Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/c112586d-f411-30a6-89bd-6a1bd803789b.roa
File:                     c112586d-f411-30a6-89bd-6a1bd803789b.roa (raw, json)
Hash identifier:          0gaJYkYUBfg6FHmv+0b/C+JzxmacU6LyNeYF88qFBrc=
Subject key identifier:   A2:41:E1:67:11:48:23:F8:DA:A6:16:3A:B9:B3:16:9A:B5:81:D9:59
Certificate issuer:       /CN=b5280624-435b-4568-8d14-dbdda87b17c2
Certificate serial:       010D0C9F432858491ED6EA2C744B33EFEE5C90C0
Authority key identifier: 40:2C:F4:EC:E7:9E:A5:3C:3C:FC:A5:1F:D7:C0:AD:A8:08:90:DA:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/c112586d-f411-30a6-89bd-6a1bd803789b.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     396441
IP address blocks:        192.101.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:ea:2c:74:4b:33:ef:ee:5c:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5280624-435b-4568-8d14-dbdda87b17c2
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=44142ee5-d0fc-4ee0-9415-e471428483fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:11:5a:a8:be:56:e2:82:ea:ec:36:02:30:
                    a4:b1:96:8a:fc:07:70:39:eb:df:27:a9:c8:9b:b0:
                    c3:92:ba:c5:ca:76:9e:a6:07:b6:7b:1a:61:a3:68:
                    98:16:5b:7e:4e:cf:da:6a:15:0d:a4:2d:83:d9:da:
                    32:e8:cb:bb:62:2d:7d:cd:1d:bb:30:da:90:2b:13:
                    d9:dc:94:84:4c:0a:12:a6:b3:44:17:4f:4d:8d:59:
                    c2:db:57:ee:73:af:5e:27:16:32:80:0a:06:cd:56:
                    e5:a0:4b:d1:ef:24:02:e9:2a:ca:2d:91:f4:4e:0d:
                    08:77:06:a3:23:8e:cf:76:e8:13:48:09:4e:e3:42:
                    41:fa:f6:ed:0f:c7:bf:0a:20:ce:ed:a8:bf:31:e5:
                    ce:93:7b:36:4e:85:86:1b:93:8d:f7:3c:9c:98:18:
                    29:80:c4:9d:a7:ac:46:c0:4e:ef:c2:9e:d9:94:c4:
                    e3:0f:fa:2c:a5:af:10:0b:a8:9d:33:b9:3d:a9:dd:
                    3d:fe:07:12:cd:b9:0e:2f:8d:35:fe:1e:2a:ad:66:
                    55:8d:88:00:e9:ae:d8:a1:ce:a7:c5:50:ae:99:f3:
                    1f:49:37:a3:db:01:8e:38:2b:ae:97:35:b4:b6:f7:
                    27:82:59:04:7f:52:d5:2c:4e:78:a8:c3:6c:20:e3:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:41:E1:67:11:48:23:F8:DA:A6:16:3A:B9:B3:16:9A:B5:81:D9:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/c112586d-f411-30a6-89bd-6a1bd803789b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/b5280624-435b-4568-8d14-dbdda87b17c2.crl

            X509v3 Authority Key Identifier:
                keyid:40:2C:F4:EC:E7:9E:A5:3C:3C:FC:A5:1F:D7:C0:AD:A8:08:90:DA:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:9b:c9:36:59:5d:82:65:20:50:ce:70:36:e8:67:1f:6f:
         a7:c2:73:56:58:ea:b4:e3:17:c3:f8:41:c0:e0:89:a0:ff:2e:
         13:d3:04:aa:3c:55:ea:69:c0:bc:57:64:6d:f2:36:8f:f2:d1:
         09:33:fc:99:e0:79:58:9a:6c:32:44:78:7c:9b:ec:bc:21:2c:
         27:41:75:e1:d2:da:79:7f:9f:1e:79:2b:e8:96:f4:ab:a9:ef:
         e8:0b:2b:1e:ba:26:d6:00:fb:ed:b0:84:52:5e:d2:2c:ba:c2:
         5b:ee:4c:1a:7f:d7:ed:1a:9f:0a:5d:e9:07:b2:8e:dc:8f:12:
         cf:c8:cd:70:c5:51:e9:9b:b0:e5:b2:ab:74:68:0a:d1:47:d9:
         1b:b4:d6:e7:1a:a8:55:8f:59:d5:7e:04:f7:1e:5c:be:0c:a2:
         1b:0e:10:ee:ac:ce:54:0b:a9:e6:65:fc:41:e8:bd:e9:14:65:
         b0:de:51:8e:5f:3f:f7:2d:50:b5:bd:38:ac:67:b3:22:c3:7f:
         1a:e7:80:c1:2f:2a:e1:2a:46:2e:d6:b3:fc:0c:d3:e4:13:78:
         4b:15:aa:73:ba:e7:fb:b7:00:d3:f5:39:10:2b:dc:78:a2:59:
         55:fa:a3:a0:79:27:3a:72:7a:4c:23:4a:b3:13:8f:61:3d:ee:
         8b:d6:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:02 2025 by rpki-client