Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b435491c-0a14-385b-8146-95f78129ddf7.roa
File:                     b435491c-0a14-385b-8146-95f78129ddf7.roa (raw, json)
Hash identifier:          OcDKtBEp9ekuXHAnuHzShkWFkVRxhTY6uPAGv2+Scf0=
Subject key identifier:   7C:E0:5A:19:A0:71:D6:5E:FD:CA:02:2A:5F:DC:CD:B1:95:27:5C:8E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C443BDAE7142CEB467EA30
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b435491c-0a14-385b-8146-95f78129ddf7.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        199.232.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:43:bd:ae:71:42:ce:b4:67:ea:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=d0d4e7ed-ba89-49c9-b58f-0171a5e23b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:d2:63:bb:cc:2f:4e:c6:eb:53:b5:f5:ce:
                    d3:41:54:74:e4:f1:f6:7a:74:93:37:1e:60:55:62:
                    aa:5b:48:62:84:18:30:45:53:bd:36:91:5b:d7:25:
                    5b:65:3a:aa:e9:bf:35:e5:b8:72:6e:b9:7b:19:ee:
                    f5:f7:c2:a3:7e:8c:8c:9a:26:43:00:f5:7f:fa:73:
                    0e:22:7a:6f:1f:49:24:41:fe:e9:0f:cf:d0:4a:53:
                    11:c8:8b:1f:a2:d1:ef:f6:d6:24:4b:51:69:50:f6:
                    a6:47:bc:da:c3:22:5b:1d:c2:cf:ff:9d:3f:74:bd:
                    b7:98:15:13:60:4f:8d:7f:ad:1c:fa:61:06:df:d3:
                    13:ab:4d:c1:ae:59:5e:7a:73:8b:96:d2:c8:cc:70:
                    e6:81:e8:37:95:20:76:cd:fb:3b:31:eb:7e:29:05:
                    9a:fa:0e:6c:f9:af:12:fe:f9:4a:e4:61:03:ea:8a:
                    1e:46:5c:8f:38:48:26:a6:05:74:3d:22:d3:0b:ff:
                    37:51:68:90:7b:96:2e:3a:b4:cd:9e:1a:1f:07:e7:
                    da:bd:ad:de:d6:a1:6e:12:75:d6:d0:b0:d7:45:86:
                    6f:4e:97:f0:69:45:e2:50:2d:ad:d2:3a:97:94:23:
                    5f:df:19:ec:c2:ab:dd:51:eb:f9:be:3a:a6:07:6f:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E0:5A:19:A0:71:D6:5E:FD:CA:02:2A:5F:DC:CD:B1:95:27:5C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b435491c-0a14-385b-8146-95f78129ddf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d1:72:57:22:9a:1f:c8:77:60:1c:9f:2e:0f:93:9b:87:07:
         83:93:a0:3b:01:4a:46:fa:48:10:0f:5d:ea:f9:58:bb:0f:b4:
         78:96:28:39:ea:ac:c3:d2:e5:da:1f:8e:96:79:ab:97:2d:3b:
         1b:29:fd:29:88:5a:8c:e8:d8:ca:b4:cb:9c:0d:a8:18:87:b2:
         04:86:0c:79:96:fa:e5:e0:19:7f:f6:72:8a:41:a0:ad:d0:5a:
         9d:dc:f3:44:17:26:84:b5:64:a6:09:0f:23:d4:52:79:be:92:
         18:1d:f1:47:1a:23:e0:ea:e3:cf:49:5b:b6:dd:bf:3a:26:c8:
         41:4b:ba:84:96:43:be:fa:9e:1b:e1:21:39:0b:01:ee:4f:4c:
         e9:b6:b0:e2:e3:f2:11:0e:33:dc:75:01:3b:c3:bf:7c:d9:5a:
         2d:a0:74:b4:d1:8d:55:72:3b:e7:06:b4:72:7b:a6:ca:15:9b:
         cd:95:d0:92:da:43:7b:22:d7:c4:e4:64:01:b7:fd:11:0d:6b:
         e8:3c:98:34:b3:79:5a:bb:73:cf:a8:6a:c7:6e:6a:1f:84:39:
         84:fb:0c:81:c0:99:75:a2:7e:d4:d7:b0:54:d6:df:b4:e2:db:
         4d:a0:8e:37:fd:67:de:bc:95:89:39:75:e4:29:95:c3:c8:bd:
         ae:92:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:58 2025 by rpki-client