Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa
File:                     31a42a29-1dfe-34a8-ae78-fb73af442044.roa (raw, json)
Hash identifier:          ENXZLYubHgEFROKRl+lQWiwyLr3JK5Z0LI7UisE5Puw=
Subject key identifier:   17:33:95:F4:8D:4B:C7:F8:12:11:B9:27:AD:B8:F9:7B:22:41:96:C1
Certificate issuer:       /CN=4b439f01-1270-40c3-9c4f-92fda6473e3d
Certificate serial:       010D0C9F432858493243DDF3EE45D8721C085780
Authority key identifier: AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     399347
IP address blocks:        130.250.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:dd:f3:ee:45:d8:72:1c:08:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b439f01-1270-40c3-9c4f-92fda6473e3d
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=c7fb63bf-d022-473e-a26f-500307f07241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:99:39:f0:d1:0c:2b:1e:3f:70:cc:c9:9f:
                    53:e3:36:f9:3b:0b:5b:d7:f5:40:fa:c6:f2:58:49:
                    a2:70:7a:41:30:93:90:d2:0f:e7:46:5f:70:69:b0:
                    8e:93:32:c8:74:18:d4:e2:2c:7c:e4:3c:8b:88:88:
                    a2:d7:d2:4a:bb:fb:92:b3:01:7b:bc:83:fa:ec:89:
                    d8:65:3f:73:d7:94:a5:ec:03:84:e6:e9:f1:e2:5b:
                    28:9f:98:e2:1d:f7:22:d5:2a:67:aa:bd:e7:08:ee:
                    ed:94:8c:50:40:4e:46:20:5e:d9:ee:84:f1:62:f4:
                    fc:a1:b9:61:f5:b9:58:1a:37:43:5f:64:19:8b:46:
                    37:d3:2b:5a:bd:3f:e6:ee:15:02:e5:a6:c9:e5:5b:
                    e0:34:7d:10:60:a5:a4:25:b7:0c:66:48:f5:f2:97:
                    b7:a3:48:02:e9:0a:9e:84:53:38:4e:e0:39:0d:2d:
                    20:5b:02:03:ae:e5:be:e9:09:c6:d7:b2:10:6f:df:
                    1f:1d:a6:fb:3d:dd:9f:00:d5:93:22:b2:1f:74:0d:
                    46:c4:8e:c7:02:bc:02:19:60:71:37:78:8a:29:7c:
                    7d:6a:5c:7a:12:d4:cc:cd:53:23:1d:ce:cc:7f:e1:
                    36:0d:76:1f:b5:e5:ff:79:86:e2:22:89:83:00:cf:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:95:F4:8D:4B:C7:F8:12:11:B9:27:AD:B8:F9:7B:22:41:96:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:de:d9:49:b1:a7:8d:f1:72:e5:d3:5d:8d:a8:3d:f1:31:
         fc:d9:88:f2:c1:82:0c:ea:76:cc:e8:d7:2f:95:11:a3:69:6b:
         0c:e4:1d:cf:99:89:d8:08:e2:2a:31:14:f2:9d:c8:d0:d4:c8:
         7f:00:d3:ae:4c:20:8c:0f:4a:d4:cf:de:21:1c:06:4c:2e:d4:
         65:80:52:49:06:fa:b0:d2:8b:ee:c6:78:65:93:ad:b0:a7:82:
         87:01:6e:56:32:ef:f6:23:51:f3:3f:2c:2f:81:a1:87:33:a5:
         24:2c:68:2d:41:e5:67:0c:21:a2:d7:6f:a7:13:34:6d:a8:76:
         6c:78:fd:10:6c:d4:52:67:c8:32:0a:4a:4e:02:9b:6c:3d:f9:
         bc:ac:14:89:fd:57:c4:85:0d:75:4e:8d:16:4f:a2:8b:f7:c1:
         dd:1f:ab:bb:e0:e2:57:79:65:ee:2a:04:91:b4:86:4f:7f:19:
         56:b7:b1:4d:af:70:59:af:a2:d9:a3:2d:32:7b:c5:2b:f1:fe:
         fb:4e:67:e7:f0:58:87:f5:ef:14:13:ed:fc:6b:03:46:62:6b:
         46:d0:ff:6d:22:70:d0:b8:94:27:5a:95:ae:cb:0d:c0:fa:13:
         d9:6f:9d:05:07:b7:64:c6:86:aa:86:91:a2:f6:bb:6b:37:d7:
         bb:f5:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:00 2025 by rpki-client