Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f6564678-c05c-36ed-b4b2-9a688851cf25.roa
File:                     f6564678-c05c-36ed-b4b2-9a688851cf25.roa (raw, json)
Hash identifier:          Jq03hr0NwAQ8YJDKO6/UFt+i06Fu1m4m4os9/6r7w2U=
Subject key identifier:   EB:C6:A4:7F:40:45:A4:17:89:43:8C:B2:B0:85:52:1E:CE:BD:AB:5D
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848D6410E792574019586CAC340
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f6564678-c05c-36ed-b4b2-9a688851cf25.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     55246
IP address blocks:        162.255.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0e:79:25:74:01:95:86:ca:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=35aa3144-0f5e-45ab-ac97-754365625c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:69:83:13:26:29:d5:d0:17:23:79:f6:34:03:
                    ab:3f:28:93:b4:d5:cc:47:91:12:61:76:9a:8e:4e:
                    a5:63:b6:5c:a9:96:ac:aa:7f:37:33:ea:1e:13:39:
                    2a:e8:48:66:fa:1c:44:de:72:d8:f5:e7:90:aa:fa:
                    0c:1f:8c:b5:b5:33:c0:69:9f:41:5b:26:de:57:3e:
                    a6:e3:83:f1:eb:49:a6:8e:78:d8:84:d0:3a:85:d5:
                    6f:81:1f:3d:70:e7:6b:fc:bc:ea:32:c5:ed:97:fa:
                    1d:b8:20:f2:ef:ff:b9:02:3c:94:54:a7:96:df:f2:
                    ed:e6:15:32:4a:bd:40:2b:2c:5d:c1:b5:70:ea:b0:
                    76:01:7f:da:b9:e0:07:eb:68:b6:ca:cc:18:77:d6:
                    90:8d:4a:09:76:e5:d9:9c:1b:6e:71:57:85:4a:da:
                    6d:e1:53:8d:ad:49:51:72:92:e7:79:f8:34:a8:6e:
                    f8:b0:96:4b:3a:c3:9c:9c:0f:f2:32:70:08:09:16:
                    e9:7f:8b:49:c5:24:fe:b8:2d:1e:86:6f:7c:b8:d9:
                    e3:67:2a:2c:38:c3:2a:16:78:0d:58:c6:1d:68:b2:
                    35:3d:e6:25:76:0a:ba:a5:07:83:99:d9:13:75:3a:
                    78:58:2c:b3:c2:e6:94:50:0a:72:25:63:4e:d9:cf:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C6:A4:7F:40:45:A4:17:89:43:8C:B2:B0:85:52:1E:CE:BD:AB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f6564678-c05c-36ed-b4b2-9a688851cf25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9f:53:a5:41:90:bb:68:3c:39:59:52:8b:46:eb:b8:81:07:
         7b:8a:7b:da:b0:0d:af:d9:3c:32:ff:9d:36:a2:c7:e7:5d:ae:
         4e:f4:78:50:b4:59:3f:a1:70:2d:56:ea:9d:08:80:f5:3b:f1:
         13:43:a7:32:67:9f:fa:16:6b:b9:9d:e2:9e:ad:d7:61:77:b1:
         ed:a4:2e:35:77:c7:e8:0d:71:95:df:ea:b3:95:5a:0b:42:a9:
         ac:f5:05:16:ae:56:e0:46:66:e2:0f:2e:84:c7:14:15:5a:db:
         d0:4c:dc:6e:39:d4:9b:62:d8:a8:e5:53:c3:77:82:d9:00:4a:
         8d:6b:48:92:39:30:5a:16:6d:a2:6e:cd:3a:44:2a:35:32:e4:
         f8:cd:f6:27:0c:22:69:a6:f7:47:5e:48:aa:b5:bf:56:66:73:
         51:45:a9:31:10:c1:d3:5e:84:b5:f9:9b:61:11:b2:b4:e1:0e:
         21:9d:45:4f:a4:95:49:6a:3b:16:b7:ba:87:77:f0:95:89:88:
         4f:e0:23:08:3f:8b:6e:0a:7d:1e:41:69:80:51:7a:0b:d9:92:
         b8:e9:12:b3:25:8d:c2:bb:6d:76:6d:e2:c1:a9:3f:b1:59:2e:
         0e:6c:b8:20:01:1c:70:8f:b3:e1:1d:53:94:1a:a8:cc:9f:de:
         c2:07:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:13:23 2025 by rpki-client