Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/ef928c1c-6010-3489-9b76-56b4466cf6e7.roa
File:                     ef928c1c-6010-3489-9b76-56b4466cf6e7.roa (raw, json)
Hash identifier:          KZ4LS9NVsSRQFnpMSvWU0YYaLU24a4xKQRkkQk3EERA=
Subject key identifier:   FB:D8:0E:53:C3:E1:F9:98:3B:ED:6E:09:3C:53:0E:29:0B:BC:FC:9C
Certificate issuer:       /CN=e149c4e5-ddb0-4d5b-a074-8d72fceaf83a
Certificate serial:       010D0C9F432858490F7BFDB1EDA4041FEDA98980
Authority key identifier: 2B:2E:80:20:42:1F:A9:57:48:62:1D:95:DA:F8:C1:FE:E2:38:21:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/ef928c1c-6010-3489-9b76-56b4466cf6e7.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     393906
IP address blocks:        172.81.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:fd:b1:ed:a4:04:1f:ed:a9:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e149c4e5-ddb0-4d5b-a074-8d72fceaf83a
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=2fa1a721-5e05-4e95-88b5-e2d5dd409cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:3e:81:fa:da:1b:d1:5d:9a:99:59:05:98:
                    b3:44:a5:d1:ad:6b:2a:21:1a:d3:73:60:3e:a6:5d:
                    41:c9:1b:e5:eb:13:8b:00:1a:83:fe:c1:5c:9c:3e:
                    ee:29:42:c8:69:a9:bd:bc:e8:41:aa:66:fe:c0:88:
                    cc:4c:26:3d:5d:0d:b0:7b:d4:f7:1b:ac:a4:2d:1a:
                    fc:68:62:f0:6b:21:c4:17:dd:9e:67:47:50:40:dd:
                    5b:5c:a1:d0:33:da:87:9a:e4:22:3d:a0:49:6c:ae:
                    72:d2:d8:94:bb:9b:df:b7:8c:4b:39:dd:80:e2:32:
                    19:06:5b:e8:b0:d1:5a:02:b7:e1:62:da:f9:b2:65:
                    0d:5d:ac:05:ff:a5:bc:87:e5:dc:47:60:d5:5f:fa:
                    8d:01:4e:65:16:cb:e7:64:f7:cf:21:bc:ab:12:84:
                    02:57:45:fb:14:bb:11:85:11:21:74:9b:6e:59:5f:
                    cd:a9:fa:84:38:c9:6f:45:45:2c:f1:9c:94:bc:84:
                    37:01:13:15:49:e3:20:b5:4d:0d:18:4c:72:67:d6:
                    71:08:16:28:ba:64:fe:dc:ea:05:ae:27:ad:93:af:
                    bf:55:9d:fb:34:fd:75:c0:cd:33:35:76:dc:ac:d0:
                    bc:bd:46:4a:ea:50:eb:1d:bb:11:82:0d:8e:f2:d4:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:0E:53:C3:E1:F9:98:3B:ED:6E:09:3C:53:0E:29:0B:BC:FC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/ef928c1c-6010-3489-9b76-56b4466cf6e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.crl

            X509v3 Authority Key Identifier:
                keyid:2B:2E:80:20:42:1F:A9:57:48:62:1D:95:DA:F8:C1:FE:E2:38:21:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:54:f1:45:74:5a:75:2c:4d:97:42:ee:37:3f:12:f9:61:db:
         2d:cd:d5:5f:3f:fe:f4:71:25:43:9c:3d:2b:f5:7d:59:f8:4b:
         dd:2e:5c:a9:c8:a3:e0:85:b0:83:60:65:78:18:6a:e8:c8:f5:
         5f:7a:fc:11:2e:3f:33:26:46:10:f3:cf:e9:6b:de:36:a0:0e:
         ef:85:19:76:16:a7:51:8e:43:90:2b:30:e5:26:6b:e1:ef:9c:
         4e:ac:17:97:a5:16:89:c0:18:9e:24:4f:3c:43:e6:9c:43:c5:
         7c:d4:a4:f8:44:2d:50:36:67:b9:a1:20:69:16:f2:1f:30:e3:
         fb:e3:18:3c:52:b4:07:4c:58:31:ba:a2:56:77:72:19:f9:b3:
         29:35:5d:b7:ee:46:49:10:9f:a3:09:8e:8a:33:1b:74:ad:f0:
         9a:8e:ae:a1:d5:7c:00:87:0e:05:99:ad:e4:d1:d3:c8:a0:5f:
         d2:18:03:4c:5b:c2:5b:dd:4c:3e:8c:2f:c3:7a:54:4f:2a:07:
         c8:8a:dc:b8:01:00:8e:e8:ab:b0:45:42:04:f9:df:4a:aa:84:
         2b:f0:19:ec:80:ab:60:67:38:13:ef:e3:32:d5:fa:71:25:51:
         3c:c1:20:56:8d:5a:57:78:18:19:89:27:2f:cd:06:96:f8:49:
         2c:bd:75:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:45 2025 by rpki-client