Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/f3c49877-a26e-308f-ab33-dff5ad292686.roa
File:                     f3c49877-a26e-308f-ab33-dff5ad292686.roa (raw, json)
Hash identifier:          GEwur9fJBbKIlAc1YQQzzUGoTt5zg0bdvCVRFu3U9MY=
Subject key identifier:   E9:95:44:4B:8A:56:27:BB:C8:81:B6:B9:26:E8:DF:07:A9:61:87:DC
Certificate issuer:       /CN=39901aa6-e826-47dc-9f16-612ab05bfcfd
Certificate serial:       010D0C9F43285848E59BB50E921B69E8134BBF80
Authority key identifier: 56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/f3c49877-a26e-308f-ab33-dff5ad292686.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     54539
IP address blocks:        199.182.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:b5:0e:92:1b:69:e8:13:4b:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39901aa6-e826-47dc-9f16-612ab05bfcfd
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=7bad06d1-3e23-41ca-adbc-2636fc5e05ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:80:c4:e1:f2:7d:56:48:36:f6:03:32:8a:
                    84:d2:d6:34:5b:35:43:9e:c5:ca:fd:41:97:f1:c0:
                    fe:06:e4:25:76:fb:85:fc:8d:a2:d7:28:4d:21:d5:
                    78:62:0a:cf:37:7a:83:e7:2a:85:29:20:b5:6b:60:
                    09:58:50:4b:5d:02:87:8f:65:ea:97:0f:3b:aa:29:
                    72:9e:53:52:3c:cb:c6:d7:b8:15:ec:e3:a6:f3:70:
                    ab:0f:9b:94:c7:73:25:66:ba:97:f3:53:a5:ca:e7:
                    13:13:5a:80:12:02:59:2e:e7:f6:59:bc:5e:b3:2d:
                    d1:69:c7:55:f6:81:85:ed:63:3e:9e:08:01:0f:ce:
                    bd:96:8b:7a:d2:82:79:93:f1:64:20:e3:ac:27:ca:
                    0a:28:4d:52:30:c6:f5:56:fc:d5:e2:4b:ed:0a:07:
                    99:c0:b6:ae:59:8e:c5:b7:e5:79:66:33:fd:3d:92:
                    63:4a:f5:f2:0e:a6:29:ea:fc:1f:40:02:72:22:48:
                    b5:5f:f9:c5:67:4b:cb:4e:e6:e9:bb:e2:c0:a5:a0:
                    b9:16:c5:72:6a:82:aa:af:d3:b9:1c:f4:e9:5b:2d:
                    12:21:a5:b6:dc:aa:5c:d8:c5:f7:07:f0:96:ad:2c:
                    12:c4:b1:ea:c5:d8:4c:9a:04:3b:3f:22:7c:8c:5b:
                    7f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:95:44:4B:8A:56:27:BB:C8:81:B6:B9:26:E8:DF:07:A9:61:87:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/f3c49877-a26e-308f-ab33-dff5ad292686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.crl

            X509v3 Authority Key Identifier:
                keyid:56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:a6:59:c0:93:94:46:7c:89:cb:ad:ed:07:86:33:33:d3:
         03:c0:14:ac:12:ab:d5:a2:33:1c:87:c9:bd:e1:90:c9:d6:25:
         71:6c:67:1e:5a:1e:a7:e8:5e:88:82:79:98:b4:06:64:b7:51:
         d8:3e:55:8a:49:34:97:2f:2b:49:8e:48:10:5a:6a:b0:a6:13:
         90:d2:67:47:94:0b:b2:b7:a2:f9:55:f9:89:c5:9a:0a:03:68:
         7d:25:b7:b8:01:85:2a:44:b6:8c:32:09:e6:74:a5:c6:27:59:
         50:62:72:02:37:bd:71:96:42:23:69:af:db:6b:ea:32:62:3b:
         1e:b1:f1:62:ea:69:09:dd:63:7b:f4:be:3c:8d:c8:4e:ea:17:
         76:c6:ae:1a:9e:7c:2a:40:d5:87:aa:6e:bd:0d:96:57:82:54:
         d8:a0:54:a8:d0:01:cb:dd:bb:16:f4:09:5e:e8:24:81:ee:7f:
         7d:98:60:d6:ac:21:60:59:e1:13:f4:63:b4:34:d4:b6:f6:4a:
         b3:6e:64:19:1c:1f:07:42:48:8f:8b:94:04:b8:82:93:19:52:
         6d:24:bf:96:37:05:e7:21:ff:ce:9f:f7:5e:a0:0f:b9:4d:c2:
         00:af:5c:b3:c8:71:24:b1:13:67:6b:b2:a9:78:a7:2f:75:cd:
         5b:e6:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:28 2025 by rpki-client