Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7eadeb82-3625-3cb2-bbf1-15848859968f.roa
File:                     7eadeb82-3625-3cb2-bbf1-15848859968f.roa (raw, json)
Hash identifier:          Jh9j35exYsX4tofx3LLNMNuUm3DxZbv/SKAKtGR42/Y=
Subject key identifier:   98:BC:A6:16:05:B1:72:BA:04:70:2F:E2:EB:2F:81:0C:70:FB:E2:96
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F43285848E2D10929CE71C1E7D5E5E600
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7eadeb82-3625-3cb2-bbf1-15848859968f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     1403
IP address blocks:        185.146.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:09:29:ce:71:c1:e7:d5:e5:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=da117b14-909c-495f-986f-630c2dc2d691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0a:0b:bf:44:a5:3d:8f:4e:45:b2:cd:00:6a:
                    d3:52:b7:4d:f4:98:29:61:e0:d4:ab:c3:ef:45:07:
                    c4:54:39:e8:86:fd:57:61:be:b1:3e:f8:5c:f7:16:
                    cf:9d:c7:62:62:d3:5a:ba:7c:64:f7:d8:d2:84:36:
                    be:57:3b:cb:aa:97:5c:ea:20:17:00:59:80:df:14:
                    c9:c3:a4:2b:df:5a:d6:0f:f3:95:1f:b0:e2:ac:5d:
                    01:6f:31:6c:9d:86:e0:dd:dd:20:70:14:09:7d:30:
                    e5:bd:c3:73:3f:cd:84:00:6c:c5:91:5a:10:a5:11:
                    b9:36:bf:7b:bc:3f:8a:bd:94:86:f0:4f:c3:31:e8:
                    cf:9b:13:7f:d3:81:a4:9f:23:33:63:05:15:00:57:
                    85:82:23:94:89:d0:53:2a:7f:b1:86:f3:4e:3c:7d:
                    5e:24:ca:f1:8f:65:9e:98:d0:4d:72:55:8f:88:a0:
                    0d:86:50:b5:66:de:e4:f2:83:02:15:1e:aa:28:d0:
                    dd:c8:ec:18:a7:e8:13:b5:84:4d:37:9e:1d:ee:1c:
                    f4:f5:dd:ea:07:2e:4f:4c:1e:51:4b:44:d5:8a:dd:
                    c0:8b:e5:a7:13:16:f8:14:df:82:98:04:75:37:2e:
                    9e:30:3b:85:19:ff:d5:af:3a:8f:61:30:32:62:a4:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BC:A6:16:05:B1:72:BA:04:70:2F:E2:EB:2F:81:0C:70:FB:E2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7eadeb82-3625-3cb2-bbf1-15848859968f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.146.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:b6:ae:78:34:c5:ff:dd:a0:14:55:e0:fe:1b:38:4d:a9:21:
         46:58:65:b0:17:90:ea:ad:ef:b5:4f:f4:74:ca:89:75:2e:ef:
         b7:de:95:11:d6:1c:7c:2e:7d:0b:67:e8:2f:63:da:72:5a:2d:
         6c:d3:e8:c2:2f:dd:19:38:2e:a8:ba:58:4c:ee:22:c3:df:cc:
         81:3b:aa:af:02:ec:12:a5:4f:2a:9d:c3:8f:aa:b0:e7:cd:a9:
         93:7c:70:c1:9b:6e:ff:0e:71:4c:67:52:8b:7c:25:e2:d5:10:
         7a:b0:fc:6c:50:2b:b2:fe:50:4b:80:d9:a2:7a:5d:26:5f:e5:
         b2:76:99:69:b2:ca:31:13:59:1d:05:a9:53:ee:8a:2f:b1:c3:
         31:0c:01:fd:3a:f5:49:1c:7d:62:18:52:a1:84:c1:bb:c7:a5:
         8e:d9:a7:07:34:f3:9d:f4:4f:1e:ae:57:98:2b:ea:cd:87:ce:
         93:6a:36:a3:6f:72:e9:15:fa:a6:01:2c:6b:52:88:c1:07:b3:
         bc:13:7a:12:bd:80:c6:6b:eb:e0:1d:4a:38:93:dc:d6:e9:71:
         c0:7e:9d:d1:24:3f:3c:e6:ab:49:a7:68:da:94:e7:73:80:fc:
         4a:68:6b:34:2c:f8:9e:19:ed:63:1b:6b:a5:57:32:24:1d:2d:
         89:0e:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:48 2025 by rpki-client