Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
File:                     ec8ade42-f384-3872-bf6b-790c544fbeca.roa (raw, json)
Hash identifier:          Bzx412n8NuUeD8nf6FXZQ4kLDjNYBw82opBZg7wTy5g=
Subject key identifier:   CE:D7:DD:92:70:0C:BE:50:C5:07:BE:C5:04:5E:80:67:C2:D7:3F:96
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F432858491246B6359F6BE2E917F3C480
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     14579
IP address blocks:        167.80.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b6:35:9f:6b:e2:e9:17:f3:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=8d8adf36-bb22-4750-9a28-151172b5ec72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:7c:40:c5:c6:20:eb:e2:13:e2:c1:2d:43:
                    6c:ad:c7:44:62:96:b3:79:71:06:d0:0f:5e:e7:66:
                    42:cf:1c:a2:a5:af:7e:5c:86:74:f7:e4:47:c6:35:
                    1a:1d:f7:c9:28:2e:4a:2b:a8:a1:11:61:74:f1:b6:
                    be:85:83:fb:d8:3d:21:24:0f:13:f5:b8:55:70:b4:
                    6a:12:a1:18:4a:7c:8e:7b:43:ea:48:95:9e:32:72:
                    5d:67:8a:7e:51:d6:87:6d:95:91:6e:9c:08:0f:8d:
                    37:75:f3:4b:c1:23:98:bb:71:84:98:96:66:db:94:
                    49:98:38:1f:12:5f:a8:52:17:13:5a:5a:db:61:1f:
                    b3:f6:00:cc:6b:53:64:aa:d3:ea:66:b1:a5:3e:df:
                    54:ed:d4:9c:db:dc:5e:10:ca:27:0f:c4:ae:4a:fa:
                    c7:ae:84:33:c9:5a:53:2c:7a:37:83:a3:95:e4:e4:
                    22:dd:db:0c:d6:df:37:43:fd:2e:03:74:f1:08:a8:
                    66:0c:70:41:fa:e2:84:bb:75:e0:04:c0:7a:12:4a:
                    ec:fd:c8:44:72:a4:b0:f9:8b:d4:11:55:04:46:a7:
                    ef:2c:56:2a:4d:10:47:20:1b:3e:5b:3c:cd:81:96:
                    c0:d3:93:26:8d:64:8e:c6:25:fd:41:c4:80:dd:71:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:DD:92:70:0C:BE:50:C5:07:BE:C5:04:5E:80:67:C2:D7:3F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:73:37:8d:69:b0:93:e6:98:79:ec:4a:dc:1c:00:02:1d:f8:
         54:36:5a:0c:93:9e:ae:94:f1:fe:89:38:1c:82:7f:d6:0a:94:
         5c:47:bc:7d:25:b1:b9:a3:87:cb:4b:58:da:b0:5f:10:43:bc:
         83:fb:f0:61:7b:ec:ef:cc:c3:15:48:70:7c:28:be:43:8d:f8:
         a8:ca:a2:be:95:8e:9a:74:15:8b:b0:85:45:ed:f8:42:b2:be:
         d5:21:17:4a:0d:e5:c8:74:44:02:9f:d3:7e:5c:80:fe:41:1c:
         77:ce:5e:9b:42:a0:c0:83:e9:91:15:7a:34:8e:49:5c:fe:c5:
         6d:17:84:c8:5e:a8:7e:c4:e2:a3:2b:9e:2c:7e:00:93:b4:13:
         7b:e2:ad:83:34:70:b6:25:97:8a:66:43:d2:e6:c6:ab:b8:da:
         d6:bc:04:33:3c:dd:eb:fb:2f:b2:e5:77:1e:97:0b:d1:d9:93:
         c3:54:0b:46:60:1c:3a:d9:9d:31:99:0d:3e:7e:2b:4d:bc:23:
         c0:ab:b6:1f:06:34:51:34:ed:3d:3e:76:7b:da:a1:70:47:c3:
         d6:aa:71:f1:31:4e:80:75:7c:89:38:fc:68:0c:59:76:90:d6:
         21:7b:06:9b:be:27:da:4e:e5:c4:7b:9f:d3:19:0a:00:59:ee:
         1f:94:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:33:53 2025 by rpki-client