Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/25d5a62f-f02e-3b51-be41-291b0c2569f1.roa
File:                     25d5a62f-f02e-3b51-be41-291b0c2569f1.roa (raw, json)
Hash identifier:          d98ZSZ2w63uwCZ9be2un6NYGJvlA0GI8t1siFCnfvC0=
Subject key identifier:   8C:DA:1A:C3:89:29:2C:C8:14:88:06:46:CD:5B:AD:83:45:FA:C0:56
Certificate issuer:       /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial:       010D0C9F43285842C4009D2E74B7F451D5110140
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/25d5a62f-f02e-3b51-be41-291b0c2569f1.roa
Signing time:             Thu 03 Aug 2023 20:24:56 +0000
ROA not before:           Thu 03 Aug 2023 20:24:56 +0000
ROA not after:            Wed 01 Nov 2023 20:24:56 +0000
asID:                     14618
IP address blocks:        149.72.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c4:00:9d:2e:74:b7:f4:51:d5:11:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
        Validity
            Not Before: Aug  3 20:24:56 2023 GMT
            Not After : Nov  1 20:24:56 2023 GMT
        Subject: CN=3182ccb7-7c67-429e-9d8b-72982663f2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:92:f9:52:d5:91:cc:af:c4:cf:ad:c8:6a:
                    62:0d:7e:99:e6:52:10:c4:3d:cb:b0:7f:46:3f:21:
                    e9:ed:8c:57:fd:bf:03:1e:f7:8f:72:b1:f2:ff:e0:
                    9b:27:7c:79:dc:fe:f9:34:23:b2:31:52:7f:30:02:
                    4d:11:ef:8f:c4:ed:9d:28:54:d1:c7:7f:4d:f2:93:
                    70:fc:b7:bc:35:0f:41:50:32:29:29:40:45:c7:00:
                    91:40:fa:3a:0f:41:d6:34:a7:c0:0d:99:c0:d2:b6:
                    55:74:7a:60:bb:c7:66:81:65:81:9a:4b:41:0d:26:
                    8b:ff:a9:da:ce:76:f7:20:2a:b0:82:8b:6e:3e:82:
                    d4:7b:ae:e9:6e:5f:db:31:99:db:a2:b3:8d:6a:d9:
                    7d:4c:af:b7:53:bd:80:98:e1:09:45:8b:21:ea:aa:
                    44:ab:0c:65:8c:40:05:ee:d8:91:c9:c2:b0:ab:e6:
                    09:73:8a:c2:2e:75:4c:76:f9:b0:e2:6c:58:00:33:
                    f6:44:68:bf:fc:b8:a1:3e:f0:84:c6:3b:af:aa:14:
                    3a:85:f2:74:d3:d7:27:79:06:ce:23:96:b9:f6:93:
                    41:8b:f0:90:f1:6a:77:76:07:a6:f9:30:25:5d:30:
                    95:40:6d:6f:8a:58:d9:56:5b:e2:9a:67:af:31:4a:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DA:1A:C3:89:29:2C:C8:14:88:06:46:CD:5B:AD:83:45:FA:C0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/25d5a62f-f02e-3b51-be41-291b0c2569f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl

            X509v3 Authority Key Identifier:
                keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.72.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:30:67:db:ea:e6:7f:40:4b:ef:2d:34:ac:65:1e:4b:18:29:
         1d:f2:22:58:4d:e8:94:8b:13:e7:2f:0a:86:ef:a0:31:38:21:
         73:37:50:91:bf:ef:80:d2:08:e5:72:d1:00:4d:48:36:8f:72:
         0a:3a:0d:88:33:f1:94:6e:3a:e0:87:33:4c:7b:6a:40:21:6e:
         78:ac:03:00:ec:cb:f0:a6:59:ef:72:ac:b0:5e:c1:c3:be:81:
         12:d5:8e:45:42:dd:b6:f9:1c:c3:89:b9:77:a0:39:a6:30:25:
         13:84:4a:60:5d:ae:fa:75:ad:a8:4a:dc:10:d8:9f:6b:ee:d3:
         8a:80:15:e2:35:97:c5:f2:49:83:15:cc:45:35:d9:9b:74:0a:
         79:10:a1:81:df:71:b2:f6:ca:24:9a:af:55:96:de:cb:f7:c3:
         c4:15:28:c6:84:5c:69:97:93:84:29:7c:c3:27:e9:d0:19:00:
         8c:20:87:91:c4:d9:50:af:cb:a2:3c:0c:22:79:cf:46:fe:49:
         52:53:f7:87:cb:7c:59:02:8f:94:d2:15:e4:02:2c:1f:fa:08:
         a9:75:13:62:c3:ad:47:99:f0:4a:19:4c:53:31:c7:54:22:99:
         41:b9:73:5f:2f:e5:7a:84:eb:a2:1b:3c:76:7d:17:0a:aa:bf:
         53:98:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:08:26 2025 by rpki-client