Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6f0b4047-bc30-3c91-af85-494789ac65e0.roa
File:                     6f0b4047-bc30-3c91-af85-494789ac65e0.roa (raw, json)
Hash identifier:          gFyWlInh/zZL91wbcT9/EOG8pV4kwkPbxwUCQUjEim0=
Subject key identifier:   D2:CF:57:6A:3B:C6:1E:54:3B:83:ED:77:8D:23:38:79:03:43:C4:A0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C44385DA248223407DF520
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6f0b4047-bc30-3c91-af85-494789ac65e0.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        199.232.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:43:85:da:24:82:23:40:7d:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=544e52c1-55ee-4ad7-b423-b6b94205e77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:cf:b9:d3:06:d2:fa:1c:e4:0a:d5:ae:79:
                    5d:f5:84:26:5d:dd:8c:1c:8b:11:f9:da:ab:48:a6:
                    9d:0f:83:e0:14:96:1a:12:e2:8b:ae:52:16:2a:24:
                    e9:cc:2e:fd:9c:71:d3:47:72:88:3f:9e:5d:cb:47:
                    c7:a9:4f:19:91:ba:16:76:05:f6:eb:d2:ef:9d:20:
                    6a:77:b6:9c:10:d2:8b:73:5d:35:a3:7d:a7:24:8b:
                    70:56:82:05:22:c4:34:ee:17:13:db:dd:23:00:3a:
                    38:4a:18:a4:04:d5:e8:07:2a:bd:17:73:73:be:fd:
                    29:e5:4c:66:2f:86:34:2d:20:23:58:1d:4a:7b:ec:
                    8c:88:f5:fc:36:dc:43:fd:33:16:4c:6d:84:3b:91:
                    cc:ea:83:53:bc:98:c7:b6:54:9e:b4:50:c3:7e:26:
                    ed:33:ec:7e:86:39:9f:3e:79:e0:7c:8d:b5:7c:68:
                    12:be:12:11:60:53:1d:a0:47:99:bd:25:ff:2e:2d:
                    4e:a2:1f:7a:51:a2:68:be:66:e8:50:6d:f4:13:70:
                    4f:ee:05:7a:44:71:4f:60:4a:90:c9:dc:e8:c3:49:
                    4b:4b:71:a3:0b:bb:c1:89:20:82:c6:83:3b:32:04:
                    b6:7e:14:4c:03:75:86:49:4c:09:ba:13:a6:5d:e5:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CF:57:6A:3B:C6:1E:54:3B:83:ED:77:8D:23:38:79:03:43:C4:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6f0b4047-bc30-3c91-af85-494789ac65e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:7f:f1:a7:ba:73:99:63:66:e6:3e:09:a3:bd:95:12:29:
         56:9e:46:d4:dc:b3:43:f9:c3:5f:a6:9f:d5:d6:6d:0b:e7:ea:
         05:af:40:a1:1e:0b:32:5b:fd:1f:59:84:c4:2d:e1:67:8e:eb:
         57:2f:1b:5a:cc:ca:14:98:e1:b9:45:c8:23:a7:f6:67:29:c9:
         c7:ea:2c:81:92:0f:51:08:11:10:e3:47:45:14:ea:61:4e:80:
         c6:a0:79:c6:31:08:8a:04:4e:88:6f:a6:ad:d9:fe:6a:fe:75:
         01:e5:da:fb:d8:6f:7a:ad:b1:29:a9:e7:dc:39:fd:22:95:bb:
         83:2b:d4:60:a4:b7:6c:bc:d6:8c:e7:06:b3:17:98:95:7c:0e:
         af:12:b4:ba:60:1a:f2:01:92:0d:60:67:7e:7e:18:c3:96:87:
         c7:44:54:c4:2e:c0:21:12:66:31:6d:ba:cf:fe:37:7d:71:19:
         e3:15:65:af:4c:4a:55:e8:47:a6:98:02:b5:aa:95:7d:dd:a5:
         ea:a3:a4:9e:8f:f3:52:9b:f7:a1:da:c4:af:fd:3c:96:fe:26:
         d4:fc:8b:2e:3d:a3:ff:8c:3d:dc:25:24:bf:51:a3:ed:e9:8a:
         1a:b6:4c:15:28:ca:ba:07:e1:5c:9c:f8:d1:d1:3e:7e:1f:fb:
         5e:cd:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:16 2025 by rpki-client