Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fe9ba2-c0b7-3963-b08e-cd6648ce9b86.roa
File:                     a6fe9ba2-c0b7-3963-b08e-cd6648ce9b86.roa (raw, json)
Hash identifier:          xN+fZBjdjQhQN+rpl8D6iRGuMypmEqiEQd3Bex9iZ7g=
Subject key identifier:   DD:9C:F5:74:EF:85:57:91:A7:66:8B:42:B9:98:C5:C7:D3:4F:51:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB43F76983CA26E126A200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fe9ba2-c0b7-3963-b08e-cd6648ce9b86.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     701
IP address blocks:        141.150.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:43:f7:69:83:ca:26:e1:26:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=28bb799a-e9b8-40a2-82e3-15d22cf7ac0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:a2:57:45:45:81:6e:ae:75:ff:da:7c:85:
                    a0:c9:c7:62:ec:47:a1:c0:98:b4:1e:5d:09:e4:86:
                    fa:22:83:46:c9:c8:f6:3b:37:ee:dc:09:e9:96:82:
                    a1:6b:0c:ff:3e:ea:63:0f:e5:e9:9c:e0:13:07:80:
                    e9:01:a3:a8:12:52:91:5c:64:ef:df:bf:bc:80:ae:
                    5f:95:9c:c6:9d:10:98:5f:ff:d4:f4:df:b1:39:66:
                    d7:c2:6d:43:8f:95:7e:f7:6b:3a:af:bd:67:42:09:
                    9a:a3:92:d2:99:9e:0d:31:4b:f3:bf:fb:80:61:e5:
                    4d:bc:75:f5:7a:d9:2c:20:56:92:6b:ce:d5:fe:b2:
                    95:a6:2b:8f:c6:68:7e:ed:0f:14:50:84:d0:ca:c5:
                    bc:67:a7:13:e3:d9:8d:a0:f3:ea:ef:69:c8:02:78:
                    62:8f:a9:82:87:07:cd:32:b6:1f:df:4f:2c:6b:0e:
                    72:c3:9b:47:56:0a:c8:f6:19:66:a2:6f:96:43:82:
                    ef:df:59:ee:5b:8f:dd:cc:ec:1f:fe:7c:d6:d8:ec:
                    3d:f5:d7:07:11:4b:61:fa:87:3a:66:15:8f:55:3f:
                    33:95:86:ca:0d:66:c0:5d:7e:e2:a0:52:8d:6a:64:
                    54:7b:54:37:cd:1f:ac:73:47:e9:6e:23:fc:6e:4f:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9C:F5:74:EF:85:57:91:A7:66:8B:42:B9:98:C5:C7:D3:4F:51:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6fe9ba2-c0b7-3963-b08e-cd6648ce9b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:9e:12:fc:20:34:1a:2d:cb:92:16:7f:28:b6:38:a8:fb:d6:
         c6:ad:ef:e2:b6:55:ad:9c:cd:ec:94:b8:79:a7:96:19:0e:7f:
         1f:d8:0c:1e:35:52:f8:f2:50:59:b8:c4:32:91:fa:cc:e0:fb:
         64:6e:06:79:4f:fa:c0:3f:51:c2:1c:d4:d1:76:23:d3:f8:0d:
         fe:41:f3:e6:62:1c:25:f1:9d:52:2d:f7:eb:4f:4e:56:1b:e3:
         c3:00:39:69:19:27:77:f7:72:ea:3b:66:01:45:a3:ac:67:2f:
         54:bf:fa:62:2b:41:c3:22:f6:11:d8:e7:bc:a0:f4:7b:5f:fe:
         9b:66:14:9d:be:79:6c:29:88:72:9b:35:16:2e:4d:a1:42:09:
         b8:7f:f5:1c:54:3c:68:ae:cd:4b:05:2a:c9:63:27:58:9a:90:
         2c:57:9d:2b:7d:41:d2:a5:03:dd:ca:22:15:04:df:a1:15:ab:
         18:7a:b0:77:00:9a:73:51:8b:40:13:be:ab:06:5b:52:a2:a6:
         a9:ab:a4:5d:d6:4b:8b:59:26:5b:5a:83:83:f3:75:83:78:7c:
         c7:2b:9e:f4:54:ff:da:13:d4:bc:52:e4:6a:df:2f:89:92:73:
         d4:fc:3f:70:1f:fe:07:cf:7a:f6:6a:e6:d0:5d:8e:b6:fb:45:
         48:bf:73:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:20 2025 by rpki-client