Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa
File:                     fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa (raw, json)
Hash identifier:          97cqV0PpCktpiIHAdh4/7FjPpKSlAp+Oju0HoJUBex0=
Subject key identifier:   BB:FD:03:D4:44:C3:C6:4A:08:6F:FD:BD:03:92:8E:5E:5E:EE:FE:4E
Certificate issuer:       /CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
Certificate serial:       010D0C9F43285848C6E635E066603D1C360ED800
Authority key identifier: D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     14973
IP address blocks:        198.235.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:35:e0:66:60:3d:1c:36:0e:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=4afb8b7c-c929-4645-bda1-85579fbd7d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:54:22:18:03:49:32:21:ff:92:d2:b0:be:
                    70:13:6c:f6:8b:a3:2e:a8:bf:fb:73:b7:bf:b8:e8:
                    d6:23:a2:21:c8:87:ad:28:d1:30:ec:cd:d2:3d:a2:
                    15:c0:5d:02:4e:9b:e5:ad:e2:a5:0d:b8:7d:05:27:
                    6d:df:85:32:6e:1c:2d:70:cd:05:9a:9f:5f:c0:a4:
                    a2:18:c4:78:54:81:68:18:be:23:44:59:d6:97:d4:
                    9a:76:a2:16:65:24:d8:d6:86:1f:7d:7e:fe:bb:3c:
                    f7:37:db:8f:17:0b:a2:26:d2:0f:0c:82:8c:25:33:
                    73:e5:e6:59:dd:7a:7e:f0:4c:cb:66:1b:f1:09:d8:
                    95:0a:eb:7c:f3:96:d7:ca:85:b3:50:d6:d4:4e:b3:
                    a7:bb:38:23:8c:1b:45:ea:82:cb:3c:c8:a8:2c:7d:
                    94:be:f9:4d:b3:9e:4c:7e:b4:38:00:02:5c:56:79:
                    28:f2:1d:85:53:3a:66:aa:e1:c1:ad:5b:a9:c9:07:
                    94:dc:a6:c0:91:13:2a:cb:44:ef:2a:10:8e:ab:4e:
                    7c:d1:b1:7d:33:e6:c3:e0:5f:d7:cf:6d:c8:d9:e1:
                    5b:80:8f:fa:23:d6:53:84:b0:54:56:b0:51:ec:68:
                    55:98:11:f0:74:98:58:bd:7b:59:4a:d4:f5:d9:7b:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FD:03:D4:44:C3:C6:4A:08:6F:FD:BD:03:92:8E:5E:5E:EE:FE:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b2:93:b7:68:60:9f:e6:d2:e0:4e:d6:5b:07:95:7e:7b:f4:
         d0:0a:c9:1c:80:e3:60:11:01:9c:18:9c:df:ac:13:e5:3a:a0:
         9e:86:2a:6f:3f:80:5f:b5:db:a9:ca:17:28:39:b6:98:4d:66:
         58:21:c3:ac:82:51:84:6a:55:7a:8c:0e:c8:d0:21:71:14:8c:
         8f:9c:64:23:31:6d:3c:49:b8:6c:28:f5:e1:de:1c:99:46:6e:
         19:70:c2:40:69:69:ea:00:06:09:c1:08:ef:a5:9f:75:23:6e:
         ea:db:76:83:a7:aa:92:a8:83:93:b0:e0:25:09:00:7b:74:ae:
         dd:58:5f:e6:b9:c7:3a:37:90:83:24:19:1e:3c:ce:41:74:9f:
         0c:b7:f6:44:e1:41:de:bf:b9:6f:fe:f3:98:78:e1:c5:a3:8d:
         d6:e6:60:a4:c6:52:6a:be:59:b9:2f:60:61:b5:28:99:17:bb:
         9a:c5:ab:e4:b1:17:25:ab:25:cf:de:df:58:34:56:4f:cd:a2:
         3b:1e:4f:e6:ef:bb:2b:8a:ae:9c:0e:bb:eb:75:40:a2:8b:7b:
         de:3a:dc:1e:db:5a:2b:74:f1:38:ae:f6:cf:35:cd:5b:8a:0f:
         71:04:7d:f0:c2:73:1d:c8:d9:c1:60:c1:a1:71:8a:8b:2b:05:
         f0:e1:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:46 2025 by rpki-client