Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ab9d146f-4763-3573-9705-a049fbe4ccbd.roa
File:                     ab9d146f-4763-3573-9705-a049fbe4ccbd.roa (raw, json)
Hash identifier:          kt7a/FHU02akPNKmLQTrIqmGcMMxfl9Ze/jiKDSLe1I=
Subject key identifier:   63:9A:01:AE:6D:7A:23:85:F0:BA:77:99:1A:DA:30:FA:F6:40:DA:44
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849071BE83400B811BAC8B5D700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ab9d146f-4763-3573-9705-a049fbe4ccbd.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     4997
IP address blocks:        216.222.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:e8:34:00:b8:11:ba:c8:b5:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=9bab4f9f-51b6-47a8-b9ea-b43129a1bf28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:99:c7:c0:6f:30:bf:71:d4:46:c8:99:9c:
                    79:8b:ea:7f:27:8d:be:59:86:e6:55:c5:e5:21:6b:
                    66:6c:43:8a:c1:9b:7f:c7:af:03:0b:2a:42:00:fc:
                    ec:d9:ae:41:bb:1e:d1:05:3c:9a:40:06:aa:c9:dc:
                    18:b1:3f:62:bc:4f:81:61:55:9b:76:a2:23:75:96:
                    a8:c9:77:d5:38:dc:22:5a:9a:93:0e:a1:5b:e4:75:
                    10:d8:27:96:11:d9:17:5f:b8:a8:39:3c:1a:30:b8:
                    6c:89:b2:e2:49:eb:fb:e1:56:ab:04:25:6c:de:0c:
                    2c:d5:b2:65:14:29:19:fd:c4:d5:b0:5d:8b:d4:10:
                    c0:bb:57:79:96:57:13:df:bc:93:1c:73:2a:07:4a:
                    7a:c2:c5:aa:ff:18:6a:48:77:0a:34:02:ac:46:66:
                    a0:18:a0:92:58:03:e9:77:6a:b6:c2:ee:79:41:2f:
                    24:28:6b:75:df:0e:22:00:91:f8:b6:ad:3c:c8:03:
                    b9:ed:5f:67:9e:fa:12:81:9d:da:f2:c8:0f:19:73:
                    4b:0a:7a:b7:bb:56:e3:a7:c5:36:a7:e4:48:38:67:
                    14:92:e3:cf:85:8b:25:bb:08:9f:e5:a2:f3:15:5b:
                    c2:8c:51:e6:e5:fe:40:f0:24:00:d9:1c:5a:09:70:
                    5c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9A:01:AE:6D:7A:23:85:F0:BA:77:99:1A:DA:30:FA:F6:40:DA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ab9d146f-4763-3573-9705-a049fbe4ccbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:2e:52:9a:42:8d:d9:25:49:f3:d3:a1:3d:bb:94:ba:a6:25:
         a9:83:ac:68:49:41:05:93:67:ce:e7:dc:c7:ca:24:d4:81:ae:
         15:14:aa:d3:70:39:94:5f:ea:3b:56:2e:fc:6b:8d:75:30:14:
         21:48:11:b0:f4:81:76:57:33:ac:16:17:6a:f3:af:de:6c:d4:
         a5:4c:07:95:72:c2:14:49:3d:35:6a:d1:06:f4:b6:17:c6:4c:
         0e:e2:34:3c:d1:1a:71:70:d3:c2:1e:ab:41:b4:95:8b:05:26:
         e1:3a:1b:36:05:6e:ac:7f:cb:3b:3a:02:4a:ab:6f:78:4d:31:
         3b:32:a1:93:c8:33:90:39:66:ab:53:28:93:70:42:25:db:35:
         06:91:ac:aa:3b:84:19:0b:ae:73:bb:6c:b5:96:27:3e:ae:0b:
         61:fe:7a:a5:3d:a1:89:f2:b4:28:04:72:15:20:6e:14:2b:4f:
         5b:76:cb:64:08:ce:1c:50:56:ba:d0:ef:59:3c:5c:fe:1a:eb:
         ca:4b:46:36:96:dd:fe:ad:81:1c:48:16:55:41:9e:6d:d7:4e:
         5b:b6:2d:b1:60:01:00:5d:e7:1b:f5:0c:0c:5e:b1:20:0a:cb:
         87:1c:38:1a:9e:70:54:07:61:0d:4f:f1:20:08:a5:4b:bb:e2:
         c3:e4:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:25 2025 by rpki-client