Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa
File:                     d336f765-c7fe-3817-b529-a6906fb694ea.roa (raw, json)
Hash identifier:          w9c9QI71d7QnAqfo+VoDyNh5NmIbaZU8D/dh4j6RkG4=
Subject key identifier:   C8:34:1B:E4:07:6D:55:A0:23:9D:EB:87:51:66:45:92:63:0A:9F:13
Certificate issuer:       /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial:       010D0C9F4328584894A5E432AE3937C45876E400
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     40628
IP address blocks:        204.61.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:e4:32:ae:39:37:c4:58:76:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=b3fd31ea-ebad-400c-855a-0fe3876a3d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:90:c3:83:b2:a1:14:1b:c9:de:78:83:c5:3b:
                    2a:b4:a5:b4:5c:41:7b:81:2a:35:f8:a1:49:5f:a5:
                    73:9d:0a:d3:1a:ae:b3:5a:d9:ed:64:b5:a6:6a:29:
                    50:3a:b7:7a:a0:fa:38:b9:9e:a0:0c:23:04:f1:42:
                    03:7f:61:48:34:0a:b5:40:3c:07:af:a1:ad:06:c2:
                    cd:67:7f:3c:a3:49:a7:cd:91:89:8d:d5:1d:06:77:
                    70:64:63:7e:ad:bb:04:9b:ce:49:5b:ad:59:32:dc:
                    44:c8:0b:d4:38:df:ea:90:ee:01:0d:b2:9a:f3:d6:
                    6e:55:41:62:b2:8e:c9:81:18:20:9f:c8:7b:03:35:
                    e7:db:0a:6f:de:77:26:a3:50:af:87:6c:d5:7d:e6:
                    15:b7:52:a6:83:74:13:3d:30:fc:b9:7b:20:9e:17:
                    80:ad:b1:96:0b:4d:c7:01:06:c0:45:c3:e0:23:66:
                    95:d7:7d:9e:ee:37:74:2f:29:eb:a9:18:b9:d1:84:
                    e9:7b:47:96:12:db:76:9c:23:55:37:fc:26:18:f0:
                    f4:36:e2:23:92:c6:b2:6b:9d:19:f1:1d:71:80:f8:
                    a6:08:25:04:a4:a4:31:2b:5f:09:24:18:45:23:2c:
                    85:89:08:5b:59:eb:ab:f0:7f:df:4e:46:52:8c:03:
                    e2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:1B:E4:07:6D:55:A0:23:9D:EB:87:51:66:45:92:63:0A:9F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl

            X509v3 Authority Key Identifier:
                keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.61.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3d:3b:88:a3:70:e8:d0:28:da:43:51:ff:90:64:29:3b:c4:
         2f:4c:e3:a0:f1:2a:e0:25:39:e8:1d:f2:11:ae:06:d2:71:59:
         3b:61:43:45:16:18:41:62:8c:d5:8d:ba:25:cf:70:f8:46:92:
         37:2c:0f:92:96:67:54:19:b4:71:83:e8:52:3f:f3:9f:3b:07:
         a9:25:1c:46:50:7f:ea:fe:be:e4:d3:65:de:6d:24:c5:97:c0:
         b3:ba:6c:50:04:7d:f6:3a:4d:06:02:d3:5e:5d:ee:d8:e5:2d:
         09:c7:19:13:2e:4e:71:30:99:ff:59:4e:21:96:ff:1e:2e:ef:
         ef:76:99:f5:f5:54:c1:36:14:6a:ee:17:c9:e8:62:c8:b6:82:
         3b:27:78:60:62:2a:25:4d:aa:97:8c:ae:c7:3b:0b:e0:72:89:
         ad:cc:f5:ec:9c:83:e1:69:e9:19:b1:9f:b7:de:13:04:eb:d1:
         8a:1d:f9:2d:ce:16:df:d5:65:81:77:11:45:b5:5a:99:82:d6:
         24:0d:92:2b:2c:89:d8:73:d5:e6:c9:62:09:87:83:50:39:03:
         f5:61:66:4f:a9:ef:24:46:02:2b:53:8c:7c:cc:5b:77:3e:c3:
         40:20:44:51:f9:21:f9:71:e1:24:99:82:82:79:1c:46:da:1b:
         3e:38:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:03 2025 by rpki-client