Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3d5d205b-f99a-3218-a3e7-c2919be39ebb.roa
File:                     3d5d205b-f99a-3218-a3e7-c2919be39ebb.roa (raw, json)
Hash identifier:          SrYbfgkQ//wNHspIW4Jta1nFmy4TNJ2F5YUtXeO2/8o=
Subject key identifier:   BB:94:16:41:41:01:4F:7C:B1:07:CC:51:F8:72:3C:B5:A2:B9:EB:7C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858491246F12193FC0DB186093380
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3d5d205b-f99a-3218-a3e7-c2919be39ebb.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.73.224/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:f1:21:93:fc:0d:b1:86:09:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=bf694c39-fa6d-4f00-9c29-e1ca6b8446fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:db:21:68:c8:d9:d4:0b:f4:eb:c2:20:67:
                    6f:ec:cb:48:db:e2:3f:52:29:34:4c:3f:6d:02:2c:
                    e8:48:18:2c:56:cc:79:85:0c:08:ec:b3:9d:05:4b:
                    1d:3a:b9:cf:2d:ee:8b:e6:06:49:a7:52:c0:be:b0:
                    92:c9:8c:27:86:c2:ee:97:76:e5:ca:0a:3a:0d:e7:
                    43:95:2d:a3:e5:f3:e3:3f:04:a7:f3:e4:58:8f:fb:
                    d9:76:00:40:9e:fd:1f:76:69:26:88:27:8b:64:32:
                    61:0b:59:00:71:d4:8a:66:48:cd:85:30:86:ab:3a:
                    c8:7d:41:16:e7:a4:fa:73:9c:58:3b:56:e3:7f:90:
                    9d:60:2a:92:5c:36:45:f9:b2:2e:64:57:1c:31:5d:
                    e2:72:8e:0e:af:1e:eb:99:85:d1:28:91:88:bf:19:
                    51:68:bb:f8:2f:f5:78:fd:c4:e9:aa:04:a7:0a:fc:
                    1b:d3:8d:28:7e:c3:7f:d0:cd:dc:5c:1d:e5:0d:a5:
                    3d:02:ab:e0:da:40:49:1f:05:de:a7:45:2e:21:d0:
                    2f:f6:74:a6:94:3d:e1:66:3d:80:38:a3:9f:87:9a:
                    90:5a:ba:5b:37:9a:86:16:b9:ab:62:28:2b:68:d6:
                    c9:31:5c:ca:12:1f:7f:7f:5a:5c:24:4f:7d:ed:ce:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:94:16:41:41:01:4F:7C:B1:07:CC:51:F8:72:3C:B5:A2:B9:EB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3d5d205b-f99a-3218-a3e7-c2919be39ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.73.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:1a:49:78:58:ca:e6:89:f5:6b:ab:08:1e:bb:8a:7e:34:d2:
         bf:79:87:d3:47:1a:15:39:e2:bb:75:cc:e1:d9:2c:d5:8a:99:
         18:d1:8a:d9:0e:f8:a2:50:14:c1:c9:c8:15:4e:81:2f:84:e4:
         38:f8:e4:6b:0f:38:96:48:3f:29:e9:66:3e:17:94:48:10:db:
         6a:4f:21:49:bb:c6:d4:a0:02:81:f5:18:06:b3:2f:1e:18:50:
         fd:2b:3e:75:62:69:e9:98:5a:c9:08:86:7f:46:b6:d4:f5:4c:
         31:07:d6:b9:2c:7f:e4:04:05:7b:4b:61:58:7f:27:f0:66:66:
         ef:90:6c:14:a7:7c:ab:33:a2:ac:ae:62:16:41:36:96:ff:1d:
         a2:97:d8:16:82:b0:4f:20:3c:05:01:7f:07:24:03:75:e4:37:
         97:a9:1d:32:c1:44:3f:c6:f3:21:0f:ac:08:2c:46:fe:d2:33:
         28:22:22:fa:6f:15:69:bd:fa:e4:91:ef:94:66:a8:ba:41:6e:
         06:a7:e2:43:2b:5f:7a:71:f8:27:a3:41:24:d5:75:2d:1e:df:
         15:77:c0:a5:06:0c:7c:c6:f6:5f:75:c0:9d:39:93:85:5c:41:
         af:64:f3:10:2b:3f:76:10:6b:58:26:19:3e:b9:82:ba:1b:85:
         da:27:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:47:23 2025 by rpki-client