Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/62d39731-8571-30cd-bb8a-50c9d2338694.roa
File:                     62d39731-8571-30cd-bb8a-50c9d2338694.roa (raw, json)
Hash identifier:          t3kVuSesfHyDgsoKGDtD/m7wIBXOOMHyvdRqIvw0iiA=
Subject key identifier:   B3:BB:0B:0F:E2:4B:CE:CF:74:F9:E1:DC:79:04:EF:03:F8:CF:01:14
Certificate issuer:       /CN=b9879e55-95a8-4c84-be43-498c51889a0f
Certificate serial:       010D0C9F43285848CF6A74D76C54AEE562C67B80
Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/62d39731-8571-30cd-bb8a-50c9d2338694.roa
Signing time:             Sat 08 Feb 2025 03:13:43 +0000
ROA not before:           Sat 08 Feb 2025 03:13:43 +0000
ROA not after:            Fri 09 May 2025 02:13:43 +0000
asID:                     10995
IP address blocks:        161.150.9.0/24 maxlen: 24
                          161.150.84.0/24 maxlen: 24
                          161.150.85.0/24 maxlen: 24
                          161.150.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cf:6a:74:d7:6c:54:ae:e5:62:c6:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f
        Validity
            Not Before: Feb  8 03:13:43 2025 GMT
            Not After : May  9 02:13:43 2025 GMT
        Subject: CN=f17a688c-777d-4afb-bc50-0a40c87f1c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:75:29:55:dd:c3:c6:2d:f0:f6:1d:0e:04:
                    df:e3:e7:21:7d:29:5d:5b:b7:a6:a3:be:92:dd:24:
                    c8:38:b9:e2:8c:75:57:42:f1:8e:b2:64:10:d7:b6:
                    f5:78:81:f1:91:89:c1:dd:f7:c9:c8:dd:b9:ed:50:
                    1c:a0:60:99:62:18:13:34:32:35:d5:80:1b:21:dd:
                    39:43:57:ca:4c:6a:52:68:7b:1d:f2:10:00:df:72:
                    03:c7:12:a6:65:11:9c:79:de:72:a1:a8:68:4e:77:
                    c0:de:4b:38:30:4e:dd:e0:eb:b9:09:b0:01:e0:e7:
                    51:97:7e:e0:b5:02:db:c7:02:fa:87:19:fe:2a:96:
                    68:f8:b5:2e:63:ab:1f:71:ab:03:7b:f1:bd:69:73:
                    28:96:7f:49:4f:76:59:e8:d0:15:74:14:4a:27:f4:
                    20:46:4c:3f:9c:8c:06:17:4b:d6:cb:46:cc:b8:7a:
                    c8:8d:35:83:bf:38:f7:4b:a4:57:7f:23:6f:15:e1:
                    97:c3:87:ba:66:d2:07:bb:14:26:0e:09:a5:59:80:
                    f0:75:2b:ca:54:8a:08:df:e4:0b:86:cb:98:c1:f5:
                    c0:2c:a8:8e:85:39:bb:36:6f:a7:db:df:23:01:07:
                    22:9e:ea:5d:59:e1:7c:67:39:aa:88:a7:c6:bf:8f:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BB:0B:0F:E2:4B:CE:CF:74:F9:E1:DC:79:04:EF:03:F8:CF:01:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/62d39731-8571-30cd-bb8a-50c9d2338694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.150.9.0/24
                  161.150.84.0/23
                  161.150.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:43:04:71:46:9e:55:b1:f8:83:76:01:0a:ce:e0:bc:5d:
         41:c4:11:da:4d:d4:71:27:74:28:89:b0:6d:60:5a:e6:e2:3b:
         e6:29:7c:f0:15:33:90:d8:9b:e3:2f:85:50:db:6c:c7:93:be:
         d2:ea:bd:11:f9:dd:f2:92:d0:25:5d:8d:b5:b1:0a:7c:4d:47:
         6b:be:27:20:75:52:ce:26:f9:86:5e:17:2c:a3:65:ee:f6:99:
         1c:9f:cb:97:b2:14:dc:e2:98:ee:be:5c:3d:7b:5f:5c:b2:75:
         af:51:34:ad:72:94:bc:7b:ac:52:b4:c2:88:74:82:82:c3:8d:
         47:e7:a1:dd:f2:7d:99:b4:8c:1c:23:4c:9b:5e:73:9d:0d:5a:
         0e:aa:dc:ff:00:de:b9:e7:1c:6b:ae:a5:b2:93:98:ba:b7:0e:
         90:0d:6c:66:f7:5b:19:20:47:96:ce:a0:86:b9:47:85:c4:f8:
         bd:c8:a1:b8:f5:4b:3e:1e:f6:3a:67:11:c4:ce:eb:bf:96:99:
         73:62:bc:72:64:60:08:a0:f3:81:23:48:46:ed:e1:6b:08:88:
         9e:0b:6c:c9:c4:df:82:42:b9:96:e2:89:28:dd:61:62:6f:70:
         83:7a:37:96:46:7f:4e:36:7c:4f:4e:36:28:56:f9:a7:8d:02:
         8d:7c:d0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:37:16 2025 by rpki-client