Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b47136ca-fd37-38fa-8727-ad3d908c9514.roa
File:                     b47136ca-fd37-38fa-8727-ad3d908c9514.roa (raw, json)
Hash identifier:          LJdCNeOjU/jssNboJ7q8jP4hINUsKX7q/Vd2BE60NKM=
Subject key identifier:   78:B6:0A:87:6C:95:98:13:9C:4B:C3:06:87:66:94:73:7B:D2:11:87
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F4328584933D878AD038F4FA7F17BB7E0
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b47136ca-fd37-38fa-8727-ad3d908c9514.roa
Signing time:             Sun 16 Mar 2025 02:36:13 +0000
ROA not before:           Sun 16 Mar 2025 02:36:13 +0000
ROA not after:            Sat 14 Jun 2025 02:36:13 +0000
asID:                     834
IP address blocks:        199.101.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:33:d8:78:ad:03:8f:4f:a7:f1:7b:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Mar 16 02:36:13 2025 GMT
            Not After : Jun 14 02:36:13 2025 GMT
        Subject: CN=f9fd31d3-244e-4412-bf85-72b3f76283c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:d7:92:2c:14:35:e2:a0:fc:b9:be:c4:84:
                    30:60:10:7c:02:6e:5f:8e:d5:59:3d:f5:92:ee:92:
                    ed:bd:32:96:fa:15:74:d6:03:64:77:97:f2:8f:d3:
                    93:82:29:a0:59:c5:13:db:b5:4a:1e:c0:0a:ba:2e:
                    87:2f:89:e7:59:94:d5:f3:45:89:f4:b8:39:9b:a1:
                    d9:9d:1f:96:1a:f0:00:fc:55:06:56:ac:27:16:50:
                    52:0c:a1:44:4d:42:2d:a6:09:f7:2c:ea:8a:ee:0d:
                    14:f9:dc:bd:b2:cb:3a:0e:b4:8b:7b:2c:00:5e:8b:
                    49:9b:a1:f8:92:96:fc:42:ea:06:19:fb:1b:40:a0:
                    88:23:ed:72:c9:93:d1:63:10:90:02:9d:a6:34:59:
                    29:3b:c7:89:b0:1a:68:e4:d4:96:76:e1:f0:a8:78:
                    e6:54:4f:46:1d:10:59:11:d3:67:6f:a4:cf:98:15:
                    4b:33:fb:49:a6:7f:06:33:dc:3a:f5:70:c7:cc:a9:
                    90:af:51:f4:e8:20:40:5e:10:9b:15:f0:aa:6c:76:
                    04:2c:66:2e:41:9c:e1:ee:0c:00:6c:3f:ef:a2:21:
                    39:d9:ec:bc:44:43:fa:87:47:96:97:01:12:61:b7:
                    9d:76:20:93:4f:3b:7d:d6:c7:08:49:38:d6:19:81:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B6:0A:87:6C:95:98:13:9C:4B:C3:06:87:66:94:73:7B:D2:11:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b47136ca-fd37-38fa-8727-ad3d908c9514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:b9:71:c7:a8:b1:ea:e9:e7:93:4c:22:33:31:fe:59:da:
         e5:d9:32:ed:f4:d9:30:9f:9e:ff:aa:e5:94:6f:d4:18:20:ef:
         8e:d6:91:a3:f6:e8:e9:0b:6a:17:e2:c3:3b:65:dd:3c:97:27:
         72:ec:9f:a0:e6:85:04:61:8b:b1:2c:d1:1d:58:04:34:8e:e4:
         5b:e1:94:52:29:0c:38:bd:7f:dc:cd:1f:38:52:70:4e:37:05:
         e1:95:ac:9f:56:5a:59:a9:54:5d:15:4a:df:1a:78:3e:13:93:
         57:69:81:ff:2d:8b:f3:bc:f3:ca:71:d0:f9:68:8e:e1:7d:bc:
         04:2e:3c:07:f4:de:06:3b:bd:1b:65:06:0a:3d:9c:b6:49:16:
         c0:21:50:cc:d6:55:2f:b0:84:91:b3:a1:22:e7:c6:aa:91:0f:
         18:0e:0b:75:43:16:e8:92:5f:3e:b1:88:a4:99:4d:8e:b7:9a:
         a2:f7:76:06:9e:7a:9b:b6:ba:a1:ff:be:e8:44:31:24:0f:13:
         73:59:4f:50:81:65:8a:58:f2:e3:2f:2f:30:63:31:90:c2:c2:
         47:47:af:73:2b:de:50:86:34:7c:63:7f:af:c7:14:c7:27:65:
         9d:b4:b7:aa:17:aa:0b:5d:46:7d:61:86:02:ad:32:c5:f4:27:
         4e:83:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:26 2025 by rpki-client