Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa
File:                     ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa (raw, json)
Hash identifier:          Nv5mIeo0GST3hq1D0SxakW5fxDin3mpTBr/QJBixUiI=
Subject key identifier:   14:E5:1A:8C:8B:D6:26:90:49:31:3C:C5:5A:7F:DC:31:B0:6D:DD:09
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584957F3F6A2CF934D752C677E00
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     18434
IP address blocks:        147.249.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f6:a2:cf:93:4d:75:2c:67:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=31a27251-64bf-4df0-80ca-b7d990fed4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:94:67:81:aa:7b:c5:73:09:86:22:9e:41:
                    e5:44:35:39:1f:3c:1f:f1:53:51:51:00:01:22:47:
                    00:36:b4:23:08:c6:cf:de:a3:bc:d6:a8:54:c6:f2:
                    67:3e:74:bb:9c:3a:76:39:a6:df:67:61:11:2d:fb:
                    aa:a7:91:4d:6f:82:4d:eb:58:17:06:2c:63:f4:30:
                    fc:fe:f8:eb:9a:22:d9:c2:e8:09:33:19:5b:e0:33:
                    15:2a:ca:9c:c5:63:3c:12:c6:e3:c0:0f:1b:2f:ce:
                    f5:a3:31:3f:c3:bb:64:3a:0e:7a:41:4f:3c:a6:9f:
                    23:1c:18:47:54:0c:6c:1b:30:cb:8e:99:d3:8d:cf:
                    fd:a7:8c:66:f9:39:7b:4c:d3:78:c9:f1:81:d7:4c:
                    1a:8e:f5:94:95:dd:a5:66:40:dd:2d:d1:cf:be:ee:
                    90:1f:53:b8:3e:28:0c:26:a0:22:4d:5d:08:a6:6a:
                    40:86:1c:70:89:b1:99:95:e4:dc:4f:11:33:97:8a:
                    45:a8:12:08:da:37:62:79:46:01:47:8b:5a:2e:62:
                    9c:cc:0a:8f:e8:73:21:72:63:25:7a:0a:ce:e3:6d:
                    e1:0f:a7:8a:62:48:26:7a:c4:f8:a4:80:ba:1c:6d:
                    20:31:08:d3:3e:a9:32:e2:1f:5d:e4:4a:15:6b:ec:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:1A:8C:8B:D6:26:90:49:31:3C:C5:5A:7F:DC:31:B0:6D:DD:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.249.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:34:ee:19:43:45:ab:f8:27:1b:37:55:ac:bb:40:98:f0:
         0e:42:11:2d:43:42:f2:90:66:7d:47:1c:c2:d5:14:e7:1c:76:
         49:19:ee:b3:12:4e:71:4c:9e:71:21:c1:83:f8:17:2a:40:6a:
         0c:60:90:9c:c9:cd:94:d8:75:34:f9:97:ac:81:bb:e6:1b:8b:
         ba:24:34:7c:77:62:de:26:cb:5e:16:72:af:d2:15:b3:20:a6:
         24:47:44:73:a6:45:db:5b:95:bc:6e:10:9b:d2:ca:48:83:c4:
         3a:54:5c:3c:0e:c1:07:13:8d:d5:bf:2f:13:6c:fd:86:5f:7c:
         e9:29:8c:26:65:56:e6:34:98:27:a7:96:f8:74:3c:55:ee:8a:
         69:16:9c:1a:7a:34:00:53:69:ca:57:7e:4a:c5:1b:7a:ec:a5:
         19:de:ba:f5:65:82:9b:29:a6:fd:fa:01:50:73:f1:68:87:27:
         e7:85:f8:99:b8:67:27:19:55:c1:12:b6:10:bd:0a:b1:09:53:
         98:00:0e:10:2a:09:d2:ec:a7:78:3d:32:6c:1f:d2:8a:ad:fa:
         15:ef:a1:f8:07:06:c6:88:9c:35:50:8f:a6:26:5a:ed:7a:48:
         01:f3:4a:a7:96:00:24:86:dd:ff:b8:7c:c4:8a:03:db:1b:fe:
         f6:4e:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----