Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4b0d120-3813-314a-a07a-ccef783958c3.roa
File:                     e4b0d120-3813-314a-a07a-ccef783958c3.roa (raw, json)
Hash identifier:          9XbSWoUlLJLKN0vls6OwH5tIk8NKgCIt7Jmy4c3taRw=
Subject key identifier:   00:49:4C:4D:E8:40:BC:6D:F0:52:E2:39:C5:27:3B:B3:D8:8E:E5:9A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849088187F06C31C6D043992AC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4b0d120-3813-314a-a07a-ccef783958c3.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.159.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:87:f0:6c:31:c6:d0:43:99:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=a705474f-bfe9-427e-b409-9833e2831698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:b8:82:8e:bd:de:31:7d:65:3e:fa:2f:5d:
                    31:76:3f:dd:93:c7:9a:c6:8a:b9:01:fa:07:03:75:
                    e4:ab:6e:6a:13:6b:47:4a:bb:10:7d:ec:26:3d:00:
                    e9:a1:40:b0:60:27:81:e3:49:b0:d1:55:93:7d:12:
                    b4:23:d9:f5:00:be:62:51:dd:71:ad:ef:1d:46:f9:
                    5d:42:81:0e:c6:a9:f1:ba:78:16:dc:45:00:2e:b9:
                    53:1e:bc:ce:80:d9:82:b4:ee:d0:27:03:15:99:80:
                    91:e7:43:38:a4:d8:89:ab:e8:4c:3b:72:12:5a:1c:
                    f7:33:1f:05:6b:08:db:1f:85:7e:58:32:47:d2:28:
                    e1:8f:58:ba:0a:dc:23:45:53:ff:e9:fc:f2:27:91:
                    2d:4b:92:be:8f:a1:46:cb:c7:c3:96:82:de:76:00:
                    c3:2b:47:40:93:17:c5:62:b7:e4:c3:8f:d8:cf:dc:
                    52:b2:bd:27:1a:4f:53:6d:0c:5c:97:0e:b0:b9:4d:
                    1d:1f:4c:8e:06:84:de:b5:0a:03:1b:a2:bf:49:c6:
                    96:3c:ce:83:fa:50:a2:ed:bc:19:b4:5c:87:5e:b2:
                    05:6f:1f:61:74:91:86:8b:43:c4:c7:41:56:64:d2:
                    b0:b7:3b:d5:3e:dc:a0:d4:5a:05:ad:a3:33:1c:75:
                    fc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:49:4C:4D:E8:40:BC:6D:F0:52:E2:39:C5:27:3B:B3:D8:8E:E5:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4b0d120-3813-314a-a07a-ccef783958c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:63:f2:ef:bd:39:ef:b1:a0:b5:36:58:de:54:4e:88:cd:cb:
         f8:66:95:f9:fe:ad:da:b9:8b:fe:67:be:d4:a0:7a:7c:ee:a7:
         41:05:33:52:72:e0:f7:ba:cc:39:40:38:f0:fa:f5:d2:79:38:
         1c:e2:a6:ef:d6:58:cc:84:4c:56:6e:8b:84:68:60:42:1c:71:
         cd:65:b8:4d:e9:d2:97:98:8e:da:a7:6a:b0:16:41:f3:14:04:
         9e:88:a1:15:6c:8c:c9:88:36:77:43:2b:0f:86:fc:b6:4e:f0:
         0a:34:24:8c:65:7e:13:f8:4f:02:e8:b1:82:8c:18:9f:fa:0f:
         f5:85:89:0d:76:3b:87:dd:6c:f5:f5:52:00:94:22:96:29:34:
         53:f2:73:e5:fe:fd:cc:e7:86:54:9a:9b:d6:53:a6:da:10:91:
         a5:0f:83:cd:02:a1:74:a3:18:76:94:3f:8e:d3:29:78:f3:08:
         21:14:89:73:1a:42:3a:eb:f4:3b:fe:24:a5:49:58:65:9a:d0:
         51:dd:20:f6:47:1d:4d:4f:57:e3:5f:d1:7b:11:04:9b:5a:99:
         25:94:d7:ca:6a:ea:76:45:93:bb:16:d2:71:ff:4a:82:f8:40:
         e6:66:97:4a:44:4f:d2:4b:4d:b9:8c:10:d2:9c:a4:09:df:dc:
         ea:76:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:41:07 2025 by rpki-client