Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4d66a097-c182-3efe-ad21-daac745f283e.roa
File:                     4d66a097-c182-3efe-ad21-daac745f283e.roa (raw, json)
Hash identifier:          QIsDZjm2ZemRUo8CWnD6rKBsO9Nc8ussRDIvYgxLE1M=
Subject key identifier:   2F:10:A6:09:3E:98:5B:37:EB:B6:E1:B9:65:0C:AD:FC:18:C9:FE:90
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285848897B273782854ABD6BE3C794
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4d66a097-c182-3efe-ad21-daac745f283e.roa
Signing time:             Tue 14 Jan 2025 02:00:39 +0000
ROA not before:           Tue 14 Jan 2025 02:00:39 +0000
ROA not after:            Mon 14 Apr 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        172.111.114.128/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:89:7b:27:37:82:85:4a:bd:6b:e3:c7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan 14 02:00:39 2025 GMT
            Not After : Apr 14 01:00:39 2025 GMT
        Subject: CN=2d414f99-dd52-4274-b5f8-a0e9a80b61c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f6:76:00:36:82:92:b6:de:19:b2:ba:09:ac:
                    e2:45:7c:75:3b:84:49:d2:80:fe:27:1f:b9:be:de:
                    15:fb:94:5d:af:f4:3e:43:c7:44:c9:c2:87:b0:a2:
                    5f:67:b4:ca:3f:c1:69:3b:70:31:8a:13:6c:eb:96:
                    62:e9:3d:55:08:82:3f:50:d3:0b:a3:4b:4b:50:a5:
                    b6:7c:98:53:6f:7e:d5:cf:02:1a:a2:01:57:fd:3b:
                    36:6f:75:1b:12:0e:79:a7:ae:39:fa:18:3e:c5:a0:
                    d4:b3:2a:44:11:1b:5e:76:34:77:64:21:f1:48:d7:
                    ef:d6:a3:92:3d:95:c0:5b:e6:60:4f:75:49:fa:2f:
                    cd:65:79:fa:0f:35:5e:8f:a4:ab:db:7f:3a:8d:86:
                    94:bb:b4:6e:12:d3:bb:4e:ea:45:7b:7f:a4:ae:62:
                    28:9c:37:45:48:d0:80:aa:a5:28:6e:f8:e4:c9:38:
                    fd:1d:27:05:e4:a4:6e:9e:46:25:50:56:53:18:1f:
                    79:f7:66:50:18:83:83:f2:d7:60:19:f0:1e:77:57:
                    99:56:f4:42:00:38:07:77:95:98:2e:a4:09:ba:ec:
                    69:ac:0f:dd:62:8b:c4:aa:37:67:77:b9:e5:9f:5f:
                    4e:f8:25:1a:03:7b:d1:ac:3b:2e:fe:18:4e:02:aa:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:10:A6:09:3E:98:5B:37:EB:B6:E1:B9:65:0C:AD:FC:18:C9:FE:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4d66a097-c182-3efe-ad21-daac745f283e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.114.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:54:55:3d:e7:c3:60:00:9f:ae:d0:3a:ec:6b:4a:cd:27:a4:
         3d:ef:5c:a3:18:ce:99:bc:f2:d2:52:7d:20:38:70:02:e6:eb:
         45:6c:8e:23:09:96:40:6a:2c:4a:3f:36:da:6e:de:fa:fb:5f:
         25:82:46:1e:41:de:5c:ae:19:33:83:71:91:e8:cb:cd:68:57:
         59:40:56:a4:91:76:b2:e5:40:40:1c:7b:57:d5:ff:59:de:3c:
         da:90:40:49:a5:39:c7:8b:d0:b9:3c:d9:c2:25:c4:fe:94:f5:
         c1:ed:4d:17:e6:ba:48:2a:73:e5:9f:ea:86:97:aa:2e:84:75:
         9f:fd:9f:e6:c1:1e:1e:5a:89:27:64:8d:6d:29:41:5d:8c:7d:
         90:84:35:37:07:89:e8:e5:89:1e:6f:71:3e:17:85:51:3e:30:
         60:b6:14:6f:fc:d7:39:14:c1:a1:35:2a:db:ab:66:52:2f:37:
         d3:8a:b3:bc:03:eb:72:ef:e7:2b:a3:bc:e2:4f:cc:ad:88:20:
         d4:3c:47:ca:d1:1b:f0:4d:fa:16:04:60:55:77:97:42:b4:b2:
         92:a5:0f:1a:15:ea:af:da:e5:9b:01:31:f5:89:86:13:3e:59:
         19:a4:14:0c:74:de:a1:0c:68:09:ed:25:d3:bb:f7:cf:f4:b1:
         6f:d3:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:56:01 2025 by rpki-client