72:f8:fa:98:62:4a:a6:4b:e1:25:51:de:9f:
                    3d:1f:a6:ab:44:b4:b5:d1:a0:7f:35:52:04:c5:53:
                    54:5d:59:f8:ce:5a:a3:fa:2a:4d:b6:56:b3:05:a5:
                    13:0c:53:04:a8:d6:bd:26:ea:f1:81:05:91:04:e8:
                    75:d0:0b:ad:10:1e:ae:8b:da:59:3d:7e:4b:ab:a2:
                    44:8d:25:54:04:94:32:8b:6c:61:e5:ec:60:b5:49:
                    c3:56:4e:3e:33:7c:46:15:80:1e:73:23:b8:47:87:
                    73:a7:36:dc:51:7c:3a:6e:d0:e6:ad:f8:fe:a2:5d:
                    dd:ea:2b:78:28:35:25:96:30:22:55:2b:d1:dc:a2:
                    43:94:74:0c:a3:d8:13:70:11:14:41:b2:bc:8d:52:
                    53:a8:3f:3f:bc:4c:8e:5c:30:0a:19:c0:45:b7:2f:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2B:C6:73:F6:D0:F2:87:A0:DA:2D:8E:F7:F4:80:11:41:D9:54:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/91a4f5f1-55f8-362f-8749-06e8445d5fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:16:08:0c:ab:37:cc:69:c8:94:5d:49:b7:dd:24:9e:9c:10:
         8b:b0:20:2d:f4:24:76:18:48:93:cc:e1:cc:cd:2d:44:d7:3a:
         35:6c:82:d1:28:78:cb:50:e6:39:c7:de:7b:45:60:77:a7:90:
         11:a4:3f:00:1d:83:b6:db:3b:52:33:fe:93:fd:db:ae:bc:28:
         ae:cc:4e:b9:49:eb:08:f4:6e:c9:52:c3:7d:d4:45:ae:a8:39:
         c3:16:8f:df:0d:29:79:95:2c:1a:8b:a3:87:f2:5a:5c:ba:c0:
         9f:57:e4:62:3d:54:6f:89:12:80:42:eb:8b:32:ab:c2:91:c6:
         80:98:22:d2:7e:76:4a:d5:4c:65:63:a7:44:f1:03:53:c8:91:
         9c:79:ce:24:fc:14:ff:90:5c:76:1a:69:86:89:25:05:c2:7c:
         44:8e:f7:bc:ab:42:9a:1b:90:8d:34:d5:b3:11:3b:12:a8:6f:
         93:55:e3:93:2a:fc:41:d4:5b:ae:da:ab:fc:33:20:c8:c2:68:
         f3:ba:40:9b:24:d5:f5:4e:f1:65:94:39:2e:3b:fd:5e:73:9a:
         9b:69:35:a1:61:c8:f7:89:e2:76:3d:93:60:1b:d7:a0:93:e0:
         c6:32:56:d1:24:84:5c:38:5e:bc:ef:ee:b9:34:5c:08:72:85:
         2e:2c:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:26 2025 by rpki-client