Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/9eae65fe-90c5-376e-bd01-14862516eeda.roa
File:                     9eae65fe-90c5-376e-bd01-14862516eeda.roa (raw, json)
Hash identifier:          X8y6nSWHcau9240OR7LIktvE4a8H03/qJickraPV8ks=
Subject key identifier:   49:5C:65:61:AA:62:C9:08:3F:C2:AD:0C:E9:EF:32:5D:8F:27:AE:41
Certificate issuer:       /CN=88119593-ed92-40c6-8543-9a9b06b6a64f
Certificate serial:       010D0C9F432858490E16C7416FFD6FC841BD9640
Authority key identifier: 86:5B:00:52:5A:03:DF:2A:F2:1F:6F:A9:66:B8:60:8F:D2:3E:30:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/9eae65fe-90c5-376e-bd01-14862516eeda.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        192.81.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c7:41:6f:fd:6f:c8:41:bd:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88119593-ed92-40c6-8543-9a9b06b6a64f
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=5da91ab7-cdad-4c4b-9746-85a957e522e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:75:36:45:1c:41:b7:c0:92:d1:fa:f2:46:
                    03:7e:60:c8:d7:e3:50:19:fe:0d:79:0f:c2:39:5c:
                    54:10:5b:7e:8c:3b:ad:54:c2:fc:2f:13:60:52:99:
                    ee:55:46:43:68:61:5f:d5:f9:50:89:07:26:c6:22:
                    6c:c6:c4:0a:ea:44:4a:d2:3a:2e:bd:b5:86:12:ac:
                    e7:0d:7f:22:29:fa:79:45:b9:57:10:8a:9b:8c:0a:
                    a0:d8:a2:50:5e:7a:85:64:3c:8a:a0:0c:d7:6d:f9:
                    6e:a5:1e:98:9e:96:ef:4d:b1:26:07:8b:95:f9:2f:
                    2e:b0:dc:a0:59:03:26:94:fc:51:9b:e7:c3:1d:5f:
                    02:b9:05:bb:79:15:05:00:29:f4:70:71:f8:51:9d:
                    a3:b5:7b:4f:8a:42:e7:22:79:bb:9a:dc:b1:b4:03:
                    4e:b8:da:78:c6:71:94:78:7f:ca:0c:42:cc:cf:e6:
                    d1:70:e8:5e:88:44:36:86:6d:b8:9e:a8:e0:26:16:
                    9a:e9:74:b9:79:58:52:b6:86:38:c5:cc:8e:05:14:
                    40:c4:ef:f2:e2:f6:6e:1e:3e:a7:a9:ce:61:59:31:
                    4e:cd:e1:9b:fd:98:d6:a5:c5:14:29:a0:00:75:ff:
                    4c:64:73:89:d4:86:7b:b9:26:e9:04:39:e9:a5:17:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5C:65:61:AA:62:C9:08:3F:C2:AD:0C:E9:EF:32:5D:8F:27:AE:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/9eae65fe-90c5-376e-bd01-14862516eeda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.crl

            X509v3 Authority Key Identifier:
                keyid:86:5B:00:52:5A:03:DF:2A:F2:1F:6F:A9:66:B8:60:8F:D2:3E:30:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:8e:e4:91:d9:fb:64:0e:6e:08:25:b3:2f:5d:1d:d2:64:
         32:e7:d0:b2:2b:6c:d8:9f:23:8d:ad:71:f9:9c:96:5f:cc:58:
         21:a2:eb:df:7b:48:e4:76:2c:8e:9b:bf:5e:6f:04:e4:8c:07:
         52:ba:42:38:fb:69:5e:8d:89:1b:6a:ca:85:67:b8:52:85:00:
         b4:42:db:6e:dd:0d:0a:e7:48:03:8d:84:1b:eb:38:d3:a5:8d:
         12:32:7f:4c:76:38:d6:bf:49:d6:ab:e8:41:5b:89:c2:fb:a2:
         e3:ec:e8:d2:1d:68:78:11:7e:11:ca:ec:63:75:20:e0:08:54:
         ac:61:0a:05:f6:b9:ae:60:5f:1d:c1:30:c3:fb:3c:81:ad:b6:
         d7:6b:dc:40:84:d5:72:c1:13:3e:4a:38:3a:e6:9c:d6:b0:dd:
         c6:21:f4:d4:98:d6:3c:55:ec:a9:fd:6f:cc:fb:62:82:bf:6f:
         3b:45:12:df:63:56:9e:b6:7b:da:77:ee:42:57:24:cd:91:7a:
         a9:18:60:f4:44:06:19:2c:85:18:9f:19:bf:78:9c:a8:00:3e:
         c3:78:f8:a4:66:bb:53:ae:10:4b:7e:7e:12:c0:9d:39:10:31:
         d3:50:10:41:9d:f7:c0:b5:c6:50:b6:20:88:ff:b0:a9:2c:e1:
         94:35:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:42 2025 by rpki-client