Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2448601d-222f-38f7-98ef-f78de9277ac0.roa
File:                     2448601d-222f-38f7-98ef-f78de9277ac0.roa (raw, json)
Hash identifier:          UxhJdJoU8+7KGmK5WQs3RZvVfesflnnzcmBrM8BggV4=
Subject key identifier:   63:A8:BD:BA:CB:07:B0:24:2B:E7:09:DA:B6:A8:C6:98:5B:CB:3E:D9
Certificate issuer:       /CN=798d5ad9-145d-4a5d-bd4c-6042dc72b63b
Certificate serial:       010D0C9F43285848A830A7A6157C1ADD14CA6700
Authority key identifier: 5E:30:92:20:35:C0:B6:CF:20:D9:0B:98:92:C3:73:9F:1A:DE:2D:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2448601d-222f-38f7-98ef-f78de9277ac0.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        205.135.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a7:a6:15:7c:1a:dd:14:ca:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798d5ad9-145d-4a5d-bd4c-6042dc72b63b
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=26ad87ce-ef44-43cf-b091-73c52e8f546a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7b:0b:70:a6:66:ba:f3:9d:05:b8:b8:85:bf:
                    68:90:d2:45:4a:26:d5:96:fd:be:f7:f9:92:a9:ed:
                    8a:7d:cd:35:24:04:09:97:df:dc:7f:f1:3a:9a:b8:
                    5e:90:89:f5:a3:a1:eb:4b:4d:fb:56:f0:cc:77:0c:
                    06:de:3e:41:ea:47:f2:00:0d:12:b0:40:5b:22:1b:
                    5f:3f:2f:cb:0a:43:5a:76:0b:e2:d9:4e:55:83:06:
                    6e:cf:2a:05:75:a8:37:a9:4c:6d:2d:08:f3:a5:6f:
                    08:99:d5:17:83:03:0f:99:69:8e:de:3a:d2:03:91:
                    58:74:ba:ee:36:fe:55:18:db:cc:c5:ac:8e:c6:2c:
                    6e:2f:c1:97:c9:ff:20:b5:bb:ca:ff:ff:a7:6c:7a:
                    29:04:9f:2a:44:5c:bb:bb:12:fc:ce:0d:20:7e:27:
                    df:f4:f4:70:be:0b:79:6c:6f:2f:69:ca:6a:98:0d:
                    6e:b8:f5:f6:16:87:a7:60:84:f4:38:34:93:ee:29:
                    c5:c4:15:3e:e4:ab:3f:a5:8c:43:37:43:95:3f:01:
                    29:f3:63:aa:0e:c1:40:d8:53:2b:2e:a0:49:bb:27:
                    76:17:ab:dd:da:0c:cd:63:84:00:4a:1b:0e:92:3c:
                    76:77:1e:73:8a:c6:5b:cf:c8:2a:a4:f8:d9:5d:bb:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:BD:BA:CB:07:B0:24:2B:E7:09:DA:B6:A8:C6:98:5B:CB:3E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2448601d-222f-38f7-98ef-f78de9277ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.crl

            X509v3 Authority Key Identifier:
                keyid:5E:30:92:20:35:C0:B6:CF:20:D9:0B:98:92:C3:73:9F:1A:DE:2D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.135.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:26:6f:6e:ad:76:78:62:22:c9:5c:0c:32:a0:42:0d:aa:d6:
         5a:50:c8:fd:26:af:f1:07:b7:d9:23:1a:00:91:0f:64:3c:b2:
         87:de:3b:c2:6e:18:8a:07:02:d3:51:95:6c:5f:90:1f:82:c1:
         4a:69:79:5d:3d:14:02:ad:9e:8c:c3:b3:21:a6:c1:de:ff:b3:
         5e:48:88:19:92:a3:ba:19:2f:bb:ae:7a:91:15:db:f8:b9:f2:
         5f:1b:af:bc:ef:d8:93:72:9d:2f:e0:80:a2:87:c5:0d:13:13:
         2b:d8:d3:ef:a5:86:11:db:19:6b:a7:0e:e0:83:9a:86:e6:86:
         91:0a:47:6a:43:b3:3a:05:f4:31:d4:c9:c7:08:18:60:f7:9b:
         0c:61:1b:3a:01:4d:ef:ae:fa:b7:48:83:db:41:06:6e:12:dd:
         ba:a3:0c:64:27:9b:f5:d5:10:60:5c:43:48:d4:3f:0e:6f:32:
         09:a1:7f:2a:d2:54:1d:fd:90:64:dd:75:6c:39:84:ea:e7:8f:
         ce:29:72:81:cd:ff:32:34:b9:30:e2:ed:73:79:29:1b:b6:98:
         8e:52:25:dd:11:23:06:f4:56:ba:c6:06:0c:e1:89:9c:59:70:
         a4:2a:a8:5b:2a:7a:45:4f:08:d7:43:da:74:7a:66:65:21:e2:
         06:1d:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:53:38 2025 by rpki-client