Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
File:                     e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa (raw, json)
Hash identifier:          ZxBZYrxeNX0B1cFZBbqQf+1iMqitDf+4RlWFNVbMP0M=
Subject key identifier:   3C:19:F7:1E:E5:04:06:83:B2:EB:1D:1E:4D:14:9A:97:EB:6F:93:BD
Certificate issuer:       /CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
Certificate serial:       010D0C9F432858492E13C5B3BC457253417B5880
Authority key identifier: 66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     399293
IP address blocks:        192.140.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c5:b3:bc:45:72:53:41:7b:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=9f4e3317-c641-4c0d-bd45-f5703e8283ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:07:ed:e0:88:8d:97:6d:f8:1e:0b:86:63:
                    5b:45:22:1e:f8:51:79:90:53:b9:4f:7a:ee:d1:4d:
                    e2:2a:2d:47:6b:1c:21:b1:0c:57:55:ad:0c:4c:4b:
                    51:b5:0d:3d:2a:85:69:69:db:c5:52:c5:81:cb:74:
                    f3:29:a4:23:4f:46:b0:0f:40:60:f2:44:50:52:63:
                    72:77:37:58:93:8b:04:af:aa:ac:7d:18:41:46:97:
                    3d:6d:cc:55:c9:45:77:88:22:96:3a:7f:5e:0c:fe:
                    0f:1c:e7:f1:eb:8f:bd:ea:07:19:99:c0:e8:d7:6b:
                    ff:3a:77:af:6c:e5:f8:2d:2d:02:13:41:ad:9b:d5:
                    01:25:87:7a:c5:3b:27:0f:00:e8:ea:d0:a8:71:c0:
                    29:7d:74:da:cd:e6:9c:59:b5:c3:99:55:de:ad:ef:
                    aa:96:a2:21:e1:89:7f:f2:4d:79:d3:72:1c:49:56:
                    a3:2b:a2:64:b2:19:78:f8:3a:41:e2:9e:1a:68:76:
                    00:c3:59:65:81:63:82:83:79:9d:45:29:f1:c4:b4:
                    87:27:75:a6:7b:f6:84:5e:83:a2:7e:68:25:97:4e:
                    21:a3:9b:a4:18:45:a7:76:42:c3:45:59:ba:c0:d3:
                    76:f3:98:c2:56:01:e2:26:8a:fd:3e:29:8d:4f:54:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:19:F7:1E:E5:04:06:83:B2:EB:1D:1E:4D:14:9A:97:EB:6F:93:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl

            X509v3 Authority Key Identifier:
                keyid:66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e8:4d:d1:76:39:9e:64:44:15:6a:32:f9:07:f0:5c:fa:fb:
         a2:f8:9b:f4:7c:6f:7b:ab:21:c8:c5:ac:c4:40:ec:d7:f3:0f:
         8a:5c:de:b5:88:eb:0b:29:45:f4:0f:99:2d:3b:7a:f1:2c:11:
         e6:aa:d6:4c:39:39:d5:ab:14:5e:17:fc:3f:92:08:b2:05:04:
         67:28:8d:ed:8f:d8:bd:5a:e0:41:58:4d:86:e7:95:a9:e5:d5:
         36:4d:f5:57:72:8a:26:93:df:c1:1f:50:9d:d3:4f:df:81:c7:
         c6:56:22:4d:2f:bc:ad:2b:aa:05:6f:a0:00:fe:c0:50:91:87:
         3a:cc:f3:b6:de:4f:f6:58:56:1d:f1:d5:04:bb:cc:cc:f3:3d:
         88:6e:6f:67:ff:07:bf:51:3f:e4:43:7f:e6:ae:02:b2:cb:12:
         a8:73:c7:c0:b6:67:ec:f3:31:06:07:e7:0e:84:1b:2a:b5:d0:
         33:3a:f8:e3:c4:3c:ad:8c:4e:51:bf:1f:c2:e1:8d:da:9e:6b:
         5f:9f:b6:c4:45:6a:88:b2:d9:85:6b:b6:68:d8:76:77:0e:56:
         c1:5d:5b:56:da:b8:11:cc:42:a4:41:a9:9d:a6:ab:58:1e:6d:
         e7:64:e5:e3:14:7e:78:2c:d9:37:ec:ea:33:77:67:8d:97:89:
         64:44:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:18 2025 by rpki-client