Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/009e0884-619d-33b8-901b-1e0ce3ed9482.roa
File:                     009e0884-619d-33b8-901b-1e0ce3ed9482.roa (raw, json)
Hash identifier:          8pup9C4bgOiioLsSiS5oLn7fWD73RtFfBmi6tqqmGrI=
Subject key identifier:   B4:4B:B2:F5:46:2E:EA:54:D5:A0:E2:8A:7B:4D:29:A7:C7:6E:69:6F
Certificate issuer:       /CN=3740a9a2-f496-4926-bd38-439cb899e94a
Certificate serial:       010D0C9F43285848FD56C3316B97B8970FCA7100
Authority key identifier: 54:50:57:8F:36:31:88:88:AA:90:BE:56:02:EC:8E:D7:16:DA:45:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/009e0884-619d-33b8-901b-1e0ce3ed9482.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     915
IP address blocks:        192.150.214.0/23 maxlen: 23
                          2602:fb5e::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c3:31:6b:97:b8:97:0f:ca:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3740a9a2-f496-4926-bd38-439cb899e94a
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=b6106e58-56ea-4c93-a097-b64c12c93680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:37:97:a4:ce:f3:71:67:99:d2:12:c1:71:
                    28:85:01:d5:5b:59:bb:20:59:29:22:01:16:56:98:
                    0b:01:c2:8e:12:09:73:e3:c5:71:29:cb:e1:24:c5:
                    85:2e:e7:8e:34:79:cb:49:ea:ce:c1:71:6d:8b:25:
                    25:42:95:1a:c4:fc:35:d5:82:f8:bb:4d:b1:3e:a2:
                    27:7e:a2:8b:aa:6e:50:32:43:f3:30:7e:ed:bf:93:
                    2e:42:ab:11:00:45:aa:64:e6:be:01:7d:be:1a:ce:
                    ef:28:85:6f:04:cd:17:7f:84:17:ac:a1:25:3a:f0:
                    10:16:de:ce:97:36:40:af:28:26:c8:1c:15:45:b5:
                    fd:cc:bb:99:aa:a6:2c:c2:d4:85:c7:77:b5:14:84:
                    97:10:2a:38:13:ca:ac:50:73:a2:13:dc:e3:ee:e4:
                    02:fd:61:43:59:e2:07:df:10:00:37:eb:ea:4a:0e:
                    1c:4b:ee:44:76:3a:bc:f5:66:0b:76:ec:b4:48:63:
                    f1:27:28:ac:1f:d5:ce:7a:26:0e:f2:f5:ed:7b:ba:
                    66:be:80:6b:9b:0c:b9:c1:42:48:cf:69:65:4d:e8:
                    1f:9d:60:5b:d3:20:ae:a6:cb:83:cb:4f:10:20:62:
                    01:15:b2:ac:be:63:d6:99:1f:91:21:11:80:73:80:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4B:B2:F5:46:2E:EA:54:D5:A0:E2:8A:7B:4D:29:A7:C7:6E:69:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/009e0884-619d-33b8-901b-1e0ce3ed9482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a/3740a9a2-f496-4926-bd38-439cb899e94a.crl

            X509v3 Authority Key Identifier:
                keyid:54:50:57:8F:36:31:88:88:AA:90:BE:56:02:EC:8E:D7:16:DA:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3740a9a2-f496-4926-bd38-439cb899e94a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.150.214.0/23
                IPv6:
                  2602:fb5e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ce:bc:4c:5b:6b:05:c2:61:33:c4:8d:0a:be:33:98:fe:46:
         6a:5d:0d:fb:f0:f7:29:2d:4b:57:b0:9e:5f:3f:4e:14:a6:3e:
         32:40:51:e5:01:46:90:5b:ca:bd:f5:0e:f4:c6:e2:42:de:c6:
         63:00:1b:90:94:9c:2c:af:c6:17:4a:8d:33:6f:92:43:bc:fd:
         3e:11:2f:89:a6:45:69:76:c5:94:92:09:92:92:d3:04:ce:fb:
         57:39:0a:69:79:a4:ef:7b:d0:c7:5e:14:35:34:04:54:19:06:
         53:df:57:34:4c:20:a3:c0:a5:8d:38:fb:06:bb:51:0f:0e:b3:
         85:f3:d8:3a:92:e6:2a:03:2c:f2:16:80:cc:15:eb:c4:6e:a6:
         fb:ec:0c:23:e8:a1:6b:c7:32:31:6f:20:f6:5f:20:ba:b0:9b:
         f3:fc:e7:b5:fc:1f:58:01:2d:86:7b:a5:d3:27:4a:15:97:df:
         1e:6c:d1:a1:e9:f0:5d:a5:1a:63:53:70:28:e6:99:3a:4e:28:
         a4:61:d1:44:bc:6f:bb:b4:ab:25:df:49:f1:80:f8:1c:66:4f:
         cd:e4:1b:55:d2:fb:c9:ef:4d:89:b6:47:47:c9:89:45:95:fd:
         61:d6:8d:d9:3e:66:94:d0:96:4d:3e:f8:76:e2:68:da:6b:3d:
         ee:4a:2d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:37 2025 by rpki-client