Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/119c49cb-8b94-365a-917e-11bb49f7fee7.roa
File:                     119c49cb-8b94-365a-917e-11bb49f7fee7.roa (raw, json)
Hash identifier:          FaOcLPK2rWlKG6Evl8N//ibjiCEl6uTJCHhVkg7W5cY=
Subject key identifier:   04:F3:7D:E5:80:4A:EA:62:9B:9D:EF:F7:20:CD:F0:D2:78:0E:71:99
Certificate issuer:       /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial:       010D0C9F43285848DD51847070F2DAAF21B69200
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/119c49cb-8b94-365a-917e-11bb49f7fee7.roa
Signing time:             Thu 13 Feb 2025 02:44:47 +0000
ROA not before:           Thu 13 Feb 2025 02:44:47 +0000
ROA not after:            Wed 14 May 2025 01:44:47 +0000
asID:                     14619
IP address blocks:        205.233.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:51:84:70:70:f2:da:af:21:b6:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
        Validity
            Not Before: Feb 13 02:44:47 2025 GMT
            Not After : May 14 01:44:47 2025 GMT
        Subject: CN=eb7d5fc5-a427-4edc-ad4a-d3e29677f1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:06:22:23:ac:ea:58:6c:3a:93:9a:f7:90:
                    33:32:66:9f:fc:59:20:6c:fb:08:f5:31:9e:3d:22:
                    44:40:f9:a9:21:46:e2:54:4c:84:3f:3e:1f:08:c6:
                    58:7b:9e:8c:10:ea:74:64:ae:2e:eb:f3:e8:db:e2:
                    4a:8c:4c:d8:71:73:c6:0f:9f:d0:03:40:04:ab:3f:
                    7d:82:1e:04:1a:16:95:a7:02:f4:4a:0d:bd:7b:c5:
                    74:af:7a:d8:72:2b:8b:6b:43:17:fc:eb:1c:1a:e6:
                    ca:93:67:ec:6a:7b:78:11:65:1e:a4:c3:c7:03:02:
                    46:2b:a6:5b:bc:2c:dd:d1:b5:6e:da:83:36:5d:52:
                    e4:9e:04:36:4c:67:ab:b8:59:5b:66:fa:ac:01:41:
                    2e:fd:91:de:8a:a5:6e:c4:a8:5a:5a:ec:a6:f2:fb:
                    89:f3:ae:ab:e8:f1:2d:de:f3:6a:fe:7f:25:c8:a4:
                    64:b4:75:61:5a:20:07:df:b4:ff:b7:1a:b3:d8:a9:
                    62:92:ca:23:96:4c:36:b2:7b:a2:fb:19:93:87:4d:
                    22:a0:25:0d:d9:75:b3:b2:cd:48:22:1f:a0:d0:29:
                    e3:93:72:6b:f2:ed:d2:f0:be:9c:0e:02:9b:f2:d0:
                    3c:18:27:a7:d7:be:a7:f7:87:1b:c7:8a:9f:75:32:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F3:7D:E5:80:4A:EA:62:9B:9D:EF:F7:20:CD:F0:D2:78:0E:71:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/119c49cb-8b94-365a-917e-11bb49f7fee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl

            X509v3 Authority Key Identifier:
                keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:c3:e7:5a:b0:9b:a5:f3:fe:b8:9a:65:ee:d1:74:64:a0:92:
         01:0d:3e:c2:bc:86:d7:27:d4:a7:aa:e6:23:35:8e:09:36:25:
         1e:75:a8:c7:55:53:46:9f:e3:b2:de:85:55:7d:55:95:0d:df:
         99:58:3f:af:9c:76:47:9d:6d:5b:df:69:0a:e3:d7:27:ec:e9:
         9f:a7:f1:0a:95:03:10:49:4b:37:51:2f:eb:e6:f3:fc:4e:42:
         cb:7c:74:9a:8a:fd:d2:f3:bf:67:ba:77:e4:c5:f2:1b:f2:73:
         ab:73:c1:56:be:82:e9:ca:12:ba:5c:92:64:30:b4:d1:8a:e0:
         0f:c5:e0:c7:e8:25:9a:35:9d:b9:7e:7c:bf:8a:42:37:49:e6:
         06:cd:88:01:a0:4b:56:8b:0e:24:85:58:1d:34:47:a4:05:c6:
         ac:d7:67:03:78:fd:99:27:4d:d2:f5:e6:6e:88:c8:95:0f:fe:
         de:43:ff:c0:ab:18:98:11:57:1b:43:10:a4:bc:1c:bd:bf:7d:
         d0:e0:20:5c:b5:58:b3:88:f6:72:48:9f:12:ce:8a:5d:4e:9f:
         b3:ca:7e:9d:2f:5d:65:36:0e:f1:53:e3:60:21:b5:a9:d3:3a:
         a6:18:45:ed:06:e3:77:95:e7:c3:32:7e:76:48:3f:d6:78:d1:
         70:3b:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:19 2025 by rpki-client