Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/520203ac-fe41-3298-8b27-7e9ad2b5aa83.roa
File:                     520203ac-fe41-3298-8b27-7e9ad2b5aa83.roa (raw, json)
Hash identifier:          +proQ4+WVd7We60Byhx0lieAkQv6UBZDK7ECLd/NmaQ=
Subject key identifier:   2F:65:8B:8C:71:76:35:15:13:DB:0A:03:3D:21:63:F0:7B:DB:DB:B0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848F00C4CECF4998AD95D9E5FC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/520203ac-fe41-3298-8b27-7e9ad2b5aa83.roa
Signing time:             Wed 19 Feb 2025 19:45:40 +0000
ROA not before:           Wed 19 Feb 2025 19:45:40 +0000
ROA not after:            Tue 20 May 2025 18:45:40 +0000
asID:                     62240
IP address blocks:        166.88.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:4c:ec:f4:99:8a:d9:5d:9e:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 19 19:45:40 2025 GMT
            Not After : May 20 18:45:40 2025 GMT
        Subject: CN=0ed3fe47-057a-428a-bb3b-9702b189222e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:f7:a9:7f:03:a2:0a:8a:75:89:ce:be:21:
                    53:e5:00:54:f5:91:f4:33:b3:a3:fa:55:4a:d4:ba:
                    c3:43:3d:98:5e:cf:10:ad:2f:b3:ea:90:6e:d9:02:
                    12:1f:77:f1:ee:ca:87:e5:3a:26:be:f0:db:58:9c:
                    5e:4f:4b:3f:0a:72:12:ce:b5:79:c9:cf:2c:cd:09:
                    88:46:74:b1:bc:96:df:16:29:b4:dc:10:eb:65:3b:
                    d6:59:c2:33:18:06:f3:6c:27:9c:73:bb:34:4b:7d:
                    44:26:83:73:1f:f0:30:44:7c:4a:bc:b6:b0:f9:4d:
                    0b:3b:d9:71:d0:b3:4c:45:48:f8:cf:1e:f1:a7:1b:
                    e0:b4:4b:9b:f6:81:82:ec:cb:1b:7d:44:69:e7:fc:
                    a8:b7:e6:fa:ef:e6:24:b2:f4:a5:5e:0b:52:2e:59:
                    91:90:50:6d:26:99:92:1a:de:fb:7f:53:4d:45:59:
                    80:15:6c:fe:82:fb:6a:7f:8c:66:ac:53:d2:70:df:
                    4f:78:65:ce:45:e0:7e:a4:61:41:4c:49:55:18:66:
                    57:ad:e9:df:0b:94:2e:02:a7:72:38:c1:22:db:06:
                    51:d4:db:1a:44:60:0b:a2:33:58:33:12:5e:61:77:
                    87:34:1a:18:df:a0:79:52:cb:fc:00:4c:b7:c6:13:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:8B:8C:71:76:35:15:13:DB:0A:03:3D:21:63:F0:7B:DB:DB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/520203ac-fe41-3298-8b27-7e9ad2b5aa83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:84:c6:e0:ef:8e:b3:ac:3a:c6:ae:3c:6d:8f:eb:dc:ed:06:
         17:9a:e0:d6:85:0b:d3:8c:de:8d:7b:af:16:d3:53:bc:c8:39:
         dd:d9:07:b7:7d:71:7d:3d:d6:1a:61:eb:de:68:a2:6c:49:e0:
         e4:9d:73:bc:68:a6:dd:d4:19:08:d2:4e:cb:37:ab:6b:bc:b1:
         47:d1:f0:a1:e6:14:6c:c6:08:ca:e6:41:a6:24:75:95:bb:6c:
         cc:fc:df:74:27:cf:7c:35:52:da:67:12:62:f1:8e:fa:40:50:
         d4:32:4b:cf:3a:d4:da:60:42:9c:f8:f4:3f:4c:67:a8:34:e9:
         4d:fe:71:e9:cd:63:b3:ad:67:ad:37:3d:f5:38:dd:1e:14:0b:
         3a:be:d0:ee:f6:9b:8b:37:d7:aa:aa:01:ea:d9:bd:3f:9e:30:
         5b:76:71:29:3a:35:4a:6a:2a:f9:d1:fd:fe:c1:b7:3c:1f:b0:
         e5:57:43:4b:7f:51:91:00:55:88:c6:0c:6d:15:db:a7:81:4c:
         7f:61:88:62:6e:4b:ad:50:b4:2c:59:1a:22:23:6b:98:b6:a7:
         0e:06:c3:b2:66:b5:da:49:e2:75:5b:db:d4:54:a4:88:db:11:
         f7:43:c5:79:90:6d:6e:a6:31:89:74:49:8b:48:f1:68:b1:9a:
         08:ac:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:28:49 2025 by rpki-client