Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fe011bfb-459d-37f6-9fb2-28ca9287b49d.roa
File:                     fe011bfb-459d-37f6-9fb2-28ca9287b49d.roa (raw, json)
Hash identifier:          3cVhC0MzFGqtjaNC1t5gD9BA7gGCbBdgGs9nqfarCkQ=
Subject key identifier:   ED:E6:89:F0:3E:E1:A8:C1:A2:81:37:D4:19:75:3E:30:6F:93:32:A8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858486C2B049A5CAF72A0F3AF8340
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fe011bfb-459d-37f6-9fb2-28ca9287b49d.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     13332
IP address blocks:        103.251.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:04:9a:5c:af:72:a0:f3:af:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=460f690e-ede9-4fc5-a3bd-6de532f3c2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:c0:d3:0f:65:ac:8a:99:e2:11:49:f0:fe:
                    ea:ae:71:35:a9:f8:d1:96:37:a5:8c:f7:07:cc:ee:
                    69:85:ce:ec:61:2d:40:30:b1:b1:6e:06:67:a6:69:
                    e7:1f:74:8c:70:42:af:68:42:1c:d2:34:39:48:25:
                    bc:98:15:d4:bc:61:be:f6:71:7c:67:f8:04:63:4a:
                    e0:c1:89:7c:bb:9e:fa:e9:dd:b9:98:82:10:bb:7e:
                    0c:2b:01:ba:e1:b7:c0:05:9c:86:5c:9a:26:7f:7d:
                    6e:64:79:7b:6e:65:12:01:43:25:f4:55:63:bc:16:
                    f1:3a:50:33:e5:90:e4:a0:44:72:47:f9:c4:64:66:
                    12:4d:b7:cd:c4:f5:1c:89:16:63:bb:07:28:5c:38:
                    e9:7e:49:df:07:93:12:d7:35:8e:37:52:c5:08:6a:
                    94:4a:ce:de:88:b2:a6:5d:02:76:7e:96:c8:78:75:
                    d0:df:4b:20:85:12:ce:7f:79:f3:3b:b5:f4:e9:c6:
                    05:85:cf:44:d8:a3:a1:a3:64:fc:f1:9a:6b:fc:8a:
                    3c:f5:20:ba:37:40:09:65:e2:45:83:0d:84:14:af:
                    6c:28:ad:d3:77:d5:ee:6e:bf:e3:39:99:d7:d7:cf:
                    59:fc:d7:d8:c6:45:0e:43:b8:b9:d3:af:8a:ca:ef:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E6:89:F0:3E:E1:A8:C1:A2:81:37:D4:19:75:3E:30:6F:93:32:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fe011bfb-459d-37f6-9fb2-28ca9287b49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:ff:ec:63:f0:11:ec:fe:b4:62:54:d0:44:bd:16:3e:69:3a:
         82:8b:b3:42:66:38:7d:9d:24:81:27:85:68:57:11:f6:46:b7:
         5f:98:6c:81:52:c8:5a:ce:ae:5b:dd:13:33:ec:17:81:42:a9:
         e1:3a:01:cd:c7:ff:60:81:b4:eb:90:ce:e9:0a:75:73:f0:a6:
         45:41:db:ad:38:f6:fd:59:0a:76:94:da:3c:60:00:95:bc:6e:
         05:3d:12:db:ab:59:ee:9b:c4:da:ea:06:1f:29:0c:c9:8f:68:
         80:54:a6:0e:f6:bd:58:a8:ec:71:17:62:33:81:ac:dc:54:34:
         ed:a7:be:a1:53:fd:f8:f3:b0:9c:ca:ea:28:5e:5e:1f:9f:90:
         f2:77:8f:0a:e4:09:11:fb:5e:58:8f:64:6a:b0:b0:f0:4a:08:
         de:ba:e0:22:9d:40:d7:3a:eb:88:49:f2:16:2f:ab:d9:12:8e:
         92:b5:2d:bb:ee:42:5d:40:9c:22:9c:c3:df:27:98:84:8a:b5:
         30:ed:d0:d9:99:f3:33:12:c5:4b:a1:9b:f6:b4:d5:ac:fc:a0:
         15:7d:15:bd:68:64:78:59:c3:03:04:51:43:09:85:3b:c2:d9:
         d4:41:94:a1:be:81:87:89:34:12:1c:68:f1:10:ab:31:6b:b6:
         bf:7a:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 10:05:20 2025 by rpki-client