Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa
File:                     3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa (raw, json)
Hash identifier:          6hBkm7H9fVwuvgjTsblqYuGrBHgGEyRpxvpq9HE+Pxo=
Subject key identifier:   C3:7A:4D:9D:60:FA:DF:29:43:35:74:32:65:85:CF:C0:D5:77:1B:93
Certificate issuer:       /CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
Certificate serial:       010D0C9F43285848A29B488E49FE8272ED7E6F00
Authority key identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     8987
IP address blocks:        165.159.140.0/22 maxlen: 22
                          165.159.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:48:8e:49:fe:82:72:ed:7e:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=e1cf14ae-e564-43ac-85ec-58f9f3800c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:c0:ac:ea:31:a5:40:44:0c:50:b6:cb:a7:
                    ce:39:e3:1a:a3:21:6d:ec:59:48:47:2a:24:7d:b1:
                    c8:86:d8:ae:93:b1:4c:9b:da:ef:d6:98:ec:d7:84:
                    06:3d:10:9e:d8:73:4a:be:17:8e:79:66:f8:8b:c8:
                    e9:8c:fe:78:21:d5:0e:0e:f6:e6:9a:90:13:06:c9:
                    54:d0:7f:9d:b8:ba:ce:32:49:b2:b8:fe:c1:2d:b7:
                    c2:52:4f:40:5f:b6:bb:d6:53:47:47:28:5e:b2:7a:
                    26:21:4c:9e:ca:11:e4:31:82:e7:d6:4c:68:5b:a8:
                    e7:03:c7:a4:be:28:39:38:1e:20:1c:c7:aa:f5:4f:
                    b8:6f:ab:41:e9:74:da:d8:27:58:2e:42:45:7f:3c:
                    0d:ab:e0:63:89:5c:58:06:d8:12:e2:da:b0:5b:ea:
                    34:c3:51:a6:44:4c:48:2f:de:32:1b:bf:27:4d:bf:
                    3e:4b:6e:12:64:4e:13:b7:d0:af:8c:1f:d8:3f:7b:
                    40:d0:bd:a3:a0:e9:e8:11:e7:75:69:3f:8f:6b:8a:
                    fa:57:b3:45:ea:b0:81:0a:3b:e4:4b:d6:fa:e9:f3:
                    14:1f:3b:51:a7:3f:c8:9c:be:d2:00:1a:29:55:09:
                    d0:8f:54:ca:08:ac:77:fb:37:77:65:39:04:1f:39:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7A:4D:9D:60:FA:DF:29:43:35:74:32:65:85:CF:C0:D5:77:1B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl

            X509v3 Authority Key Identifier:
                keyid:CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.159.140.0-165.159.147.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:fb:e3:b5:f9:64:5d:10:29:c9:f0:c5:81:dd:25:7a:16:f0:
         a8:b2:41:fd:09:f8:82:9f:5e:94:a2:23:73:29:d0:46:35:4a:
         bc:e6:b3:c5:9f:0a:56:cb:47:2c:1a:80:04:e1:75:52:e8:92:
         33:38:eb:b9:4c:5d:80:e1:ac:07:f8:2b:ad:59:2e:81:93:6b:
         f4:ee:d2:85:d3:92:2d:b8:c5:52:4f:ae:58:b7:0f:b2:21:8b:
         95:fc:b8:90:d4:d2:22:ea:53:63:81:68:f9:8c:42:d8:66:59:
         e1:29:de:81:c0:40:6d:2d:0a:05:99:5e:28:c4:35:ee:ca:16:
         96:95:78:5f:23:52:2c:91:9e:0b:49:3c:7e:ac:39:71:e4:a9:
         7f:ce:9a:d6:31:70:d3:36:01:6f:ec:53:eb:77:04:f0:65:40:
         17:30:da:1f:df:dd:8a:7e:7a:ed:d2:08:e3:8b:ed:f7:1e:43:
         4c:8d:fd:ea:2a:31:da:dc:3b:8b:4f:2d:76:2e:56:86:d1:7f:
         a4:2b:1c:cf:4d:5f:c6:68:1b:44:98:57:12:be:89:8d:ce:fc:
         cd:46:bd:cf:78:de:ea:92:da:65:d0:dc:42:de:87:a4:8b:2e:
         24:e2:36:67:90:f2:87:7a:4c:f7:61:3c:ab:99:43:55:45:f6:
         39:fa:1a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 10 17:17:43 2025 by rpki-client