Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa
File:                     04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa (raw, json)
Hash identifier:          fW3KgrBk5fElVrhuWYwwKsdNnBu1ceDiu1B2avInpZg=
Subject key identifier:   E4:67:66:70:4A:C6:11:38:C7:49:84:91:74:EA:32:6B:3C:F3:AF:2A
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584957F3FCE9108BE5F3342ABA00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     62651
IP address blocks:        216.131.82.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:fc:e9:10:8b:e5:f3:34:2a:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=0747ac8b-7d50-4f12-abdc-cecbcf563bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:30:b1:87:7c:1b:75:b0:84:39:f2:1b:4c:
                    c6:d3:de:4e:58:be:64:18:8f:4c:42:e3:60:ea:03:
                    d9:8b:61:90:ef:27:4b:18:11:c2:a3:8b:8d:5c:c6:
                    81:71:83:53:fa:a6:f0:bd:f1:af:e2:c2:ab:f5:cf:
                    a9:62:62:b6:5a:10:21:97:63:13:51:4f:91:69:84:
                    34:de:c7:83:0d:b4:09:22:29:33:31:02:17:3f:c6:
                    c2:d3:ec:bd:b0:90:ce:47:bb:87:92:c2:f5:c6:cf:
                    e2:d6:a0:c1:89:cf:5b:09:8a:9c:1b:c2:5d:3a:15:
                    6b:6f:99:e5:e1:95:52:93:79:27:b3:69:0e:4f:15:
                    65:7b:67:1b:63:bd:d7:70:92:71:45:c7:08:b2:1c:
                    75:59:94:b3:76:3c:63:94:c7:6d:16:81:95:46:77:
                    1b:6d:41:4a:f3:e9:88:e5:27:d3:7a:c8:1b:38:e4:
                    c8:27:61:58:a3:ea:83:0e:aa:03:04:1a:67:42:5c:
                    f2:a9:65:d7:84:8a:b8:ac:e4:1b:4e:ec:61:0f:c9:
                    43:19:be:61:0b:44:8b:13:3e:ed:11:e1:f6:25:a5:
                    ea:23:4d:dd:22:86:ca:0c:7f:53:59:e5:cc:26:da:
                    e2:5a:38:86:78:ab:d3:95:b0:b4:7d:b3:d9:dd:e6:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:67:66:70:4A:C6:11:38:C7:49:84:91:74:EA:32:6B:3C:F3:AF:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04a91923-65cc-3d24-a1e9-cbe0da3af6ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:47:27:9a:8d:ab:85:65:4e:98:19:76:7c:ff:66:2f:6d:e5:
         e7:43:fe:ad:a6:e0:2d:df:ac:f4:7b:d8:6b:ff:1b:9e:2e:00:
         c8:7a:ce:66:80:b6:df:04:d8:b3:20:94:94:30:b5:14:01:71:
         8f:db:0b:73:7e:21:4f:49:e6:9f:d1:20:66:26:cb:f6:5f:75:
         87:cc:79:7f:c6:c7:5e:a0:3e:87:04:ee:be:7b:e8:81:0b:fd:
         a1:67:14:46:34:c6:29:0b:09:d2:ce:64:ca:04:cb:34:4b:38:
         f9:68:ed:76:b7:6d:25:30:dd:9d:8f:8b:d0:6e:d6:b0:df:7b:
         95:ee:3b:87:94:e6:24:41:4e:91:c0:f2:37:bd:3a:bd:e8:ec:
         9a:89:61:4c:5a:bf:15:48:5c:b6:78:67:0b:41:2b:c1:c8:3d:
         a3:04:98:7e:64:7d:e3:76:04:a5:c0:63:cd:f9:d4:84:30:e5:
         99:df:16:1f:18:39:43:dc:3d:14:f1:92:94:f7:87:ec:82:f0:
         c6:00:e2:3e:a4:98:0e:10:79:9c:d2:ec:96:b0:82:48:c6:ff:
         75:cf:7c:9a:ee:35:0f:d3:db:18:37:a0:16:1e:fb:a5:56:27:
         f6:d6:aa:6f:51:b1:07:96:a7:eb:32:71:9e:0e:85:31:d1:9b:
         7d:3a:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:31 2025 by rpki-client