Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/feb4fec0-897c-378b-9c38-ab144c9a32cd.roa
File:                     feb4fec0-897c-378b-9c38-ab144c9a32cd.roa (raw, json)
Hash identifier:          APweRDFbFqcsF+cAfkvTL2niDPpMfORjAye23id5k5c=
Subject key identifier:   EF:BE:1C:40:DD:D0:0D:D7:9A:73:20:6F:EB:33:CB:5B:8A:23:69:FC
Certificate issuer:       /CN=9d295acd-c538-4740-8f21-9eca736b29d5
Certificate serial:       010D0C9F432858492CFF0768B2BAF611C580EA80
Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/feb4fec0-897c-378b-9c38-ab144c9a32cd.roa
Signing time:             Thu 13 Mar 2025 15:43:15 +0000
ROA not before:           Thu 13 Mar 2025 15:43:15 +0000
ROA not after:            Wed 11 Jun 2025 15:43:15 +0000
asID:                     14618
IP address blocks:        205.233.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ff:07:68:b2:ba:f6:11:c5:80:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5
        Validity
            Not Before: Mar 13 15:43:15 2025 GMT
            Not After : Jun 11 15:43:15 2025 GMT
        Subject: CN=5aa38d17-a5a8-4412-ae76-609ef4ed0e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bd:f2:da:36:6c:fb:93:28:30:d0:c5:72:60:
                    ca:ab:e2:33:c9:8d:5f:2a:a9:a0:26:d9:b5:0a:df:
                    3f:e7:0f:af:dc:53:b3:63:72:cd:00:03:a8:57:14:
                    96:cd:28:f3:26:76:05:82:1b:b5:2c:f8:77:3f:85:
                    32:2b:d7:02:9e:a6:f4:d1:58:ad:cd:b4:92:d2:f0:
                    ae:2c:a6:36:c5:48:17:30:63:da:82:5f:52:65:36:
                    e0:9d:1b:8a:f5:12:63:f9:97:6f:56:0d:04:63:f6:
                    85:74:b8:80:70:7c:8f:fc:01:2b:5e:73:90:88:1b:
                    e5:34:a2:96:aa:5d:3a:d8:36:b6:5b:12:78:42:53:
                    e7:d6:cc:be:b3:cc:27:aa:e5:c2:e7:3a:f9:aa:f0:
                    6e:48:17:95:85:77:65:f4:bd:52:aa:e0:e0:c7:8b:
                    8f:ed:29:d1:28:4d:42:4b:7a:4b:9b:9e:5b:d2:f0:
                    c5:d6:b9:d6:21:d4:f3:93:86:c4:23:79:4e:4b:94:
                    11:1a:a9:d3:d9:13:89:49:d4:5a:39:69:ed:93:81:
                    98:6a:da:e7:9e:c9:5a:a7:dd:01:fe:5a:50:a2:68:
                    db:13:8f:ed:68:e5:ff:78:1c:f4:dd:cc:e0:79:8b:
                    c7:3a:8e:60:1b:71:96:a1:f4:41:6a:29:24:a2:b0:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BE:1C:40:DD:D0:0D:D7:9A:73:20:6F:EB:33:CB:5B:8A:23:69:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/feb4fec0-897c-378b-9c38-ab144c9a32cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl

            X509v3 Authority Key Identifier:
                keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2d:48:0b:d6:d0:60:46:ff:2e:95:bd:0f:c9:09:76:a2:1a:
         55:53:e0:4c:3e:6b:b4:2c:e3:29:26:8a:3c:73:0d:39:2d:e2:
         15:fc:9d:9d:b7:3d:db:65:c0:7d:b3:4d:d4:5e:bd:a3:d9:e1:
         31:9d:88:2d:5c:59:72:57:c6:92:69:b8:e1:68:a7:27:6f:30:
         e0:35:8a:b1:99:35:9b:91:ef:27:e1:b9:40:0e:a3:41:20:3b:
         d7:42:35:2a:7a:9c:73:bb:dc:c9:48:23:79:aa:d7:43:e0:ed:
         2c:a0:79:53:e3:e2:7a:89:c8:86:2b:18:0e:2d:28:61:db:59:
         aa:e4:58:6a:d5:cf:c9:f8:94:93:ac:96:a3:c9:db:f0:4b:fb:
         7b:4d:1f:56:17:78:65:23:c1:1d:3f:56:c1:4c:f9:46:e9:eb:
         9e:8d:da:1f:fc:80:65:25:77:f7:04:8f:f8:43:a4:f8:7f:ed:
         59:f1:92:b5:98:1d:ca:37:f0:12:ff:f6:62:89:c4:b9:11:68:
         0b:88:fe:38:0b:45:28:a6:3c:da:78:c8:00:6c:be:49:cb:83:
         3f:7f:f7:2b:fa:11:cd:11:f6:bd:f9:b2:0a:a8:9b:f5:3a:1f:
         99:5d:c3:ab:b8:e5:b3:ba:b9:84:77:70:0e:07:cc:7a:50:e7:
         42:b3:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:35:54 2025 by rpki-client