Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16348858-8f46-38c3-afb4-c6afe7fd9adb.roa
File:                     16348858-8f46-38c3-afb4-c6afe7fd9adb.roa (raw, json)
Hash identifier:          1FQvJ13J6/6aegMyzh/hJXJtgJSE94bAD5vvLcZOfx0=
Subject key identifier:   16:40:45:5E:45:A2:93:B1:5A:1A:8C:22:2E:28:8F:C0:39:EB:BE:AE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858493ED3D6D376E77F0473F5FD00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16348858-8f46-38c3-afb4-c6afe7fd9adb.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     212238
IP address blocks:        172.111.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d6:d3:76:e7:7f:04:73:f5:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=223487c2-35b5-4a87-89a3-e036031ee1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:72:6e:d6:75:2b:3b:11:e8:02:30:55:94:23:
                    c6:cc:d1:83:3b:c4:cb:81:c8:76:4b:ff:27:38:3d:
                    0e:b6:d1:e6:d7:95:da:4f:22:1a:e9:2e:a1:94:94:
                    ca:c9:46:77:ef:e3:a8:b3:aa:21:9e:e2:ff:67:d4:
                    3b:91:a1:34:1d:2a:75:17:c4:a9:a7:8b:96:4d:b6:
                    0e:1d:21:04:8a:96:5f:b8:3a:a5:23:75:2a:08:64:
                    91:59:b0:d0:44:42:6d:80:d7:41:50:dc:94:5f:99:
                    6a:47:c8:3a:78:af:dc:f5:b9:d9:26:4d:21:1b:37:
                    26:d9:7e:80:91:7a:5a:0c:e0:83:6f:86:44:7e:b8:
                    c4:34:2e:0e:71:b3:0f:2a:28:d7:a1:7b:0f:8b:f3:
                    59:4b:af:93:cb:8a:f5:d0:b2:f0:db:36:75:5d:e3:
                    72:89:7a:1a:ba:33:59:f1:df:c4:df:02:57:fa:b0:
                    a8:61:e1:7e:fe:5b:46:0f:57:8b:dd:00:5d:7e:e4:
                    21:ca:e5:31:63:1d:d3:12:36:bf:d0:f0:18:b6:90:
                    eb:fa:bb:48:63:4c:ae:ae:0b:5a:33:69:ff:be:5b:
                    25:ba:8f:a7:89:ac:ac:b2:c7:ad:00:b8:87:f6:6a:
                    d9:2e:df:1a:a7:7c:12:54:fb:b7:04:5c:d7:2d:4b:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:40:45:5E:45:A2:93:B1:5A:1A:8C:22:2E:28:8F:C0:39:EB:BE:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16348858-8f46-38c3-afb4-c6afe7fd9adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:4c:6b:c7:72:8a:a3:87:ab:dd:e4:95:05:63:d4:d3:0a:
         f3:be:26:01:79:cb:d9:c3:da:62:bc:26:4b:b8:95:fe:95:cf:
         74:e1:07:d6:1e:a4:03:50:fb:da:d2:00:9c:ab:14:77:48:fc:
         36:de:51:35:35:6d:a2:96:13:48:f1:9c:62:62:ae:f2:3c:6c:
         83:ec:c7:5f:ca:1d:4c:5c:ac:b9:c1:df:40:19:cf:cb:08:3b:
         32:0f:fd:6b:09:0b:07:65:2b:52:2f:c1:58:8a:b4:84:4a:bd:
         5b:8e:6d:c5:80:61:fd:92:ff:4d:a8:23:61:02:b1:d9:3f:e1:
         8a:71:d8:68:b3:05:37:c6:79:b3:c2:33:f9:f5:38:7b:1b:b8:
         62:90:86:54:1c:fd:c5:e3:20:a9:b3:0f:42:e5:b4:38:5b:67:
         5d:4b:04:16:ca:44:2a:7c:8e:30:a3:f3:55:88:7a:26:83:86:
         be:d4:84:e3:6e:b1:c9:06:1d:11:7c:0e:db:c6:67:a8:8c:ca:
         b8:82:d5:35:4a:ab:28:15:56:4e:6b:5a:87:82:05:27:95:46:
         f3:77:5e:cf:5b:0b:8a:06:56:83:ff:11:03:d4:0f:32:ab:5d:
         6a:55:9b:a6:ee:a5:11:27:9b:37:0b:44:d5:b8:95:b9:b4:8b:
         4f:ba:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:02 2025 by rpki-client