Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4db05470-f440-33e1-aa17-276338e5cf75.roa
File:                     4db05470-f440-33e1-aa17-276338e5cf75.roa (raw, json)
Hash identifier:          AwZwk++SJl34EA6iEP+ZkfQOeOOTzLvo2VM+/2X9XmU=
Subject key identifier:   C8:C7:30:8E:4A:C1:E2:0B:49:FB:0E:DC:1B:C2:9A:6B:99:E2:FA:02
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858463289ABCB781315677C9C9CE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4db05470-f440-33e1-aa17-276338e5cf75.roa
Signing time:             Thu 13 Jun 2024 13:00:34 +0000
ROA not before:           Thu 13 Jun 2024 13:00:34 +0000
ROA not after:            Wed 11 Sep 2024 13:00:34 +0000
asID:                     7029
IP address blocks:        151.213.40.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:32:89:ab:cb:78:13:15:67:7c:9c:9c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 13 13:00:34 2024 GMT
            Not After : Sep 11 13:00:34 2024 GMT
        Subject: CN=de42c5d1-0d46-4646-979e-a50c0b850d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:e9:cc:3d:91:70:ab:ce:6c:17:38:90:f3:
                    20:cc:56:c0:6e:10:b8:6e:6d:d7:6d:ec:c9:63:b8:
                    3b:7a:9e:be:1a:59:b5:e5:09:4d:82:e9:ff:73:c2:
                    70:3b:3c:bd:b2:a2:55:9b:53:e3:19:30:eb:53:74:
                    73:ed:d2:5f:6c:bb:b5:3e:7c:97:96:90:fa:64:59:
                    b9:0a:5e:eb:a2:c7:bb:65:27:d6:54:0d:49:da:17:
                    7c:fd:fb:db:3c:a1:00:fc:7e:27:6c:e7:f7:5a:6c:
                    a4:ca:b1:bd:aa:57:44:30:a7:08:57:a1:48:28:63:
                    c2:52:71:09:1e:d1:7b:67:54:1e:79:e0:46:2d:67:
                    5c:42:46:2a:dd:99:74:7b:2c:d9:e1:eb:13:4d:e5:
                    b4:5a:db:b8:71:02:5c:31:e6:61:44:1f:6e:22:2e:
                    ab:f4:7d:c8:6f:e6:76:13:f6:58:03:ea:08:ee:87:
                    f1:18:f6:a4:94:3d:e8:fe:89:64:69:29:38:82:14:
                    75:b0:e1:a9:c6:e4:38:42:d6:7f:72:58:7d:42:54:
                    de:cc:07:91:bc:ca:b1:7b:3d:b8:86:82:26:50:73:
                    b9:85:e4:32:79:b9:8e:34:bf:22:34:6c:bf:4a:d3:
                    1f:75:75:a7:4f:3a:08:3f:2c:ff:32:c7:ef:7a:ca:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C7:30:8E:4A:C1:E2:0B:49:FB:0E:DC:1B:C2:9A:6B:99:E2:FA:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4db05470-f440-33e1-aa17-276338e5cf75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:45:d4:7b:d3:aa:2c:fa:8b:93:16:a6:27:e0:9f:d9:23:f4:
         29:ff:6b:2b:fa:dd:15:43:dc:85:10:be:be:c1:cf:f2:f0:df:
         ec:f3:7f:f3:c0:f7:b7:ac:a7:30:a7:28:34:25:19:0d:1a:8e:
         07:b1:45:c1:d4:eb:f6:11:32:5c:b4:24:08:a0:12:50:ef:d5:
         75:1b:d5:37:69:83:10:19:63:d9:5d:20:d5:e3:ee:8a:92:25:
         ba:ce:1b:be:0d:cc:dd:8a:88:a8:67:4a:f0:55:89:89:49:4a:
         93:c5:0e:fa:1d:20:10:c8:5c:2c:8e:1e:42:ff:35:07:07:63:
         92:7c:e1:bf:f2:00:1e:9c:9b:5c:9f:7d:5d:e2:b9:23:88:30:
         8c:e4:2c:e3:a5:86:aa:20:17:4d:30:bc:39:f3:b6:61:1b:d5:
         95:84:56:61:52:51:4b:08:ed:52:27:b5:3d:a8:34:d3:b6:75:
         96:2e:c7:e8:f3:70:55:56:0a:02:0f:af:61:bc:c0:4a:5f:c2:
         f4:b4:1f:17:a2:96:f6:49:0f:3f:4c:b3:5e:11:02:65:12:5e:
         8b:8d:8a:09:1e:e4:f0:6a:3c:02:3c:ae:0f:79:09:18:96:02:
         72:17:a7:e7:e2:eb:0b:56:3b:3e:18:b0:72:94:a6:04:22:13:
         8d:48:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:32 2025 by rpki-client