Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7de221c7-5944-3adc-a030-be9f096a9c13.roa
File:                     7de221c7-5944-3adc-a030-be9f096a9c13.roa (raw, json)
Hash identifier:          LiAD3u3qUL7dcUgarqKkGJ0pvzDmUWitSsikPKyGiew=
Subject key identifier:   11:BC:47:7C:0D:19:92:94:E4:5E:BA:BB:98:F0:72:CB:10:74:49:FA
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848AF7290308294F991890CCD00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7de221c7-5944-3adc-a030-be9f096a9c13.roa
Signing time:             Mon 27 Jan 2025 16:24:11 +0000
ROA not before:           Mon 27 Jan 2025 16:24:11 +0000
ROA not after:            Sun 27 Apr 2025 15:24:11 +0000
asID:                     15164
IP address blocks:        140.82.166.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:72:90:30:82:94:f9:91:89:0c:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 27 16:24:11 2025 GMT
            Not After : Apr 27 15:24:11 2025 GMT
        Subject: CN=b302b555-362c-49c9-a74c-1ecd5862a5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:a1:20:c0:6e:de:43:58:cb:6a:6e:68:a6:
                    cf:d7:e5:33:c4:0d:49:24:c7:bf:75:12:28:b5:7e:
                    73:98:c1:5f:3a:28:96:5d:44:e9:46:b3:a7:40:71:
                    9a:de:bc:fc:e4:a6:23:f7:d3:cb:45:52:07:a6:2a:
                    cd:01:76:f2:f5:d7:10:88:ae:34:bd:98:86:e3:41:
                    84:b6:91:93:6c:7c:8e:87:9c:cb:27:00:94:89:7e:
                    e7:1a:99:f0:8d:e2:6c:d7:c6:8b:0c:5a:c4:76:a5:
                    db:a9:9f:23:3d:c3:1d:cf:35:57:81:e6:6f:57:84:
                    6e:c0:21:53:34:bc:90:f8:b3:c5:27:4f:55:53:4e:
                    aa:b9:ef:57:21:4e:2d:80:d1:59:05:b5:59:02:c1:
                    f4:2b:ef:89:87:50:f9:2c:e0:b9:a2:71:3e:33:3b:
                    e4:49:b7:57:7b:8d:04:e4:f8:f8:dd:cd:6a:26:5c:
                    49:c9:d6:de:43:7f:34:54:1c:4f:77:e0:fd:e5:df:
                    fe:d1:97:67:67:20:fd:e5:6e:a2:07:04:42:1f:2b:
                    6e:10:04:78:27:db:6e:25:5b:54:31:de:0d:de:ba:
                    d1:1c:a2:54:97:b5:8a:e3:9d:b7:1f:41:29:70:09:
                    44:70:7f:f5:24:e0:ca:ce:f0:aa:70:8c:31:d5:20:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BC:47:7C:0D:19:92:94:E4:5E:BA:BB:98:F0:72:CB:10:74:49:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7de221c7-5944-3adc-a030-be9f096a9c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a2:a7:c4:6e:26:8b:5e:58:2f:61:2d:40:76:2d:f4:77:a0:
         9f:a5:55:5a:3c:0e:58:4f:61:43:3c:19:17:43:8d:a8:a4:bf:
         b9:fa:bc:fe:28:15:79:24:59:56:39:37:b7:2b:f7:27:2d:d9:
         db:44:f7:12:69:cd:10:c8:15:da:06:50:1e:c0:5f:7d:4d:b8:
         8a:02:e3:8a:dd:cb:ec:a1:a3:b6:63:71:52:78:d2:5c:93:41:
         2e:db:9a:6f:25:a9:56:a6:68:02:c3:0e:9b:34:a7:c7:ad:60:
         27:ee:87:fb:46:82:e2:95:07:4c:6d:73:d4:3b:3f:1e:f7:18:
         38:fd:67:15:21:d5:05:a8:1d:3e:1e:75:78:9d:10:8e:b2:c4:
         73:23:31:86:fb:19:66:e0:9a:80:00:36:2c:0a:1a:07:ba:01:
         60:c5:f5:ba:34:5a:73:b4:f3:21:99:33:ec:e9:bb:66:2e:31:
         04:68:a3:56:68:9e:d9:c1:6c:44:84:ad:65:ae:7c:c0:5c:1d:
         56:cc:fb:fe:5d:65:f8:b9:f3:79:1f:3d:08:89:63:ed:e1:25:
         48:4f:df:15:2b:aa:35:23:6c:9f:bd:4e:4a:41:8c:bd:1a:2c:
         1f:24:a0:92:25:6b:8c:d3:db:25:93:47:15:e2:b9:c9:d9:13:
         26:f2:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:42 2025 by rpki-client