Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc28800f-b959-3908-be46-8f6467cae86f.roa
File:                     cc28800f-b959-3908-be46-8f6467cae86f.roa (raw, json)
Hash identifier:          d0cNxInVM4jghhT1e35toT4id34k6zZpTqP7xLh2syQ=
Subject key identifier:   90:B4:D6:63:1E:68:40:B8:24:EE:B9:57:39:E6:76:38:D1:A9:1A:04
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42FF78DBF9630A66B4140
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc28800f-b959-3908-be46-8f6467cae86f.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.222.128/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2f:f7:8d:bf:96:30:a6:6b:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=ec40ec7b-b0fc-4950-bfd9-dd82c5667cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c3:da:cb:ef:5d:9c:a5:60:3e:a7:82:e4:2f:
                    bd:4a:8d:96:be:4d:30:2a:4a:ac:77:2b:27:7d:c9:
                    95:04:46:01:52:6e:6f:65:54:4e:86:7b:c0:fe:d6:
                    53:bc:66:0b:c0:41:37:67:56:75:6d:36:f5:02:f8:
                    35:b8:cf:f9:08:2d:f4:a2:75:b3:62:d1:eb:1b:76:
                    ff:f5:be:73:48:a3:c6:e3:31:4c:0e:6d:06:17:9e:
                    5f:6a:7b:45:22:15:61:d5:94:1b:d0:f6:29:38:f2:
                    dd:0f:28:dc:dc:60:99:00:c9:f0:b4:37:cc:26:ed:
                    55:cf:dc:29:ad:00:81:f0:e7:ca:f8:c0:05:1a:3d:
                    eb:1d:68:3c:c9:58:da:32:54:e0:12:0f:36:c6:fb:
                    2b:c6:c3:24:15:78:69:9d:20:6d:fe:d9:de:d8:4c:
                    b0:84:03:b6:f6:b5:63:44:7c:f9:88:4e:c2:6a:03:
                    6f:c5:bd:82:90:e9:e9:22:7b:9e:c0:20:5f:f9:18:
                    ef:11:f0:c6:e5:54:dd:98:20:78:69:a9:18:f5:94:
                    95:c4:97:45:c1:91:38:40:35:9e:f9:36:ad:c1:84:
                    a6:53:d5:aa:e0:1d:ed:ee:8f:33:ba:86:c8:00:27:
                    72:f3:30:af:fb:b6:2e:e9:35:14:fe:1f:25:50:5d:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B4:D6:63:1E:68:40:B8:24:EE:B9:57:39:E6:76:38:D1:A9:1A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc28800f-b959-3908-be46-8f6467cae86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.222.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:7a:d6:6e:27:18:86:3e:78:d1:2e:1b:1a:68:d7:26:0c:
         7f:4b:87:c8:2a:a5:ee:49:7a:63:7e:2b:2a:e6:82:ad:59:17:
         db:e8:29:e8:b2:23:bb:ac:3e:46:ed:d2:11:89:86:f7:f3:68:
         19:7c:e1:66:fe:28:99:7d:d3:38:b4:cd:1e:95:3c:54:f9:8c:
         57:1e:1b:1f:d3:a6:7d:77:04:84:eb:39:12:da:45:95:25:85:
         d9:2a:a5:37:c5:3b:ab:f7:06:6f:e9:e2:c4:d4:71:26:18:ec:
         a6:4b:fe:ed:19:69:98:d2:b1:85:17:12:c6:d3:30:3a:df:fb:
         9d:38:85:b9:d9:9e:92:dc:dd:ca:aa:f5:26:6a:e4:b1:cf:ef:
         9e:f7:6a:f6:87:10:07:a1:db:ad:89:6c:dd:2c:16:44:bc:a0:
         86:66:69:e8:8e:db:12:4d:9f:f3:04:4b:cd:a4:44:66:38:a5:
         2b:24:f2:e1:fc:dd:6a:0c:c8:76:0f:46:04:df:f0:b6:b4:8c:
         73:61:ef:7e:82:46:62:c1:b7:70:1f:36:aa:ca:99:19:e7:a9:
         18:37:46:f8:ed:fb:ae:2b:3f:13:e5:03:df:46:a7:0a:7b:91:
         6f:11:5b:e5:c2:9b:b9:2e:01:40:58:0b:81:a4:d3:ed:3c:d1:
         8d:f4:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:55:10 2025 by rpki-client