Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/fb58dfbd-c474-36c9-967a-e878767cf524.roa
File:                     fb58dfbd-c474-36c9-967a-e878767cf524.roa (raw, json)
Hash identifier:          lQ2EVSGU34oHAgoo8ke0WBa8a5Pm//MdFT/5wyp43zY=
Subject key identifier:   6A:8C:73:70:68:27:D7:66:32:81:A3:46:46:F5:00:33:4A:22:58:9A
Certificate issuer:       /CN=c24d54f2-22ea-4242-9583-989286d76aac
Certificate serial:       010D0C9F4328584953C44AE68E9E2634C3A5FF00
Authority key identifier: 6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/fb58dfbd-c474-36c9-967a-e878767cf524.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     19382
IP address blocks:        162.221.144.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4a:e6:8e:9e:26:34:c3:a5:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d54f2-22ea-4242-9583-989286d76aac
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=d896c26e-3271-435a-81b9-073cac1ee7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:2b:3f:1c:c2:43:79:49:d9:31:ed:48:ea:
                    f5:62:e3:3a:dd:a7:21:b0:21:24:bc:b1:75:d6:65:
                    1e:ce:9e:79:b4:3b:98:97:37:42:64:b7:0d:ff:80:
                    9d:5b:5b:1f:12:bd:59:0f:87:9b:4a:96:65:3f:c3:
                    77:e4:82:00:3c:b9:52:81:4a:08:04:c5:c6:bf:67:
                    63:f4:6c:be:a9:64:e7:94:ab:3c:b5:51:16:3e:bc:
                    63:7a:d8:65:c7:36:50:a7:43:69:04:cb:aa:c1:de:
                    16:d1:81:6a:ce:82:3a:97:82:66:3e:8b:fc:ea:c4:
                    f5:10:ec:a1:91:23:68:b5:f7:e8:fc:0c:99:95:5e:
                    6a:89:91:ac:4d:cf:f9:1e:1a:38:8a:f9:2c:44:e9:
                    56:a0:89:a6:f1:41:04:cf:5d:af:66:f8:a9:fd:96:
                    8c:a8:3a:ef:c6:4c:a4:9d:40:1a:a0:c9:4b:35:d0:
                    97:44:ef:3f:bc:b9:26:eb:a2:1e:8c:34:85:c7:5c:
                    29:3b:53:3f:ba:91:d7:53:17:2d:3e:b9:28:07:4c:
                    a0:4c:69:15:a9:d7:f1:21:de:cc:b3:4b:71:18:63:
                    9e:09:7b:59:79:0d:b1:ca:ba:40:1c:b5:92:58:56:
                    a5:59:7e:98:f8:d8:1d:48:33:73:fe:a5:64:95:7f:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8C:73:70:68:27:D7:66:32:81:A3:46:46:F5:00:33:4A:22:58:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/fb58dfbd-c474-36c9-967a-e878767cf524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.crl

            X509v3 Authority Key Identifier:
                keyid:6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:76:b6:37:5b:c8:55:68:32:b8:90:df:e7:6b:a9:ff:8c:f6:
         e6:cd:70:f5:9e:9e:93:1c:45:20:fd:cf:7c:ab:27:bb:f2:4f:
         e2:8c:d2:19:af:d5:ce:ac:5b:fa:a6:8b:e1:2c:45:a8:93:51:
         77:06:33:f4:4b:f0:ee:8a:9d:b3:ae:03:c0:ee:1d:6e:a7:d7:
         04:21:7b:6e:1a:ea:a0:36:7a:a4:e1:fd:59:60:27:9c:56:7e:
         03:47:02:52:68:3d:ee:0c:ff:56:e4:af:65:de:01:ae:9f:6b:
         d6:d4:69:51:af:0c:3b:bf:d5:df:8f:1d:f2:0c:77:a7:85:d5:
         02:a9:34:f2:be:04:8c:27:d1:7e:00:4a:e9:01:18:76:f9:5b:
         57:a6:b0:0c:a2:e0:1b:39:55:14:36:20:7b:9d:83:18:fd:82:
         e4:bb:1e:49:16:b4:10:c4:9e:f1:a8:af:d8:42:e1:0b:77:31:
         02:85:33:32:ab:e3:df:e7:36:14:76:3f:cd:ff:54:65:0d:08:
         ae:23:47:e2:d3:24:56:6f:30:f9:fa:cc:26:57:4c:e8:d6:ab:
         6f:c7:44:36:17:fc:61:26:5c:81:f6:a2:cf:5d:46:8e:b2:20:
         6d:df:af:50:eb:e5:3a:77:a9:60:92:39:49:10:76:3b:8c:5a:
         de:03:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:35 2025 by rpki-client