Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/51022801-32c2-341d-ac1c-1c40087ca9b6.roa
File:                     51022801-32c2-341d-ac1c-1c40087ca9b6.roa (raw, json)
Hash identifier:          RCnpwwsA2FQetsBGrXYaRD7i4KsMin4pQCXsFg7fdW0=
Subject key identifier:   7D:03:F0:A8:7F:14:46:15:7B:BE:B2:BA:60:BC:C8:28:75:77:CB:D2
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584902EC22456DF5BA443EB88000
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/51022801-32c2-341d-ac1c-1c40087ca9b6.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     33598
IP address blocks:        138.8.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:22:45:6d:f5:ba:44:3e:b8:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=b85ca523-19a6-44d2-a5e7-9fd93cfb5466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:38:ab:53:55:e5:bb:4c:49:ae:77:5a:bc:af:
                    95:bf:85:3f:62:d9:3c:6b:17:b6:b1:20:5d:a0:3d:
                    a9:f4:cd:a8:b5:02:32:13:fc:71:3f:f1:c7:fb:67:
                    79:b0:87:d9:f8:ab:d8:e1:fd:4f:5e:75:8b:e5:75:
                    80:99:e4:15:f4:3a:3a:6c:dc:77:9f:26:e5:42:7c:
                    52:88:fa:aa:b4:e0:64:53:9f:06:b1:7c:e3:ab:5b:
                    0e:3a:2c:d4:c0:b4:27:74:cb:6d:ef:34:0d:31:75:
                    24:d9:5b:99:ea:ce:73:7e:f3:93:aa:e3:a2:37:cc:
                    5e:89:9a:d1:f1:e9:6d:c6:51:96:16:08:ed:de:fa:
                    c2:07:5e:7b:47:8a:db:92:f0:a6:5b:3f:8a:a6:bc:
                    d0:1c:8f:c5:0e:4d:3c:07:9a:ed:70:67:63:5b:46:
                    cb:67:7e:d4:aa:77:dc:1a:bf:6b:33:b2:e7:22:3d:
                    c1:59:bc:5c:02:e2:0b:e3:5f:0f:b9:d7:94:df:76:
                    7c:e8:f7:f9:55:86:e2:cb:ab:86:fc:13:d5:ff:f1:
                    e3:84:ac:93:2f:bf:d9:2b:90:71:06:29:7a:31:05:
                    25:c0:46:d0:72:34:f3:cb:e9:e9:ce:02:88:0a:9a:
                    80:7d:a2:ee:81:2d:af:04:30:4e:9f:a7:fb:be:c5:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:F0:A8:7F:14:46:15:7B:BE:B2:BA:60:BC:C8:28:75:77:CB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/51022801-32c2-341d-ac1c-1c40087ca9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.8.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a3:c9:d4:8b:b8:c2:bf:16:83:38:01:d2:b9:28:28:a3:36:
         68:f9:f9:b0:18:24:1f:e6:b5:fd:fc:d7:e7:46:6a:fa:24:8a:
         09:b3:84:3e:cd:42:17:36:37:14:96:05:c7:11:e8:60:c4:ba:
         0f:cd:c4:8f:3b:9e:a5:59:09:a1:40:a2:be:9b:95:36:04:4c:
         28:c2:d4:c5:c6:02:06:dd:5b:fe:01:79:db:39:cc:49:6d:ea:
         a8:46:18:7c:1e:70:12:44:b7:eb:bf:5e:7c:a3:d6:f1:60:00:
         1e:d6:9a:3c:93:59:1a:13:2b:7a:43:b3:62:21:49:56:54:db:
         f3:ad:a3:84:d7:14:a4:32:2b:08:d4:68:cd:d7:4d:ef:ef:5d:
         83:14:43:37:9e:dd:c7:f3:30:42:64:38:72:fc:92:0c:6b:5d:
         b6:7f:d2:2e:42:c5:a6:28:78:b8:2d:60:d8:05:ca:5f:e3:c5:
         85:48:dc:80:75:48:3c:ee:c6:6f:95:cb:15:77:0a:9e:b1:ff:
         f2:28:00:50:3a:e1:66:99:39:a7:86:c3:81:48:95:68:23:e4:
         19:4d:a1:ea:30:17:95:eb:ba:f9:3e:f2:8d:a5:85:b3:ac:36:
         bb:94:f3:2e:ef:1b:4b:d0:fe:c0:34:92:2a:6c:37:3d:c0:c4:
         e5:98:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:44:34 2025 by rpki-client