Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
File:                     1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json)
Hash identifier:          Xw5Utlpc5G+RZeUtDUny7fiD9qeIF5vxY27UK0mr1bU=
Subject key identifier:   E3:BD:9B:D9:AB:94:87:3D:9D:6E:3F:AE:58:8A:68:05:B9:8C:67:15
Certificate issuer:       /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
Certificate serial:       010D0C9F43285848D7A6578FE5A04498062BFDC0
Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     36667
IP address blocks:        198.35.120.0/21 maxlen: 24
                          2620:c:8000::/48 maxlen: 48
                          2620:109:6000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:57:8f:e5:a0:44:98:06:2b:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=edb09450-7906-40d0-a372-74cad24c84f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:00:67:1d:f5:f8:57:f9:ec:bc:be:2d:41:
                    1c:e4:3c:93:5f:84:b9:21:93:ef:6e:b8:cd:78:eb:
                    90:54:ad:1a:a5:bc:b6:0f:1e:9c:ee:bc:be:61:07:
                    7f:ae:ef:b2:45:1b:fa:b9:03:ee:a6:0a:f9:c6:c8:
                    93:72:d7:ac:97:ab:a3:47:a8:76:bc:54:8d:58:88:
                    82:45:74:be:23:ca:d6:68:56:fe:b7:b3:02:6d:3d:
                    37:50:cc:d6:31:70:39:70:7a:9b:b4:f4:59:98:7e:
                    3a:ca:37:b8:05:1f:7a:de:be:0f:c6:33:55:68:bf:
                    5a:e9:e1:bb:47:72:61:9f:f2:99:ff:ce:a0:17:80:
                    65:4f:f9:bf:35:f3:76:7d:13:d1:e7:41:1f:35:78:
                    26:2f:23:8d:6e:99:72:29:c9:e6:84:de:61:19:fd:
                    70:6d:ed:fd:e2:59:c0:0d:2e:8b:16:b3:19:52:5e:
                    5e:b1:29:3e:29:f1:77:0a:cd:ae:e6:84:7a:54:76:
                    97:8c:b6:95:cb:71:f7:dc:1d:49:8e:2d:01:1e:fc:
                    72:0d:9b:e4:5c:06:7c:6f:c7:1a:10:79:f8:fb:ad:
                    2d:e5:49:4d:1e:79:2e:a4:57:3c:94:43:59:d5:3b:
                    e4:f9:a9:ed:d9:a0:01:a0:37:43:17:90:05:c9:c4:
                    b2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:9B:D9:AB:94:87:3D:9D:6E:3F:AE:58:8A:68:05:B9:8C:67:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl

            X509v3 Authority Key Identifier:
                keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.120.0/21
                IPv6:
                  2620:c:8000::/48
                  2620:109:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:5b:b7:5a:f5:aa:a6:b5:3a:57:7c:d7:06:71:fd:fd:aa:eb:
         44:e0:96:9f:51:67:d6:1b:c9:c4:16:e5:dd:61:0a:57:52:29:
         99:e8:9f:c8:ed:02:5e:70:9b:82:68:ec:89:17:2c:2b:37:89:
         93:91:c5:58:40:a6:a4:9f:8f:de:6d:eb:a3:d8:b0:13:b4:fc:
         ab:cc:1e:9f:97:89:27:12:68:d1:2c:37:dd:48:8f:09:42:b8:
         7d:02:0d:73:56:a2:5b:11:a3:5a:0b:81:1a:a3:2c:fc:a1:84:
         58:b9:cf:62:01:6e:4a:0a:68:95:f0:65:bc:33:47:9e:a3:b8:
         4a:32:f9:ba:63:7e:2c:9e:d8:72:3d:62:63:1a:2b:19:96:7b:
         e3:5f:ab:8b:e1:d3:d4:4b:f5:26:3b:52:4e:bc:5c:f8:33:0d:
         32:ce:c8:a7:79:c2:71:70:b4:d0:1a:f2:11:b5:1c:6f:a6:c4:
         43:6e:a0:38:35:c5:d2:a0:37:61:a1:69:e1:93:62:6d:e8:05:
         50:b5:de:c9:aa:15:53:a3:04:35:87:05:cc:c9:d2:08:8f:b0:
         71:94:c2:f6:ac:7d:fb:8c:18:b8:77:6d:86:98:9f:a7:cd:f7:
         19:2e:56:2c:da:e2:83:7b:03:60:80:3e:35:97:85:33:68:bf:
         0e:81:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:53 2025 by rpki-client