Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128/4f9a0674-c6a6-38a9-9f68-bfd297cd1640.roa
File:                     4f9a0674-c6a6-38a9-9f68-bfd297cd1640.roa (raw, json)
Hash identifier:          VvvA6+f4BKB+Lik8XZ6cxwSuufUn38cis9Q1aTYc3Qs=
Subject key identifier:   D6:7D:41:C9:C9:A9:1F:03:A3:98:6F:34:99:ED:13:80:0E:1E:06:CA
Certificate issuer:       /CN=fdfd81ee-0204-487b-a8cf-baa679176128
Certificate serial:       010D0C9F4328584913BACD46F99B870A0B6D8FA0
Authority key identifier: 0E:B8:65:74:47:1D:FA:90:FF:53:ED:9D:2A:85:96:2E:84:21:61:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128/4f9a0674-c6a6-38a9-9f68-bfd297cd1640.roa
Signing time:             Tue 04 Mar 2025 14:30:34 +0000
ROA not before:           Tue 04 Mar 2025 14:30:34 +0000
ROA not after:            Mon 02 Jun 2025 13:30:34 +0000
asID:                     0
IP address blocks:        107.97.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ba:cd:46:f9:9b:87:0a:0b:6d:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfd81ee-0204-487b-a8cf-baa679176128
        Validity
            Not Before: Mar  4 14:30:34 2025 GMT
            Not After : Jun  2 13:30:34 2025 GMT
        Subject: CN=9167b53e-4bc1-4b62-83ba-268c369d079c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:89:5a:50:37:3b:5b:41:69:89:a4:af:75:47:
                    e6:a5:93:42:bd:b7:6a:b5:22:6e:d4:ac:3e:6e:8b:
                    72:4e:a7:ed:f8:4f:6e:7b:30:62:2c:5c:f5:1c:64:
                    a0:f7:6c:fe:1e:8f:e9:5d:6b:7d:9d:7e:25:da:29:
                    53:96:30:01:d3:d0:29:8f:ad:94:72:dc:a0:60:69:
                    1d:ae:0e:38:61:16:8c:f9:71:aa:7a:02:d3:77:7d:
                    0e:79:31:57:f9:6a:cc:d7:32:bd:b4:e2:b0:4d:45:
                    68:74:67:3a:d0:4b:97:db:80:73:e9:4d:06:51:38:
                    10:42:b9:0d:b9:79:52:0a:c0:f4:7f:35:aa:7f:a9:
                    74:6c:05:3a:71:8e:a2:ae:c9:d8:9d:bf:be:32:e5:
                    d2:2b:f2:5c:cc:aa:5c:8d:ad:bd:52:7c:23:04:d4:
                    14:1b:cd:b8:b0:4d:68:6d:17:9c:d9:c8:c1:11:ba:
                    f3:eb:75:c8:c1:f0:e8:d5:3b:46:8e:69:28:c4:03:
                    1b:97:a5:c4:72:ad:45:34:97:bc:bf:d0:76:4b:7c:
                    f5:82:0f:18:bc:f1:f7:a0:3c:c8:f1:b8:89:6b:18:
                    1e:92:8c:e6:8a:af:be:e7:ee:a7:a4:7e:5e:a8:a5:
                    83:5a:d2:6b:83:c8:8d:b8:fa:27:f7:ed:e0:82:55:
                    a2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7D:41:C9:C9:A9:1F:03:A3:98:6F:34:99:ED:13:80:0E:1E:06:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128/4f9a0674-c6a6-38a9-9f68-bfd297cd1640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128/fdfd81ee-0204-487b-a8cf-baa679176128.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B8:65:74:47:1D:FA:90:FF:53:ED:9D:2A:85:96:2E:84:21:61:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.97.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:71:21:21:dc:0f:08:d8:99:7c:da:d6:b0:be:3d:a5:08:
         23:26:87:2f:fc:a2:ed:35:16:d3:47:91:26:4d:8b:66:93:1e:
         eb:b7:c6:44:2b:b4:4b:4a:6d:8b:1a:0c:96:fc:c4:fe:c7:8e:
         08:ad:cf:95:aa:fc:da:93:e3:b6:34:13:ef:c2:0c:0d:20:ba:
         a3:9c:ee:2e:8e:70:53:c2:a9:6d:a2:0a:80:33:e1:3b:06:a0:
         78:a3:f9:4e:4a:c0:8f:f6:14:5e:94:f4:4b:7f:e9:19:0e:5b:
         4c:3d:40:f6:39:ed:85:a7:a9:e0:36:4c:39:0a:3d:8d:d8:e4:
         dd:fd:e2:18:20:df:61:31:dd:c3:31:95:b2:0b:25:67:9d:a0:
         f7:27:66:11:e9:62:c6:8c:13:3d:7e:de:31:66:a2:66:dc:f9:
         14:8e:ab:11:3a:33:8e:7a:c1:a8:31:ac:4e:fb:6b:84:69:1e:
         ab:83:c3:89:0b:e2:fe:fb:43:3d:cc:d5:74:c8:24:ce:a0:e7:
         ac:23:88:15:de:b5:5e:c8:d6:e3:78:21:ae:d3:90:6e:bb:69:
         b0:65:f6:27:04:ef:a2:7d:6a:7e:ed:38:29:32:ac:e4:fc:9c:
         3a:13:5b:79:43:c3:81:77:14:d8:f4:fb:fb:93:15:6e:ee:8b:
         97:7a:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:55 2025 by rpki-client