Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/ea1ae5fd-aa1a-3975-898c-d1a880581728.roa
File:                     ea1ae5fd-aa1a-3975-898c-d1a880581728.roa (raw, json)
Hash identifier:          Eyrfgl/ug0zp2jnsmFOrEf6Kovru27RfvGQP+kdKbGU=
Subject key identifier:   34:F3:B6:A6:9F:11:17:0F:FB:13:82:06:80:8C:06:BF:85:48:EF:CF
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858494303EB78794DE0B573FE2980
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/ea1ae5fd-aa1a-3975-898c-d1a880581728.roa
Signing time:             Fri 21 Mar 2025 13:00:50 +0000
ROA not before:           Fri 21 Mar 2025 13:00:50 +0000
ROA not after:            Thu 19 Jun 2025 13:00:50 +0000
asID:                     10835
IP address blocks:        66.201.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:03:eb:78:79:4d:e0:b5:73:fe:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 21 13:00:50 2025 GMT
            Not After : Jun 19 13:00:50 2025 GMT
        Subject: CN=b53e0d95-75f1-463f-a840-275cd6279b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:70:18:a2:cf:f5:53:6d:0d:81:80:e9:ef:
                    47:a2:ab:a3:c3:cf:29:32:1d:eb:1a:8c:e6:b3:10:
                    7b:06:a3:e0:f1:f3:05:99:d2:d2:e8:fd:a3:75:2b:
                    d3:4c:53:d7:ee:ec:60:ac:eb:ba:c8:c6:4e:5f:3d:
                    35:9b:8a:c3:ce:10:ec:3b:bb:d4:3a:f4:f7:a7:2f:
                    37:44:95:3a:1e:44:8b:aa:20:27:0e:3a:30:08:9a:
                    08:19:a1:d2:65:39:73:bf:46:48:fc:f2:3d:a7:72:
                    58:9a:6c:a0:d5:a6:ab:2e:e9:79:aa:ad:1a:37:7d:
                    82:d5:05:22:e4:e8:71:c2:55:85:b5:69:80:ea:d5:
                    da:25:a6:d3:f3:34:55:d1:2e:6a:83:8d:15:26:82:
                    23:33:f8:62:eb:2b:20:36:6b:83:8b:20:af:cc:ae:
                    23:92:31:22:02:a0:d3:84:1c:19:af:3f:6c:43:13:
                    e7:6f:b9:fc:2d:61:9c:a6:68:50:26:7f:f3:74:b1:
                    57:5c:16:90:82:c8:64:04:05:8e:cf:44:47:6b:21:
                    7e:31:de:e0:5d:23:18:32:1c:2f:d8:18:83:ab:0b:
                    37:50:47:0a:cd:f3:04:74:03:f3:75:a8:63:0b:42:
                    ab:6e:64:3b:d5:5b:89:33:66:f8:23:ed:2b:6e:60:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F3:B6:A6:9F:11:17:0F:FB:13:82:06:80:8C:06:BF:85:48:EF:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/ea1ae5fd-aa1a-3975-898c-d1a880581728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.201.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c8:4f:a9:c2:fa:ce:2a:01:36:14:31:59:3e:05:3a:4c:c0:
         75:e4:e2:19:8d:69:bc:fa:8b:d1:5a:e0:c9:32:8f:96:0a:3a:
         22:83:94:d7:db:ec:0d:f4:75:34:a8:c4:ed:3b:c5:b3:e3:f5:
         46:a1:4b:61:7d:85:71:3d:f8:ed:44:5a:fd:f2:a2:16:10:a1:
         ef:d7:1c:63:4b:4a:bd:a1:d3:86:5b:19:e5:b4:a0:66:94:34:
         9a:ad:6f:f8:7c:03:d8:8a:2f:c8:52:88:37:e5:88:20:6d:14:
         b1:94:f2:0d:c5:7c:e6:1b:3f:03:e7:33:e9:63:7d:24:2d:c9:
         77:0f:6d:85:ff:49:51:59:8e:1a:40:3b:e5:70:dd:ef:83:8d:
         aa:25:23:66:13:12:b9:6d:ac:75:19:0f:1f:67:b4:5e:c2:7d:
         43:3f:53:2a:81:23:4c:32:7d:93:73:18:ae:9e:1f:da:e8:19:
         6e:26:5d:0a:37:da:cb:03:42:c3:1d:2d:02:e0:29:5c:3f:80:
         bf:85:cf:e2:fc:a5:1a:af:ec:91:8f:b1:30:01:de:41:d1:74:
         7a:9d:61:27:fb:e7:dd:92:c8:b0:ae:d9:23:03:06:65:49:ce:
         16:3a:20:3d:fc:34:0f:96:d5:2c:94:27:1a:62:37:4e:26:30:
         e3:d8:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:06 2025 by rpki-client