Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56068d5f-3e33-348e-92b0-c270a8e69fb3.roa
File:                     56068d5f-3e33-348e-92b0-c270a8e69fb3.roa (raw, json)
Hash identifier:          bsq36R+mGOGRsFwLPqud0ERbe1wyM/34JBAsJbpTLVA=
Subject key identifier:   2D:1F:B9:C8:80:BE:E0:25:14:FA:44:C7:37:E4:60:12:B4:E8:A1:E1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071C058A3F89279A619B9940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56068d5f-3e33-348e-92b0-c270a8e69fb3.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        108.162.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1c:05:8a:3f:89:27:9a:61:9b:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=ee9d442b-b1b4-48a9-bb63-343a4d2d3ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:90:3c:2d:0c:59:d9:7a:31:3b:30:ca:01:
                    f1:7f:c9:25:52:9c:1d:96:9f:36:54:da:aa:65:b4:
                    95:6c:53:14:58:90:90:ab:e9:41:f1:1e:52:9d:ea:
                    ab:6a:b7:d4:a9:0f:a3:65:49:1f:e5:78:5a:c9:15:
                    84:c4:d1:bd:75:f2:a4:e3:2a:c1:ba:ed:78:df:08:
                    22:c8:f7:5d:af:87:81:d3:0a:ef:e5:ac:f2:ed:98:
                    9f:d8:13:fc:e5:7e:2f:87:7c:e6:fc:08:dc:c9:51:
                    61:0a:aa:d2:eb:db:ef:b4:91:a6:bb:a2:10:4c:49:
                    61:cc:26:9e:33:52:63:07:0f:ae:60:bb:9b:16:3a:
                    81:54:c5:09:b9:a9:bc:11:bf:23:85:94:c4:56:71:
                    b5:ec:74:e5:36:9e:df:0e:25:28:79:02:cf:35:5c:
                    b6:82:36:d9:da:6d:b2:94:27:74:38:87:da:e0:36:
                    93:3d:a3:be:ce:dd:88:ac:27:a9:15:ff:6e:fb:fe:
                    e0:45:d6:4c:05:0d:a5:41:71:c4:9e:d0:90:ae:af:
                    0c:d6:33:42:d4:39:61:8f:54:7b:0b:cc:b5:73:4d:
                    a0:c3:3a:58:bb:1b:0a:99:0f:54:20:77:1b:71:ca:
                    82:30:a8:a6:0d:fb:25:fc:47:6f:e8:e4:d2:47:fd:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1F:B9:C8:80:BE:E0:25:14:FA:44:C7:37:E4:60:12:B4:E8:A1:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56068d5f-3e33-348e-92b0-c270a8e69fb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ed:59:e9:d0:45:31:7b:42:dd:25:e8:4f:64:44:99:d3:37:
         ab:ff:38:b7:0b:20:19:4a:70:b8:4e:b9:cd:88:d1:6c:88:5c:
         be:fc:94:53:6d:d9:73:a0:48:71:0b:3f:a7:3a:3a:6c:db:e2:
         2b:a3:06:3f:ec:f4:fe:99:25:a7:51:ff:82:d7:69:54:2d:75:
         0b:fa:72:b1:e3:1b:c6:33:1f:f9:45:34:49:d7:20:1c:a4:6b:
         f3:32:07:55:ea:4f:e4:94:61:6e:07:84:ed:8b:8f:ee:04:3f:
         39:56:e3:f8:87:f3:31:d8:a0:b6:42:02:79:2d:98:a8:f9:d4:
         f7:42:4b:55:78:81:84:74:a9:95:fd:21:28:00:f4:b8:e5:ea:
         5f:e1:37:d0:c5:aa:1b:3f:6a:71:b2:9b:f6:11:20:bf:3a:4d:
         90:9e:b5:e2:a0:d9:30:ca:f8:3d:16:fe:b8:38:14:b9:34:5d:
         0b:54:e5:13:b2:d2:2a:57:8f:3b:fa:d6:0f:45:63:69:ae:7d:
         88:db:25:e0:40:ac:45:d7:2b:37:a6:72:ed:e4:f5:16:6e:87:
         e3:57:bd:fa:47:68:54:1f:fd:22:0f:1e:b5:54:5d:45:72:07:
         61:d8:57:28:b8:09:f8:9e:68:c3:c3:ba:de:7b:29:17:78:5c:
         fd:00:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:35 2025 by rpki-client