Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1003e593-be44-33da-81cb-ac3b31144652.roa
File:                     1003e593-be44-33da-81cb-ac3b31144652.roa (raw, json)
Hash identifier:          4s03GZF/ifHp+6iX7NhRdg3yEu6haZi/Tp4Isy7tPrY=
Subject key identifier:   D5:F4:33:E2:6B:7C:EA:98:DB:3D:36:02:13:97:10:4F:69:A9:1B:E5
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285848BFEB92185CF6E6AC335BBD80
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1003e593-be44-33da-81cb-ac3b31144652.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        155.226.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:92:18:5c:f6:e6:ac:33:5b:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=ce760c19-2ed4-4a1a-a6f3-ceba4679ef39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:f8:20:cf:4c:d4:6c:0b:28:78:c8:69:19:
                    e5:a9:31:5f:38:b5:a8:28:9a:d7:1d:7e:35:c2:c6:
                    cf:dd:bb:a6:16:38:af:80:89:c8:91:a6:8e:88:75:
                    b9:e5:41:10:70:b6:f3:b6:e8:eb:d9:b8:de:10:92:
                    44:8a:c9:99:86:41:0b:af:52:a2:74:92:46:11:c7:
                    82:69:8f:76:94:3f:92:8c:8e:3c:07:d8:9e:c9:02:
                    d0:d9:91:7f:d7:9c:15:47:a8:c5:59:b9:1f:20:7b:
                    29:4a:1f:e7:0a:20:13:c9:55:ef:8b:19:9b:61:46:
                    a2:23:1f:18:00:d6:bd:44:8f:69:d2:af:52:3d:68:
                    f0:d3:1a:49:00:7c:88:27:f3:53:54:d3:00:29:cc:
                    d3:34:6a:c6:c1:d3:b6:b5:9c:38:2e:a1:f0:1b:4c:
                    c2:42:23:37:64:aa:af:9c:18:44:ec:ab:4f:b2:f9:
                    36:54:f9:92:53:de:aa:d3:2b:54:89:ba:18:ef:13:
                    3b:73:be:98:c8:7d:2f:d5:12:ca:f9:7b:8c:25:c1:
                    e4:7b:9b:3d:24:32:d2:e9:3e:6b:c9:57:1c:03:0d:
                    63:9b:16:b0:25:03:05:a3:28:ca:53:61:2e:ec:47:
                    b1:59:07:20:76:66:3b:93:0d:e7:17:cc:ca:44:27:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F4:33:E2:6B:7C:EA:98:DB:3D:36:02:13:97:10:4F:69:A9:1B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1003e593-be44-33da-81cb-ac3b31144652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:14:f7:ed:f5:3a:1c:a0:56:d9:47:2a:8f:06:68:9f:43:08:
         a7:f6:06:dc:94:fc:4a:25:94:f0:f9:85:51:38:e4:cd:50:41:
         74:cd:2e:c8:b2:6d:9f:3f:86:1d:b4:1d:26:25:f5:b2:30:9b:
         01:50:62:e6:a1:d4:80:c0:01:57:70:dc:e7:66:f9:d4:61:4b:
         b2:49:9c:fe:83:c9:f4:30:48:82:e5:9e:5c:4c:11:61:44:d7:
         0e:e5:f6:06:78:50:e2:1d:ff:f5:05:20:54:a6:f2:c6:d6:34:
         18:ae:f9:a5:9b:80:a6:5f:08:88:1f:f6:d8:52:73:a6:51:d8:
         17:fc:4d:94:93:c7:f0:19:8e:4f:ec:4b:96:cc:aa:de:e3:61:
         24:43:98:5b:0b:e8:4e:f8:52:a5:5b:72:03:de:7b:2d:a9:25:
         6f:f7:d4:42:c1:51:5c:0c:4e:d4:9a:33:bf:45:78:b3:ac:72:
         7f:64:45:41:51:24:3c:a2:ca:89:7e:3b:29:b1:77:22:20:c5:
         34:22:2e:61:37:1d:ce:08:38:4c:d3:d2:12:5f:36:ba:b8:f9:
         cb:99:a4:d6:0c:c0:46:ba:08:36:bd:1e:c7:75:de:7e:3c:29:
         63:1c:fb:1b:e2:d8:fd:bd:f2:e4:be:7d:8e:bf:69:28:46:34:
         f8:89:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:46 2025 by rpki-client