Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5c5c40ab-4b19-33fa-9738-d499a1344b76.roa
File:                     5c5c40ab-4b19-33fa-9738-d499a1344b76.roa (raw, json)
Hash identifier:          djOS4Fy2XL1HOJrmvYji0prE5M4buj+Z6Jh9so2cXFw=
Subject key identifier:   7E:BB:EF:9C:74:96:B0:E9:07:A6:DA:DF:23:86:FA:6C:54:B4:4C:90
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C84C1F5A6B9A5800EE752740
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5c5c40ab-4b19-33fa-9738-d499a1344b76.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     36492
IP address blocks:        64.9.238.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:1f:5a:6b:9a:58:00:ee:75:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=c591502d-86b7-460f-8916-19e791734696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:92:a2:39:b1:41:40:d6:0b:ed:a9:39:5d:
                    30:68:60:f9:6b:47:7c:85:8c:14:8d:eb:9b:e4:1b:
                    da:a4:93:1e:3f:5e:06:39:c3:88:20:19:a8:a8:aa:
                    71:45:65:16:fa:46:bc:48:85:d8:67:a9:65:b8:94:
                    f7:1d:32:1a:37:00:2b:1a:0b:03:81:26:73:a1:c9:
                    5c:25:be:2a:25:63:2e:03:f2:33:8f:b4:bd:7a:c8:
                    8f:87:fa:ca:aa:4a:b3:08:18:99:71:30:07:0e:2e:
                    f7:8c:6c:a4:24:a0:37:00:23:09:c2:21:41:48:8a:
                    a6:22:df:c9:b9:23:6f:44:73:66:f1:a7:aa:6e:a3:
                    e1:7d:de:8b:e5:7d:55:e8:a5:ba:96:08:1b:ba:26:
                    19:f4:97:c5:b0:26:4c:af:4a:2c:66:1a:6d:3b:4d:
                    2a:d2:fe:e2:d9:2c:e7:ec:9d:03:76:dd:76:92:93:
                    75:fb:98:cd:41:1e:bc:88:a5:39:ac:73:c2:d8:f2:
                    00:04:55:ba:36:b1:50:68:e5:d9:c6:3f:d6:69:0c:
                    a4:68:12:af:b0:fe:fc:74:b5:86:c5:6d:38:17:14:
                    a6:8d:40:d8:bf:08:13:ae:3b:9a:a2:10:f2:b3:57:
                    d1:61:a2:9d:34:d9:e2:89:70:34:2c:1a:d3:e3:4d:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BB:EF:9C:74:96:B0:E9:07:A6:DA:DF:23:86:FA:6C:54:B4:4C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5c5c40ab-4b19-33fa-9738-d499a1344b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:e9:53:01:df:37:56:d2:62:02:d7:6c:c8:8f:fc:b7:bc:
         89:e9:33:97:38:bd:13:49:d7:72:a3:6c:13:fc:8f:b3:52:c7:
         20:8d:dc:0a:6f:e9:18:6a:f4:0b:a6:73:44:f3:f2:ec:14:5e:
         84:d1:73:b4:c4:35:b0:b2:09:1f:74:28:35:0b:07:b7:94:9b:
         d5:2b:a9:49:8f:a5:7d:2a:ce:5d:fe:08:b3:85:a8:91:08:a1:
         62:75:6d:8e:af:78:a9:42:f6:7d:ee:af:ee:7c:c5:1f:17:bd:
         3c:e6:a9:c8:25:79:2a:42:c2:97:6d:ad:04:eb:a6:df:87:3c:
         26:35:40:77:69:c1:8b:57:b6:7b:d8:14:79:5a:2b:0e:a8:4c:
         64:28:62:ef:5c:49:67:df:ed:31:13:1b:fd:cf:4c:b3:66:5e:
         c3:76:11:72:74:ee:48:c1:e0:58:41:e5:cc:a4:7f:39:ce:e1:
         55:d5:6a:2e:7b:07:d8:00:f8:e8:c4:c9:d9:e8:b8:21:02:b9:
         ac:e8:f0:96:ea:a4:e2:a4:3a:0e:4a:97:65:fb:1f:39:80:94:
         99:64:4b:5d:9a:68:68:66:89:fc:8e:dd:10:c0:ec:ee:96:d9:
         1a:63:6a:49:61:5e:8f:c4:0f:31:8f:70:df:b2:79:8a:8c:bb:
         07:93:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:30 2025 by rpki-client