Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/04bb32bf-ccbc-3bbc-9458-2be52917e211.roa
File:                     04bb32bf-ccbc-3bbc-9458-2be52917e211.roa (raw, json)
Hash identifier:          aAFu1qbFD3vT/SmaCUvq89a9G5Nay0HfAoLESfeeKj4=
Subject key identifier:   A9:EC:0B:77:AD:62:21:38:0C:68:67:3D:84:56:87:7B:56:C9:FA:A0
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285848CC7B8E34BF32336488A2FB00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/04bb32bf-ccbc-3bbc-9458-2be52917e211.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        108.179.232.0/22 maxlen: 23
                          192.185.144.0/20 maxlen: 21
                          192.185.160.0/20 maxlen: 21
                          192.185.176.0/23 maxlen: 24
                          192.185.208.0/20 maxlen: 21
                          192.185.224.0/19 maxlen: 20
                          192.254.240.0/21 maxlen: 24
                          192.254.248.0/22 maxlen: 23
                          216.172.160.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:8e:34:bf:32:33:64:88:a2:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=f6fe8249-56dc-41b0-9fb9-30b5113cbf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:70:92:de:c1:64:30:1d:4d:4a:bb:35:29:
                    63:ab:4e:16:fe:ec:51:56:45:be:00:83:b8:d8:63:
                    73:1d:54:2a:c8:e0:5a:87:af:fe:4f:c1:16:4e:57:
                    96:24:20:b6:c1:8d:2c:13:d2:5f:cf:a7:b3:b1:e9:
                    31:8b:c9:3d:96:46:46:56:9a:c4:e3:f7:66:fa:b7:
                    e3:02:67:c9:62:65:b0:58:86:e7:ab:e5:fd:6e:31:
                    f6:56:62:cf:98:3f:e1:f0:ba:17:a1:d3:73:5a:97:
                    8d:42:9d:04:a1:de:6c:f1:76:0b:55:34:20:7c:4e:
                    2b:3c:43:76:b1:ec:bb:b8:03:91:22:fe:fa:d8:0d:
                    fe:54:c0:3b:c2:1a:75:00:71:da:b0:98:3d:8f:f6:
                    77:08:fc:dd:24:20:c7:73:37:ab:e3:49:af:47:04:
                    f0:e1:06:e6:d2:a4:b1:1d:41:0c:c7:84:8a:24:d4:
                    c2:a1:25:b2:f3:62:84:84:7e:70:22:92:e9:c1:b3:
                    22:cf:ca:03:5d:ab:3d:7e:2d:3f:2b:29:f6:82:4f:
                    92:9c:ae:ce:ce:5d:41:d3:6d:ab:c0:bb:e2:da:56:
                    2e:d9:44:fe:78:89:a9:78:5e:37:67:3a:71:6a:68:
                    3e:b2:80:96:52:28:c5:5c:ad:2c:34:c4:96:31:65:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EC:0B:77:AD:62:21:38:0C:68:67:3D:84:56:87:7B:56:C9:FA:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/04bb32bf-ccbc-3bbc-9458-2be52917e211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.232.0/22
                  192.185.144.0-192.185.177.255
                  192.185.208.0-192.185.255.255
                  192.254.240.0-192.254.251.255
                  216.172.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7f:e3:6c:85:1f:28:b2:0f:e3:ae:97:04:ea:a1:4f:73:86:
         3a:fe:cb:4b:eb:5c:6a:1c:14:e8:1d:ff:49:4c:f0:17:b3:19:
         17:28:82:bb:0b:f0:1c:89:46:45:6c:90:9b:86:c0:68:c4:5d:
         ec:00:18:78:d4:18:53:b8:fa:fe:d5:b6:bf:75:4d:15:a3:81:
         34:b2:5e:7f:53:9a:de:92:cc:08:af:f9:e5:f3:88:09:ed:19:
         56:3f:fd:46:ca:39:47:ba:63:0e:c1:4f:08:8d:6f:94:98:01:
         70:7f:c6:dd:4d:a6:7c:48:b3:03:50:66:36:07:05:1d:08:80:
         3b:9f:28:ff:4e:bb:83:87:11:01:5d:ea:fd:06:72:70:77:ae:
         d0:3b:14:b9:7c:0d:12:da:83:09:56:5c:4c:2f:8a:65:81:3c:
         ff:25:42:b8:db:e7:92:ed:d8:fd:53:30:33:7e:61:61:f3:31:
         17:01:a8:16:f5:c5:6b:65:92:5c:04:8f:7f:a3:69:88:47:47:
         80:0e:99:b4:7c:d8:d6:b6:9f:23:65:9f:13:6b:be:12:6e:44:
         c5:1c:9c:ff:a8:27:ad:6f:21:cd:e4:e5:5a:7a:ee:28:ae:3d:
         57:35:29:87:ad:f2:ee:7f:73:cd:b3:4e:de:b5:48:10:b7:af:
         b1:b4:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:28 2025 by rpki-client