Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa
File:                     e4984303-cfdd-381f-b4b6-b6359fd756a7.roa (raw, json)
Hash identifier:          3iQef75ivwv2oNCvJRnNfyc0epNJDUJgJ08zuVcDgrE=
Subject key identifier:   24:75:09:EC:DC:C4:23:B8:90:CB:77:48:74:32:31:74:F9:61:3F:74
Certificate issuer:       /CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0
Certificate serial:       010D0C9F432858487FB5DC922B092961F0B58610
Authority key identifier: 49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     20283
IP address blocks:        192.16.104.0/22 maxlen: 22
                          204.144.176.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:dc:92:2b:09:29:61:f0:b5:86:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=2d515b61-cac4-43b9-a376-754e2f885ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:45:82:a0:11:77:67:f1:3f:9f:a0:9f:c4:
                    d8:6d:a4:c6:f3:fd:1d:4f:9b:e7:13:a8:5c:39:b5:
                    dd:7c:29:64:fc:26:58:6c:0a:6f:67:e2:ed:d4:8b:
                    83:e7:05:0c:d8:c7:9a:51:db:41:9a:a9:12:e2:fe:
                    14:25:5a:59:35:ae:ce:ea:4f:e4:cc:3d:71:46:7c:
                    1b:fd:ac:8a:42:40:37:ba:72:c2:4e:0f:cc:ee:08:
                    93:3c:20:ba:a2:96:86:85:fc:4a:56:4f:90:d3:8f:
                    4c:3c:78:e6:74:76:90:62:5a:6e:8a:49:7c:87:8a:
                    1e:d3:3b:72:90:30:9d:68:5b:d4:30:ed:4b:fe:23:
                    0b:d3:b3:d5:12:48:8b:89:ac:7b:6a:9d:3a:4c:1b:
                    96:76:1d:a6:b3:79:4f:71:a8:f0:c5:36:bb:1f:9f:
                    b4:9a:1c:c7:1d:30:83:46:c9:2c:48:4c:50:e8:45:
                    b8:03:fd:59:40:80:80:32:53:1b:e9:1c:d8:4d:9b:
                    4c:96:b6:b0:74:ec:97:04:a9:78:43:22:07:79:2f:
                    3d:2f:71:8b:b1:a6:80:16:88:a3:1b:be:c6:ac:1c:
                    a4:3a:1d:6d:8a:4d:58:93:f8:67:64:e1:d5:96:10:
                    da:99:6d:ae:aa:20:e6:1f:af:82:e6:93:fe:e2:05:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:09:EC:DC:C4:23:B8:90:CB:77:48:74:32:31:74:F9:61:3F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.crl

            X509v3 Authority Key Identifier:
                keyid:49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.104.0/22
                  204.144.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:76:6a:ba:30:32:1c:dd:67:74:ff:57:48:6e:db:11:46:ba:
         c2:96:fd:ae:40:33:be:c6:23:79:60:b3:c5:36:32:cc:5e:74:
         4b:64:a1:a4:a5:79:25:93:62:42:55:28:f7:2b:b7:04:4a:38:
         62:5c:94:68:26:1f:b1:2e:5b:73:6f:57:15:eb:1a:5f:bf:bf:
         90:36:05:11:7d:9e:62:83:bf:62:31:c7:91:7e:e3:ac:a5:50:
         71:b1:4c:c7:74:4e:50:2f:33:05:06:39:bd:fc:28:34:e1:ee:
         53:1e:7d:44:ee:c1:5e:20:20:35:fb:e2:d4:24:36:b1:f3:b0:
         9c:62:1a:cc:a3:d5:7c:c4:58:5f:1d:a2:2b:cd:70:5b:7e:bb:
         e6:51:98:81:6b:21:39:c9:4c:aa:a0:8e:bd:4e:ae:33:5b:87:
         a6:e6:71:2f:02:fc:ab:f3:fa:91:ba:a1:de:b2:b7:42:26:aa:
         23:85:29:f5:32:a4:91:7a:2c:ef:38:64:d2:05:85:e4:9b:b3:
         0c:d8:05:9f:55:8a:b8:c8:0f:06:a8:40:35:ac:5f:39:d3:80:
         36:36:36:ec:b5:fa:14:64:d4:27:99:60:78:81:e3:46:43:ab:
         86:2b:5a:db:70:80:4e:52:35:f2:e6:0a:bf:c4:5b:c8:43:d6:
         8e:d4:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:19 2025 by rpki-client