Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa
File:                     558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa (raw, json)
Hash identifier:          PyLu4PW5hTWR0X/lt5Bef0RzN95BH4gqfye8OWZuxvM=
Subject key identifier:   BF:42:25:16:30:96:10:A2:C8:7B:E0:34:EE:2C:6F:69:B1:CA:D1:16
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D210F854D9ECF61B9C26BCD0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        208.101.142.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:10:f8:54:d9:ec:f6:1b:9c:26:bc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=18d1c0be-ff65-416a-af43-74380a1878e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:b4:e8:48:ec:25:66:1e:42:b2:09:60:c6:
                    9d:c2:70:77:74:80:e0:e7:33:4b:49:a2:d9:a8:42:
                    d1:06:f6:55:cb:f0:00:ef:98:06:03:e0:92:8a:c5:
                    c6:70:b4:b9:a0:9f:47:d1:93:3f:c5:0d:26:5d:2f:
                    57:bf:6e:9e:24:90:25:03:b2:e6:e7:a8:eb:b3:0d:
                    81:83:38:f1:39:a0:a5:d9:ed:a3:88:17:61:1f:b1:
                    51:07:38:c3:ad:c4:a1:8e:3a:76:71:9c:7f:95:85:
                    c9:5e:18:75:93:25:8b:e1:92:54:ab:77:7f:78:8c:
                    20:a4:c6:32:0f:09:c4:b8:48:76:be:e1:93:a1:5c:
                    77:c1:5d:83:4b:a5:dc:3e:b9:12:42:30:b2:bf:36:
                    07:5d:47:18:b3:af:70:97:11:bd:f6:0f:ab:91:56:
                    98:df:c0:33:d3:a6:66:12:99:c8:5c:ab:ef:11:f6:
                    db:7f:30:5a:98:ae:92:85:12:68:c1:6d:ea:b1:1b:
                    c6:61:0e:7a:a3:70:3e:26:8c:11:18:c8:a3:fa:a7:
                    7e:24:d8:ba:4e:02:24:d4:5c:67:20:06:26:0a:b7:
                    8f:43:ff:4f:de:cd:29:e7:33:85:5d:30:b6:ef:2e:
                    d8:2d:d9:fb:e0:27:62:b2:cd:a5:70:ad:52:43:f8:
                    ee:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:42:25:16:30:96:10:A2:C8:7B:E0:34:EE:2C:6F:69:B1:CA:D1:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.101.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:05:66:2c:84:0b:6a:43:6c:b6:8b:70:da:5f:1b:2e:db:16:
         80:10:91:f6:a7:d3:80:77:a9:4f:94:9f:82:52:91:3e:54:ef:
         2a:68:97:c4:a8:e9:4d:71:0e:6a:99:8a:40:00:13:47:0f:c0:
         93:88:ee:52:a6:f9:65:c0:23:fb:f9:dc:4b:97:d9:17:88:8a:
         51:3f:46:fd:08:51:cc:c3:d7:eb:78:44:ac:91:60:44:35:e0:
         bb:f7:dc:de:ae:e0:fd:b0:cb:c7:af:88:91:9e:24:07:62:ea:
         76:75:99:ce:64:e5:7a:42:69:61:d4:36:ff:5e:be:8b:cf:c6:
         95:f3:ff:7f:54:92:25:e3:7c:a0:c2:3e:03:b1:87:d6:9f:7a:
         d5:17:f0:2b:bb:27:53:a0:2a:1a:0b:14:7e:f7:0b:f6:a8:cc:
         4b:ea:57:a3:38:46:d3:d8:4a:e8:a7:7c:0b:1b:a7:03:db:7d:
         11:61:bb:48:f1:f9:57:c3:16:9b:4c:f0:1c:ae:3e:da:8f:5f:
         cb:43:d2:b6:72:16:e2:59:9f:e3:bb:20:38:3c:3a:93:3a:13:
         f8:3a:a7:f0:09:56:35:bf:32:92:9f:c8:2e:45:94:3f:ac:9e:
         ae:06:81:41:59:27:8d:77:f4:07:4d:b1:0b:92:48:ca:93:6b:
         c0:21:fa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:24 2025 by rpki-client