Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa
File:                     ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa (raw, json)
Hash identifier:          LoH3bxhthj3/UipJGVi5N6SgmUImA+6u6XEe8cFIz/8=
Subject key identifier:   A1:FF:52:0A:5A:D5:30:4B:2E:7F:D5:08:69:39:72:5F:2B:A0:52:72
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F43285849350EB0A6B884BD33E099EE80
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     12430
IP address blocks:        47.61.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:b0:a6:b8:84:bd:33:e0:99:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=d00b8941-4b2e-4952-9933-c4c87dfa2b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:58:c1:60:ea:b3:b6:79:6f:76:aa:8d:3d:
                    fa:50:e5:a4:e1:e3:a2:93:a2:1a:53:22:72:9a:e2:
                    d6:93:a3:9c:74:18:6a:a3:45:70:67:b0:ba:82:82:
                    56:49:af:73:de:cb:47:ed:ef:ec:09:96:d0:52:68:
                    8b:be:e3:5f:4e:15:7d:1f:05:57:86:94:46:2d:ec:
                    20:4a:a3:65:11:63:48:88:88:8f:bf:df:5f:13:b8:
                    71:8f:71:9e:a9:cd:f5:d3:6d:43:18:3a:28:a6:21:
                    40:19:dc:a2:72:22:dc:b9:91:e0:80:e0:62:44:b7:
                    e5:21:74:aa:28:dc:24:55:10:20:c1:bc:82:a6:7f:
                    35:6d:af:93:07:b7:17:6b:2d:a9:9d:1c:cd:f4:9d:
                    d6:da:23:0b:46:a7:aa:98:3c:89:e9:05:a7:f9:71:
                    7c:24:b0:30:e9:ce:05:54:72:1a:57:ce:3c:83:ca:
                    a8:fa:2d:f8:df:aa:7a:2f:61:33:ff:79:09:f7:63:
                    ab:0b:d0:bc:f7:81:07:99:a6:c4:68:eb:fe:49:c4:
                    b7:a1:dc:65:f8:78:4b:36:56:0b:36:fc:46:d0:c5:
                    68:e9:aa:fa:79:23:27:33:61:4d:f5:9e:6e:45:12:
                    41:76:34:57:e5:17:c1:be:37:b0:bf:36:46:58:77:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FF:52:0A:5A:D5:30:4B:2E:7F:D5:08:69:39:72:5F:2B:A0:52:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:19:b5:ed:d7:a9:88:85:55:d9:a1:52:40:b2:f5:19:81:17:
         b4:ba:50:36:98:b7:83:f7:d1:c1:59:c4:04:ae:9c:75:c1:20:
         aa:58:fa:09:36:5e:50:b1:61:cd:a9:47:2d:d4:7c:5f:a3:a5:
         bc:f3:fe:3e:22:d3:a0:dd:53:86:79:18:1a:a8:54:7b:42:7f:
         de:c4:68:56:01:51:63:ac:de:1d:3e:e9:22:2b:42:94:47:25:
         63:ba:75:15:d3:f7:7f:50:eb:ec:41:74:87:2d:5b:72:c1:3e:
         dd:db:38:bb:ce:11:e4:95:d5:95:03:84:63:cf:d1:a5:e3:14:
         8d:c1:53:8f:20:3f:f2:05:38:1d:02:22:3c:75:c3:69:b3:55:
         ab:4e:08:91:c1:b8:32:f6:c4:be:bc:ca:eb:ba:af:88:45:de:
         90:b1:c0:c0:e3:30:06:7d:60:c8:fc:54:56:2d:a7:a2:41:dd:
         d0:a0:b3:19:a1:7a:6d:54:04:aa:f2:ef:12:59:b4:9d:a8:c9:
         ab:4d:87:bb:a2:67:25:ae:82:13:26:1a:52:bd:ea:03:e3:76:
         94:d8:94:f2:d7:78:b2:17:26:c0:aa:20:d9:3d:bb:f4:31:c3:
         e5:23:11:4c:ca:2b:55:02:10:80:b2:1a:9d:ac:22:1c:17:7d:
         1c:f9:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:33 2025 by rpki-client