Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94f3b131-f02e-3b67-95a8-7d21c7333ae4.roa
File:                     94f3b131-f02e-3b67-95a8-7d21c7333ae4.roa (raw, json)
Hash identifier:          pU9JqCRRo5ABBf483SDrK8Ku5idMXMUv1wqGr+rWoEA=
Subject key identifier:   0F:B4:32:07:75:52:E4:13:53:2B:E8:E9:72:6F:67:21:E1:D6:DF:B3
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C4417F16F7566C0A2D1700
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94f3b131-f02e-3b67-95a8-7d21c7333ae4.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        199.232.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:41:7f:16:f7:56:6c:0a:2d:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=a4e2ca4d-6ab3-4ff1-a090-8e499a30e3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:e6:a9:d1:fe:37:19:45:4d:dd:c8:dc:1d:
                    1d:be:4f:9c:0a:89:f0:b9:91:25:ac:9e:62:c6:d9:
                    8d:f1:55:db:de:1d:c3:49:87:74:e6:6a:11:cb:39:
                    d3:20:1d:e4:d9:8a:09:27:d7:d1:a1:0c:fe:6f:62:
                    97:4b:9a:44:59:76:d3:05:60:3e:21:88:30:ea:c5:
                    55:83:9d:a3:c3:e6:6f:45:58:4f:b4:bb:9b:6a:06:
                    42:a4:95:a2:7b:fe:48:c4:39:cb:7b:4b:e9:a8:22:
                    a2:38:6f:82:b4:a3:a5:d5:6b:48:56:e7:5b:0f:50:
                    a3:2f:ee:80:1a:42:36:11:ac:44:f1:e1:b8:2c:33:
                    19:02:0f:66:76:ba:9d:29:b7:fe:bb:34:42:c1:76:
                    30:ac:37:4b:bc:ef:ac:2f:f3:48:de:56:9e:aa:6e:
                    eb:64:a1:43:89:10:64:18:ff:68:64:c3:d1:9d:16:
                    04:21:f8:93:61:11:c7:0b:96:85:cc:37:e3:88:9c:
                    c5:8f:50:cf:0a:c0:f2:06:74:68:1a:32:cf:42:a2:
                    46:5e:a2:41:af:82:73:12:07:7c:de:da:41:f1:f3:
                    6a:34:da:f1:f4:2c:61:b3:6a:72:31:d5:35:42:c7:
                    51:ba:9c:3a:9a:b9:f5:71:e9:a9:9b:d7:b4:c8:7e:
                    fd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:32:07:75:52:E4:13:53:2B:E8:E9:72:6F:67:21:E1:D6:DF:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94f3b131-f02e-3b67-95a8-7d21c7333ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ac:7e:88:a7:ca:2c:90:b2:87:c5:79:5c:22:a1:68:81:0b:
         15:be:df:b7:0b:00:c9:92:94:86:ba:a8:19:0a:bf:5d:de:b9:
         df:20:bf:e4:32:e7:63:a7:87:7b:8b:bd:f6:9e:f8:35:44:fb:
         38:58:c6:46:22:86:57:dc:e6:c3:c8:74:0a:70:df:d3:62:ae:
         11:a4:d0:54:c0:c2:19:69:5f:f5:30:90:b0:c0:80:97:f7:45:
         b2:9c:2c:03:24:11:70:f2:4a:5c:5e:4a:e5:d4:75:b1:ca:7e:
         42:83:a6:de:00:bb:e4:14:98:fb:6c:b5:b6:94:ac:87:58:38:
         92:37:ef:23:2c:df:0b:8c:a1:a2:4c:05:a3:3d:35:04:59:cc:
         72:04:59:5d:9d:cb:8b:65:6b:9b:ef:ed:a1:9a:c9:b2:57:a2:
         90:cd:6d:8f:39:fa:1a:80:c7:a1:9d:32:54:a9:49:9f:20:2a:
         a1:ac:43:b4:08:0f:e4:6d:dd:3a:03:e5:e8:19:e2:15:71:99:
         f0:e8:1d:0e:b8:af:b2:b8:33:7e:49:a0:fd:3c:c0:e9:48:f3:
         65:cc:d4:72:47:df:43:fc:80:49:53:d0:cd:b9:e4:d0:9b:82:
         ef:b2:e1:b4:11:7f:dc:22:20:41:28:59:8a:38:38:b6:79:c1:
         a0:0d:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:54:25 2025 by rpki-client