Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa
File:                     f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa (raw, json)
Hash identifier:          +GCIb/JGh9V+k8R3FlRI9XGzq8cHBjk/4PBLHW7lEfM=
Subject key identifier:   50:24:E6:8F:58:BE:7C:17:0B:BD:49:64:F6:30:EB:14:B2:26:E5:71
Certificate issuer:       /CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a
Certificate serial:       010D0C9F432858491246A2252DC9860337900218
Authority key identifier: FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     35847
IP address blocks:        167.253.148.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:a2:25:2d:c9:86:03:37:90:02:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=2157ea09-0dbc-493d-9319-b36bad8b68c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:f5:0d:4a:7c:e0:7b:4a:b4:36:94:0e:4b:
                    cc:0e:de:d8:06:67:7b:d1:ad:9d:3d:48:ad:a5:c5:
                    83:63:16:0f:60:51:df:b9:47:1d:a5:3f:31:eb:9d:
                    68:d0:7f:01:7d:10:80:87:a3:35:38:40:58:15:87:
                    c4:72:4d:ea:8e:bd:5a:5f:05:59:49:35:d7:e3:c7:
                    8b:95:82:5b:53:f7:cf:b2:37:e8:be:58:2c:15:93:
                    81:0e:53:b5:8f:94:cf:0a:f0:11:5b:ed:0b:7c:85:
                    6c:ae:35:07:e2:71:62:44:6e:ad:83:2b:bc:f1:e6:
                    85:8f:33:aa:f9:e2:b1:0b:ba:a1:71:4c:7e:0d:ee:
                    d1:8e:25:94:e8:e0:79:e4:e5:35:2e:14:90:43:3a:
                    de:72:bd:6c:5c:d0:a4:55:f8:53:6b:90:41:e9:e7:
                    81:4f:01:6a:8e:b7:5c:27:08:39:da:b1:b5:89:15:
                    5d:37:40:77:27:bc:a8:7f:1d:73:c5:41:a0:37:44:
                    ad:f9:65:09:a9:ca:aa:68:56:b2:2f:05:97:27:9e:
                    df:cb:fc:7d:f5:26:bf:f1:a2:6f:ac:be:7f:14:92:
                    aa:21:a0:a6:cc:70:96:8c:eb:bc:6e:ce:a4:a3:72:
                    d4:a1:6b:7d:55:99:2c:f9:83:3a:03:64:56:ae:67:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:24:E6:8F:58:BE:7C:17:0B:BD:49:64:F6:30:EB:14:B2:26:E5:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a7:66:5d:d2:af:f2:df:9f:3a:3e:da:ff:c0:d8:ea:a5:0c:
         6b:0d:22:fe:59:20:86:cb:66:3b:bf:90:e6:2f:eb:b0:0e:70:
         96:94:88:20:ef:55:79:9e:65:9e:6b:f0:41:73:2e:ec:6d:1d:
         6c:e2:7f:6c:5d:6b:27:cb:e5:be:a6:cc:47:02:49:ba:8d:4b:
         af:f6:0a:a7:ca:95:64:30:6d:bd:f7:c1:3a:21:0a:e9:22:31:
         46:09:d5:8f:79:7c:a2:16:fd:e9:85:c3:e9:25:e9:bd:d7:b4:
         fd:5b:7b:c8:d5:92:bd:83:df:1c:fb:ea:28:57:d9:27:20:21:
         bf:32:2e:e9:9a:ae:a7:b5:6e:66:11:c8:9a:fa:68:a5:5a:3a:
         80:d4:1b:4e:d8:d1:4a:b3:9f:5f:72:58:05:3b:1c:5b:a4:65:
         a9:0b:97:a2:e4:a4:7e:96:08:f1:9b:ee:54:1d:cf:fa:68:13:
         4a:32:c5:36:83:39:5d:98:dd:64:ea:32:47:03:df:7e:d5:e4:
         62:16:b5:61:6c:cf:1a:de:82:59:12:40:ac:be:ec:11:49:fa:
         03:91:09:ad:2f:ba:90:cc:c1:70:b5:84:7e:c6:22:db:0c:9c:
         39:45:26:ac:69:06:38:f8:83:e1:38:d3:ca:19:1b:49:ec:ed:
         c6:91:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:12 2025 by rpki-client