Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/275593c4-7172-3e05-8f60-178c9d79625e.roa
File:                     275593c4-7172-3e05-8f60-178c9d79625e.roa (raw, json)
Hash identifier:          XwWScDk7EOV8ERSIae3Z/evtenIC4sw/BLXMPoJbO28=
Subject key identifier:   3E:F0:F3:EF:92:1E:B7:0D:AE:89:38:56:9D:CB:B5:5E:FE:E0:FF:86
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F43285848EF6151A2E4B649881BA7D300
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/275593c4-7172-3e05-8f60-178c9d79625e.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     398324
IP address blocks:        162.142.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:51:a2:e4:b6:49:88:1b:a7:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=a7a63957-f629-4914-b975-14649a4d2a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:a6:4d:c5:dd:39:2d:55:7a:a4:dd:de:24:
                    19:b2:0e:30:bc:02:c9:dc:7e:a6:cb:79:5e:45:ca:
                    43:83:43:01:3e:bd:47:cb:f8:c6:ed:1f:54:07:37:
                    7d:d5:24:a9:8d:77:f2:5d:e2:2b:7d:f2:cd:61:df:
                    02:52:4b:ae:b6:ec:f2:25:a7:f0:88:05:ca:f6:b8:
                    31:bd:34:10:2d:7b:5d:29:ca:01:fc:09:a2:06:d5:
                    b8:0f:42:b9:9c:7a:dd:64:a7:e7:03:7a:89:f6:7f:
                    9e:b7:5a:ca:df:7b:66:10:a7:1c:0d:5e:94:56:e5:
                    eb:58:7e:73:87:52:a2:27:19:95:b4:41:02:07:ec:
                    7e:d3:71:d6:ca:2d:69:0a:14:78:75:12:67:be:8a:
                    2e:d2:88:56:6e:88:94:d3:bf:ce:f5:c3:a5:c0:49:
                    2b:42:37:a1:59:26:53:38:df:4f:7f:ad:7a:cc:10:
                    08:f8:32:97:f2:d8:31:d8:2d:fc:e1:74:5d:ea:5d:
                    30:4c:12:85:5b:86:0b:b3:70:33:2a:6f:42:a3:40:
                    10:61:cc:f9:31:d2:a9:78:34:1d:fd:ce:95:79:87:
                    17:9b:e7:35:26:a2:b1:c1:09:70:a3:fb:d6:5a:ec:
                    ba:b5:82:b0:78:87:36:bc:76:c6:05:48:a5:03:25:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F0:F3:EF:92:1E:B7:0D:AE:89:38:56:9D:CB:B5:5E:FE:E0:FF:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/275593c4-7172-3e05-8f60-178c9d79625e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.142.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:01:c1:c8:2f:cc:8f:b0:f2:1a:67:ee:ba:86:66:7f:88:45:
         5a:88:58:0e:b6:cd:0c:7b:c0:84:58:1c:e0:cc:e9:35:31:43:
         cb:7e:2d:b6:e2:59:00:8a:80:f8:5d:25:8a:53:74:34:5e:22:
         15:90:11:85:b6:bb:b4:77:7a:f4:4e:a9:ca:19:0d:a5:a5:f8:
         f0:1e:63:7d:74:ca:5f:93:13:94:dc:6d:5b:5b:61:d3:19:d4:
         f7:af:d2:ee:30:af:98:fd:0f:6c:e6:81:8e:a4:ca:bb:76:43:
         4d:88:37:15:8f:e3:04:2a:14:82:1b:1e:2c:3d:45:f2:73:6d:
         e2:8a:52:ca:35:b8:19:66:37:f6:3a:84:e5:de:08:9d:d7:36:
         ca:1b:37:87:31:43:25:d5:81:ac:64:e4:3f:da:42:93:d5:44:
         70:62:02:d9:de:30:32:65:2b:99:75:22:4f:08:75:97:67:d4:
         5e:df:75:bc:a1:2a:1f:b5:75:17:14:f3:b0:fa:d2:5e:9b:fe:
         b2:cd:3e:eb:54:eb:22:66:00:41:f5:65:e9:3e:80:7e:76:fd:
         9d:6d:29:a3:2a:dd:d2:de:df:eb:d5:d1:88:a1:2a:89:b3:bc:
         4d:46:85:4f:1d:69:d3:20:06:06:a1:0c:ef:74:79:30:79:02:
         e6:18:97:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:22 2025 by rpki-client