Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c682dd4-2d77-3755-9112-5b43423c7bf4.roa
File:                     4c682dd4-2d77-3755-9112-5b43423c7bf4.roa (raw, json)
Hash identifier:          o8uw736km6Vu2bBmXIqfQvmd+vBmgCwtGDWvSJ7vfb0=
Subject key identifier:   A3:6E:4B:B4:8A:10:27:2F:C8:8F:0D:3D:50:CD:85:F3:F6:19:AF:34
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1376C01CCBF9D84B05000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c682dd4-2d77-3755-9112-5b43423c7bf4.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10838
IP address blocks:        64.183.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:37:6c:01:cc:bf:9d:84:b0:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=1c066619-719d-4436-af19-c9ddd669a1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:83:c3:c9:9f:a4:27:2e:d2:53:7d:1a:2c:87:
                    27:60:c5:39:02:5c:cd:d0:ae:d0:be:da:fc:3c:64:
                    06:ac:fa:ff:d2:e2:4d:70:64:b9:d6:8f:8c:a5:0e:
                    12:4a:7e:f4:60:72:8b:20:b5:a1:49:50:ac:cb:ae:
                    d8:cd:79:94:c3:01:48:63:3c:50:32:54:ba:2b:45:
                    e7:8a:05:8c:82:05:c0:de:f1:95:d9:89:b4:4b:46:
                    c7:9b:71:fc:7b:90:17:c6:c4:39:ae:8f:11:b1:bb:
                    64:ff:9c:63:8b:72:e9:3b:69:53:d0:05:4f:49:a6:
                    02:6b:bc:16:de:7c:8b:de:bb:80:73:7b:11:24:b5:
                    40:dc:81:c2:0b:63:6d:93:dc:cc:ee:29:44:16:49:
                    15:a5:a2:a4:1a:60:92:e3:82:f7:41:79:c8:fc:82:
                    e6:40:1c:f0:69:9a:2b:0a:f6:c0:80:a4:db:64:ba:
                    e0:9e:97:f9:5c:bd:27:13:8c:d3:54:01:93:b1:21:
                    c0:8b:6f:25:68:6b:ce:6f:c0:73:ad:25:ba:e2:83:
                    10:5f:77:76:e2:9f:46:d8:6c:74:7f:96:b7:23:73:
                    90:0f:2b:c8:00:36:e4:d7:f8:5c:3d:d3:e3:fd:aa:
                    97:1f:b7:39:05:3c:6b:05:b3:95:6a:dd:67:be:b3:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6E:4B:B4:8A:10:27:2F:C8:8F:0D:3D:50:CD:85:F3:F6:19:AF:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c682dd4-2d77-3755-9112-5b43423c7bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c3:e5:f1:0e:5e:72:42:7c:2d:5a:3b:24:4e:7c:d9:22:3b:
         9b:d6:d6:13:54:eb:9b:49:9f:fa:bd:b9:8e:18:c8:83:da:bc:
         df:51:35:5e:ca:07:a1:17:d7:08:e7:c5:9d:00:63:86:54:d9:
         a4:55:c1:68:3b:72:ef:66:76:fa:fc:d1:84:a0:73:85:60:cf:
         36:d8:fe:88:75:49:85:58:35:8e:e9:9f:1c:83:0d:e2:e8:a8:
         f1:03:c7:3b:38:a3:15:9c:50:aa:70:af:45:6f:a2:df:1c:8d:
         54:fc:3b:18:30:f1:5f:91:93:01:f9:ef:2e:e3:08:7d:0e:c7:
         ad:39:52:14:70:f1:04:34:f7:86:4b:c0:22:09:5e:0b:44:02:
         dd:7e:fc:76:1d:b2:37:38:95:2d:7f:90:75:1f:67:5e:f2:a8:
         1f:76:f4:99:57:c5:8c:80:fe:fa:a3:d2:39:19:66:5a:cb:9b:
         b3:ad:42:61:05:03:1c:21:36:43:da:7f:67:4a:31:30:e5:2a:
         29:44:3b:ab:17:9f:6d:8c:d8:9c:f7:b7:08:bb:ab:de:38:1b:
         45:df:60:fd:10:a4:66:4b:6a:85:2f:24:8f:0f:22:ad:73:8d:
         88:46:e1:20:3a:f1:f9:7b:90:5c:78:56:08:5a:1b:c1:69:61:
         e2:bf:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:49:28 2025 by rpki-client