Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/f72afaa6-6dc1-3e7e-9951-1f4de7ff9993.roa
File:                     f72afaa6-6dc1-3e7e-9951-1f4de7ff9993.roa (raw, json)
Hash identifier:          k5kj/6jQBpobcEold2W8sUVawlJwOwbgm06w1g5/6hE=
Subject key identifier:   37:72:07:F6:F2:E4:B6:45:14:2E:F3:73:54:DA:50:68:D1:97:FF:AD
Certificate issuer:       /CN=1dad5646-ccde-4526-bd31-81887215d6af
Certificate serial:       010D0C9F4328584905F1E59CA9470224F6A31520
Authority key identifier: 19:48:0C:17:7A:F7:E2:90:62:F4:2A:0A:06:E3:43:1C:82:D9:94:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/f72afaa6-6dc1-3e7e-9951-1f4de7ff9993.roa
Signing time:             Thu 27 Feb 2025 16:00:16 +0000
ROA not before:           Thu 27 Feb 2025 16:00:16 +0000
ROA not after:            Wed 28 May 2025 15:00:16 +0000
asID:                     23395
IP address blocks:        170.62.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:f1:e5:9c:a9:47:02:24:f6:a3:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad5646-ccde-4526-bd31-81887215d6af
        Validity
            Not Before: Feb 27 16:00:16 2025 GMT
            Not After : May 28 15:00:16 2025 GMT
        Subject: CN=6351706d-2cc8-412e-a126-f4cca0c3ad03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:bf:37:8a:c0:55:10:dd:05:e6:31:bd:3f:
                    74:c0:ea:09:82:36:0a:94:65:49:03:88:3c:aa:3b:
                    02:6d:71:73:40:f9:6a:e9:d1:27:bd:4f:48:34:ce:
                    99:9c:0a:c8:8c:85:2b:ba:2e:a7:bc:62:56:4b:92:
                    79:27:03:90:5f:02:2f:b2:1e:5a:55:d2:d2:ef:d6:
                    59:12:f1:f4:8f:52:87:e8:da:85:7b:70:57:a5:aa:
                    3d:6d:30:96:ac:53:dd:e4:48:d6:39:37:ac:bf:90:
                    fb:7f:d8:4d:bb:d7:e4:d1:d6:89:bb:95:fb:37:72:
                    28:d8:8f:9a:80:ac:b7:63:55:87:91:ca:56:10:af:
                    c0:45:79:3b:a7:95:d9:34:0d:41:6c:f7:fc:12:0a:
                    69:bd:6f:32:f9:2c:c3:d8:22:df:97:7d:9a:be:11:
                    99:a0:95:71:7c:65:08:ec:e3:95:59:79:10:0f:46:
                    b5:4b:25:27:39:04:83:5d:94:3c:71:14:b8:99:4f:
                    e6:32:ed:ab:7f:cb:f6:08:c3:4f:ed:aa:41:db:12:
                    0c:1f:d0:ac:2d:f8:83:f1:d7:68:34:5a:c1:2c:70:
                    5e:55:50:d3:77:f6:43:94:c5:e9:c3:e4:39:a6:78:
                    ec:11:a0:d8:1d:d5:fa:32:f2:ac:4c:25:f9:53:b8:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:72:07:F6:F2:E4:B6:45:14:2E:F3:73:54:DA:50:68:D1:97:FF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/f72afaa6-6dc1-3e7e-9951-1f4de7ff9993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/1dad5646-ccde-4526-bd31-81887215d6af.crl

            X509v3 Authority Key Identifier:
                keyid:19:48:0C:17:7A:F7:E2:90:62:F4:2A:0A:06:E3:43:1C:82:D9:94:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:bf:ec:9f:b8:03:fc:82:5e:f1:ac:10:4d:3a:1c:a3:4e:54:
         d7:f4:00:cb:5d:6a:11:2b:d4:c3:3a:78:16:46:1e:de:da:14:
         f3:64:d3:02:54:e9:65:ab:95:ad:a0:01:5b:82:81:10:63:92:
         f3:8c:f9:6c:38:ec:33:83:52:51:11:03:3b:da:05:b7:06:15:
         6d:6e:16:8c:06:20:7d:9c:2c:bf:13:80:dd:55:55:b7:c2:59:
         7e:a5:bf:5d:5b:7f:1d:4f:5f:40:bc:32:80:11:10:12:39:b1:
         9f:7d:a7:45:a7:4e:b6:67:05:c2:d3:61:e0:5b:c4:99:24:99:
         d7:77:d2:9c:5e:0b:3e:10:8d:d8:85:01:33:17:8d:a0:b1:18:
         05:29:5a:86:e2:12:91:43:c4:40:21:16:be:bf:f6:90:c7:83:
         86:ea:7b:f7:26:a3:24:d1:70:5c:26:b9:b6:58:42:3d:74:cd:
         dc:f5:8d:7f:47:49:c9:83:54:0e:61:af:73:94:27:af:ba:9b:
         56:17:78:1c:c1:8a:38:4b:c5:c9:3c:23:98:ad:d1:1b:6a:9a:
         c5:a9:d9:60:85:e7:66:be:73:2f:20:56:a8:82:cd:fa:30:8d:
         df:05:56:ae:28:90:42:7e:c3:c3:52:48:c2:63:0c:87:2a:f8:
         6c:d5:93:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:21:08 2025 by rpki-client