Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa
File:                     b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa (raw, json)
Hash identifier:          zzh6AxS5yaMr28rjshPLjDO0XNQ4a8Gm4jJWjcGRUtA=
Subject key identifier:   D5:C1:93:C6:6C:3D:80:42:C2:5B:E5:E5:21:BA:03:08:68:61:47:D8
Certificate issuer:       /CN=843d051d-a734-4f3d-9544-a5ed8b60c976
Certificate serial:       010D0C9F432858492CAE9668DA04AD04C35EC180
Authority key identifier: FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     48927
IP address blocks:        140.235.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:96:68:da:04:ad:04:c3:5e:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843d051d-a734-4f3d-9544-a5ed8b60c976
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=189a7062-4342-474c-9406-d09fa2c2c577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:15:a4:5f:63:32:d7:dc:27:0f:f7:67:f9:
                    a2:4a:3c:09:27:97:50:e6:fe:f7:40:fc:23:87:d0:
                    60:75:ca:e3:b5:4c:2b:c4:20:11:70:28:3e:a6:a1:
                    da:a5:98:31:17:2c:f7:e9:af:f5:28:e8:71:68:4c:
                    c1:f6:61:72:3c:82:25:9e:2b:43:e8:26:db:c7:4a:
                    4b:67:f5:3d:ee:11:b9:69:09:2d:50:0b:10:11:a7:
                    e6:3c:e9:27:c1:bc:28:c6:4d:2f:b8:78:9a:4d:c1:
                    7f:77:00:d6:25:38:22:db:69:d8:f1:36:bb:b9:04:
                    98:dd:81:10:f8:f3:a9:ae:96:05:1b:e9:b4:97:2d:
                    52:47:10:8e:fc:28:68:91:f2:7b:b1:c7:9f:2b:ce:
                    a3:4e:7f:06:8f:91:f5:4d:e9:40:d9:f7:6b:34:fd:
                    cc:f9:e7:2e:cc:95:17:84:9b:66:30:ca:ea:d5:c5:
                    25:09:b2:c0:04:af:c7:56:4d:a1:3d:b4:6d:5f:25:
                    b6:b4:b6:29:0c:b2:f5:63:58:ad:5b:d6:63:9f:90:
                    5c:de:a4:fa:cb:a7:42:49:a6:08:33:67:25:98:2b:
                    9a:3f:93:89:db:71:9f:59:f6:bd:1e:0b:6b:3f:95:
                    e4:06:72:c5:17:44:07:78:11:db:0f:eb:e2:35:27:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C1:93:C6:6C:3D:80:42:C2:5B:E5:E5:21:BA:03:08:68:61:47:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl

            X509v3 Authority Key Identifier:
                keyid:FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:31:b1:df:d4:e0:46:6c:c2:c1:cf:18:60:04:11:ba:ed:c9:
         fc:8a:bc:ed:9b:1e:46:64:34:df:87:68:c5:9e:cd:88:12:13:
         70:28:97:31:2a:73:e7:94:9f:6b:5b:b7:6d:5e:c3:73:c0:ec:
         cd:20:7b:52:93:7a:9a:d8:ab:8a:45:42:3b:93:14:9c:90:8f:
         64:2f:4f:80:68:61:03:b2:36:bf:35:93:10:f6:3c:4a:76:8a:
         35:08:c2:d6:6f:da:16:be:c6:e1:66:99:60:c0:53:9a:b6:ce:
         0b:8d:50:ab:39:de:18:e4:38:a8:f9:cf:2c:38:35:0c:4d:f6:
         5a:6f:80:37:27:d5:16:21:4d:04:ed:c4:88:e6:3f:e9:11:5d:
         d0:71:e2:53:61:d8:20:1a:df:84:b7:0d:07:a6:72:3a:f7:cc:
         9d:3c:d5:de:bd:24:3a:01:0d:1c:f7:2f:d0:a6:b7:3b:60:ca:
         53:e7:eb:4f:b1:f8:28:04:62:1d:7d:8b:42:40:43:80:e7:63:
         25:e8:c4:42:b3:fd:27:ec:6c:2a:19:59:9b:15:da:cc:ce:89:
         b8:20:45:40:1f:53:1d:ef:80:4a:55:d5:9f:93:89:96:ac:80:
         e8:0a:18:de:42:dd:9f:df:8d:0c:d6:f5:98:a9:63:a1:1b:3a:
         c6:ca:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:25 2025 by rpki-client