Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/655bf99e-9879-33d3-ab34-9c30551ed533.roa
File:                     655bf99e-9879-33d3-ab34-9c30551ed533.roa (raw, json)
Hash identifier:          noKAIFAzH/H6n2/ruiljieU96g+c9LR1sElnVvW1SJs=
Subject key identifier:   73:EA:0B:C8:2F:48:78:94:F0:2D:DF:7D:11:B8:DF:82:71:92:E5:24
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584894A5E9601BC7D4320FF0C680
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/655bf99e-9879-33d3-ab34-9c30551ed533.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     131477
IP address blocks:        198.176.48.0/22 maxlen: 24
                          198.176.52.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:e9:60:1b:c7:d4:32:0f:f0:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=4804f8c6-95bb-47c8-8867-70735b0d7ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:6f:27:4c:8c:cb:51:ac:b5:6c:ce:cb:62:
                    6e:df:04:c2:2b:3f:b3:7c:b5:ae:ee:66:ff:df:ed:
                    86:64:53:67:ca:1b:6d:94:7c:ae:23:0f:fa:7c:3d:
                    f2:65:82:4f:3f:d4:76:4f:1f:ac:03:53:99:3f:71:
                    cb:74:0a:5b:e6:a2:b1:d3:e5:76:f4:13:5c:79:42:
                    ce:65:0e:9f:45:a3:57:22:48:20:1c:b6:7d:99:13:
                    da:db:d2:42:36:73:a0:0f:de:43:06:db:e2:40:12:
                    b8:95:7f:db:5f:86:09:cb:73:2a:e4:02:e4:a4:cb:
                    1d:df:30:ea:22:f3:8b:b7:1c:63:e3:55:0e:91:49:
                    3e:7c:9e:5d:00:5c:b7:86:d2:58:e7:38:1c:9d:7b:
                    77:43:00:9d:dc:1b:79:39:59:e6:b1:ca:f3:62:c9:
                    6a:0d:c5:eb:63:1f:1e:18:6d:c4:19:83:cc:82:37:
                    86:05:57:a5:8d:d9:e6:34:0c:4f:c5:2f:62:d0:f2:
                    01:79:05:b1:29:c5:0d:d2:b2:c0:d7:d6:cc:04:a5:
                    2a:43:2e:58:ee:96:fe:88:b2:bc:66:a6:d9:33:70:
                    ad:80:72:23:f3:a5:eb:c1:06:9e:ac:1c:e4:c0:f1:
                    9a:e3:16:b0:78:0e:a5:04:66:88:68:c9:35:4e:71:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:0B:C8:2F:48:78:94:F0:2D:DF:7D:11:B8:DF:82:71:92:E5:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/655bf99e-9879-33d3-ab34-9c30551ed533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.48.0-198.176.53.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:20:1f:b6:bc:91:1b:33:d2:4e:d5:8c:02:53:70:3f:63:f6:
         e4:d1:c8:f7:68:fc:68:11:f1:7a:c0:36:53:7e:8e:b7:ed:69:
         06:73:6f:e0:9e:b2:52:c1:d4:73:0d:c8:52:52:e3:75:4c:c7:
         e3:2c:50:42:fc:0b:69:f0:38:b8:3d:e1:e8:e8:46:69:9e:c1:
         4e:81:4a:e6:2f:75:d2:40:1e:ea:da:09:cc:2b:88:6b:66:77:
         c4:42:27:4a:61:a0:a7:da:d9:f0:d5:40:94:ef:b6:e4:ec:9c:
         16:4c:91:98:bc:f7:f7:5a:dc:33:06:26:68:e3:25:93:8f:a9:
         f2:62:f8:4c:8d:95:e2:1f:9b:2c:5c:df:c4:2d:82:5b:3d:aa:
         e8:96:1a:d6:48:2f:26:a1:0b:6c:e8:37:09:1c:74:ef:d2:54:
         ac:59:90:fa:8b:1e:9d:06:9c:ca:a3:55:8c:d9:f8:70:d4:6a:
         1e:6f:56:bd:df:8f:d3:b0:47:4b:42:69:ac:70:72:74:f1:0d:
         40:3b:c9:75:51:46:e9:b9:bc:fe:84:0f:25:3f:ea:90:c0:4b:
         9b:ba:11:1d:51:f6:bb:c5:a9:3d:a9:20:f1:8c:ec:ce:34:ed:
         a9:82:57:48:ee:df:09:00:70:4d:44:dc:5b:e8:31:f0:e0:da:
         b2:19:ad:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:42:36 2025 by rpki-client