Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/186ed1c4-1800-342a-a23a-48f3f305d0cc.roa
File:                     186ed1c4-1800-342a-a23a-48f3f305d0cc.roa (raw, json)
Hash identifier:          g7F4xJ5BpvqZPc92zgLUF6lrD2yCYSuVm9F1N9FpJ0c=
Subject key identifier:   78:86:90:7B:80:34:7E:E6:13:96:38:EC:9D:D5:66:00:E9:D8:BB:ED
Certificate issuer:       /CN=e8253a5c-5822-44df-8846-56b6c0450bbe
Certificate serial:       010D0C9F43285848C2B64DE19B11B1D0B95D7400
Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/186ed1c4-1800-342a-a23a-48f3f305d0cc.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     19905
IP address blocks:        158.222.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:4d:e1:9b:11:b1:d0:b9:5d:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=ee27227e-edfe-4795-8e97-ab048581446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b0:a6:ab:0c:15:3c:a6:d1:b8:f4:90:2a:e4:
                    dc:34:50:b3:10:60:48:d6:a6:38:4d:28:60:59:5d:
                    1f:14:0f:40:eb:97:0b:65:25:81:14:78:71:f2:85:
                    56:d9:36:34:8e:67:24:00:0e:ab:a2:88:75:65:5b:
                    ca:a7:1e:c9:f5:a9:e9:74:04:92:f3:ac:c0:78:1f:
                    12:76:c5:f5:9f:1c:07:c7:16:0a:c0:61:84:66:aa:
                    7b:10:12:e7:9b:87:cd:87:4d:dd:70:b4:52:45:33:
                    d5:73:4b:43:53:ad:4e:ae:db:ba:19:25:a9:f7:51:
                    3a:55:70:73:33:6b:fe:a8:58:44:19:f0:ab:41:d7:
                    5b:17:3a:19:0a:6a:b7:b3:1f:54:c4:1b:3d:9b:84:
                    bb:a2:8c:c0:1f:47:a1:1e:b0:1f:14:7d:42:50:1a:
                    29:87:be:b8:ce:40:e2:6e:10:df:fe:b7:45:c9:65:
                    00:c8:e0:92:df:9b:27:2f:6e:7e:30:38:ea:6a:86:
                    e5:89:76:7c:78:5e:d1:93:d3:4a:d1:17:4d:a1:1a:
                    bc:be:38:8f:6f:ac:88:9c:1a:b7:96:29:f8:76:36:
                    66:ea:ed:33:c7:2f:b6:16:70:b4:b4:fa:12:49:26:
                    79:b5:db:ea:0f:e6:00:c1:ae:4b:b1:40:14:7d:8d:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:86:90:7B:80:34:7E:E6:13:96:38:EC:9D:D5:66:00:E9:D8:BB:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/186ed1c4-1800-342a-a23a-48f3f305d0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl

            X509v3 Authority Key Identifier:
                keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:18:29:e8:ab:bb:89:6e:4d:4e:e7:2e:15:41:a2:d5:30:e6:
         11:f1:56:cd:0c:94:a8:71:bf:84:d1:ab:ae:86:14:3b:0a:e3:
         56:c3:28:52:f9:b4:a1:00:29:4e:f1:b9:8c:95:7e:ae:6c:79:
         b8:6a:45:07:c5:69:ab:4a:5e:e8:6d:c9:d1:a0:50:a2:84:eb:
         8b:8e:3d:fa:3c:e2:eb:10:af:9e:59:52:d1:f1:69:75:25:2d:
         6f:a3:25:f9:93:b0:1f:d0:23:8c:cf:64:6f:bd:41:19:3d:9e:
         50:01:ce:a3:f9:f7:26:5f:cf:7a:0c:f6:2c:bc:ff:35:3b:8b:
         f8:3e:dd:1f:4c:02:77:50:9d:01:af:1f:eb:6c:f1:d8:1c:18:
         5f:0d:db:22:f9:11:f4:10:55:79:b9:bb:bb:91:3d:80:d8:f1:
         ab:ea:8d:c8:b5:e0:69:86:c0:23:81:ae:70:7e:5f:24:cb:3a:
         02:a8:36:54:b0:c1:de:a3:68:29:64:da:d0:d0:d3:af:7f:d7:
         2d:d3:58:e1:fc:1d:9a:ab:b4:3e:00:2b:f6:52:e9:91:6d:b3:
         5f:28:30:a9:f5:31:a7:11:57:a7:4f:84:50:d0:60:2b:60:94:
         1b:15:7f:61:fb:ec:3f:f7:44:73:32:0d:f2:12:a4:9c:1b:16:
         70:c5:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:51 2025 by rpki-client