Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed410d5c-9050-3f0b-b282-a158fb24f69a.roa
File:                     ed410d5c-9050-3f0b-b282-a158fb24f69a.roa (raw, json)
Hash identifier:          zshMSqq2QP8bWUbHyVbsOH7GgUF81RpQD9PPU16d4Xs=
Subject key identifier:   B1:6E:D7:3F:47:A2:A0:95:CE:AD:B0:B8:7E:B0:D4:79:8A:08:0E:29
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E00682B4CF3498CB2A060700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed410d5c-9050-3f0b-b282-a158fb24f69a.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     396583
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:82:b4:cf:34:98:cb:2a:06:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f80f915d-d894-4a1b-9d6c-9f1933b52950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4d:18:8d:8e:b7:fd:21:d0:ec:52:b8:3d:64:
                    99:f8:1d:ad:be:92:ba:72:bf:7f:e2:0a:13:65:2a:
                    d6:ed:78:ed:98:79:90:8b:fa:d9:b8:2f:12:ce:8c:
                    d6:a9:4e:ec:b1:18:54:13:56:09:b6:d8:d7:1c:9f:
                    79:07:16:b3:70:94:9d:02:f2:2c:50:9a:8e:0b:09:
                    ba:31:58:1d:7e:1a:43:52:cf:0f:5c:c2:2f:fd:51:
                    f1:e9:dc:52:34:2a:da:7e:bf:78:69:42:4f:98:b4:
                    ec:fc:f9:96:6b:ba:8e:5e:cb:3b:49:af:c6:3d:fa:
                    1c:3f:1c:4d:a1:83:c9:76:52:51:6b:52:c9:68:c9:
                    53:14:2e:ff:7f:c0:c5:c0:54:35:f1:11:a7:b3:f4:
                    c9:40:9d:26:5c:e0:fb:ad:68:c7:81:d4:c5:15:15:
                    c0:54:e2:55:28:24:4a:e4:47:b9:50:0d:ba:10:9d:
                    c2:17:33:b4:15:fa:e4:e1:76:9b:64:38:02:46:5c:
                    cc:07:b8:64:55:b4:b9:15:ae:65:5c:2c:63:d1:d9:
                    f1:04:16:dc:21:95:91:ad:42:42:c8:4e:63:7e:42:
                    dc:4a:7a:47:87:44:2b:70:09:c3:b4:f9:f2:41:50:
                    15:44:32:0a:c2:b4:e9:ee:26:55:2e:ea:66:0f:95:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6E:D7:3F:47:A2:A0:95:CE:AD:B0:B8:7E:B0:D4:79:8A:08:0E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed410d5c-9050-3f0b-b282-a158fb24f69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:27:61:28:91:08:8a:de:99:43:3a:38:e0:99:e8:d1:45:
         c7:fc:b9:d8:3c:0c:e0:86:a4:cf:69:83:97:52:68:f1:e4:c6:
         dc:b1:67:bd:db:91:20:9c:eb:81:cd:8e:2c:79:49:1f:0a:42:
         3a:cb:1e:4a:91:52:60:e8:ac:bc:1d:a2:f6:9e:90:70:6c:9b:
         81:95:1e:04:e6:d1:8e:c9:f0:c2:5a:a6:db:89:2f:ca:e5:37:
         b9:95:bc:bb:6a:86:dc:b0:94:9b:b6:b1:93:2d:fa:34:04:3d:
         22:52:22:aa:1a:be:4d:11:08:e0:fa:2a:dc:9e:14:a4:d3:95:
         93:72:1f:dc:55:96:32:8e:5d:12:a8:8c:2d:11:e5:22:b5:35:
         f3:62:d8:40:cd:6a:95:7b:25:b4:08:0c:7f:c0:a2:9a:7a:00:
         55:a9:6f:de:28:a1:68:1b:c4:40:7f:e7:f8:5e:fc:fe:3d:1e:
         d0:06:e9:c4:00:2f:24:0a:fe:c3:91:59:b8:61:a2:bc:8f:e1:
         ce:40:33:4b:90:47:66:96:bf:07:76:98:dc:db:ae:a4:6f:ba:
         a9:62:47:8a:b4:57:69:5d:22:eb:9a:48:f7:6d:00:b8:3b:e8:
         5e:2e:f8:c7:3d:b4:b8:8a:73:49:10:54:b6:de:99:94:14:7d:
         5d:89:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:16 2025 by rpki-client