Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/6c65424a-911c-3f1c-b2aa-2405b49d9a8a.roa
File:                     6c65424a-911c-3f1c-b2aa-2405b49d9a8a.roa (raw, json)
Hash identifier:          oSVUopBjgCRhZ64Apq/0JRKBqrPvG3GJKpX0wfWJtTM=
Subject key identifier:   EB:0A:C0:2F:39:16:2F:7A:1D:39:C2:AA:38:2B:F3:49:A2:37:75:C4
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328584252133E9974388191EB5033E0
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/6c65424a-911c-3f1c-b2aa-2405b49d9a8a.roa
Signing time:             Sat 24 Jun 2023 01:00:17 +0000
ROA not before:           Sat 24 Jun 2023 01:00:17 +0000
ROA not after:            Fri 22 Sep 2023 01:00:17 +0000
asID:                     398646
IP address blocks:        45.41.214.0/24 maxlen: 24
                          45.41.215.0/24 maxlen: 24
                          209.160.99.0/24 maxlen: 24
                          162.253.214.0/24 maxlen: 24
                          209.160.97.0/24 maxlen: 24
                          162.253.215.0/24 maxlen: 24
                          2602:fe6b:1020::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:52:13:3e:99:74:38:81:91:eb:50:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Jun 24 01:00:17 2023 GMT
            Not After : Sep 22 01:00:17 2023 GMT
        Subject: CN=e8f41e3a-a427-477a-9b8a-5e67e53bc4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:09:da:fb:72:5e:e0:18:52:13:74:62:7f:
                    64:3d:cf:70:1e:b6:6b:46:3e:f8:29:ad:b2:a0:88:
                    bf:25:06:c7:e8:52:a0:37:67:9c:8c:61:3a:72:ff:
                    56:a5:75:a6:71:a2:10:98:99:ca:1c:92:07:d4:42:
                    9c:4e:b8:a3:4f:5f:b1:3b:4b:da:44:b1:58:39:58:
                    f6:bb:f2:44:d7:93:25:09:5a:1f:78:91:fc:0b:fc:
                    70:ad:c0:dc:8c:b3:20:ce:76:f4:e0:a9:4a:8d:f7:
                    73:76:e6:5a:01:07:c7:ac:80:80:aa:a4:7f:56:5e:
                    5e:16:3e:66:a6:a2:99:09:ae:aa:1e:a5:9f:96:4b:
                    b4:44:f8:d7:bb:20:e4:17:68:75:a2:bc:58:69:ea:
                    a4:f3:71:53:74:c3:27:d2:44:e3:8a:05:4d:15:cb:
                    12:0c:f3:1b:0b:ec:b8:b0:44:24:84:09:c2:a4:96:
                    e4:59:24:45:eb:e7:6f:45:6c:ad:46:92:5d:a4:81:
                    c8:19:de:fa:ec:8e:cc:63:14:d9:61:12:86:db:df:
                    b2:ea:51:5c:20:ec:71:ea:cc:70:09:0a:b2:99:af:
                    ba:66:2d:d1:d8:79:c0:c8:b1:39:54:25:5c:30:26:
                    d1:b7:df:67:01:ef:ac:fc:97:86:4b:29:bd:79:55:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0A:C0:2F:39:16:2F:7A:1D:39:C2:AA:38:2B:F3:49:A2:37:75:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/6c65424a-911c-3f1c-b2aa-2405b49d9a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.214.0/23
                  162.253.214.0/23
                  209.160.97.0/24
                  209.160.99.0/24
                IPv6:
                  2602:fe6b:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:58:59:aa:ba:a7:4c:ca:5f:5f:e8:2c:2e:de:88:14:89:56:
         1a:b8:24:32:89:a0:fa:d0:70:3e:42:97:2d:e7:37:cc:f2:c7:
         cc:ce:9b:3d:29:ed:f0:26:40:09:9c:e1:7e:e3:bd:30:75:e3:
         7c:04:b0:0b:8d:7c:9b:e7:3e:90:3f:0d:7e:84:f7:3e:72:53:
         f8:14:36:c7:01:2b:75:30:c4:d8:e9:2e:30:12:b3:c3:dc:32:
         8b:b1:4b:66:14:59:41:4b:f4:d2:8d:f8:58:77:de:ae:5f:a2:
         30:6a:27:e9:45:9d:15:3f:7e:0f:9b:4c:1a:c5:36:9e:38:d1:
         a6:e1:db:d3:af:fb:40:78:43:88:9e:c9:aa:e5:60:8c:4e:8b:
         fb:ed:4d:3f:d4:eb:cf:44:f9:54:d7:35:c9:d1:8b:ba:e7:a1:
         e9:da:35:39:31:72:80:63:ce:80:cc:61:39:00:c8:82:dd:44:
         77:3a:6c:a8:79:c3:c0:2d:28:43:8a:82:f4:fa:4f:88:c0:77:
         ce:fe:bd:7c:1f:34:57:b4:7c:c7:6b:ec:fa:78:95:12:7f:50:
         73:5d:93:a9:84:fa:07:aa:61:fd:58:e1:b8:3d:21:ea:0c:ae:
         eb:1e:a9:20:51:53:f3:86:dd:8d:aa:30:ba:76:96:d6:a4:4b:
         08:90:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:12 2025 by rpki-client