Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fc7722bc-279f-3d0a-9b4a-12248aafb07e.roa
File:                     fc7722bc-279f-3d0a-9b4a-12248aafb07e.roa (raw, json)
Hash identifier:          ZO7OC2hBJYnDf6kH/q5yQ+SAlDz37u62SIVJygyMzlQ=
Subject key identifier:   75:81:B2:52:8D:21:08:24:51:87:22:FE:85:A6:26:5F:E4:61:8F:0E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849512E05FD11E4CBC66FC99A10
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fc7722bc-279f-3d0a-9b4a-12248aafb07e.roa
Signing time:             Wed 26 Mar 2025 14:47:02 +0000
ROA not before:           Wed 26 Mar 2025 14:47:02 +0000
ROA not after:            Tue 24 Jun 2025 14:47:02 +0000
asID:                     14618
IP address blocks:        170.114.98.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:51:2e:05:fd:11:e4:cb:c6:6f:c9:9a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 26 14:47:02 2025 GMT
            Not After : Jun 24 14:47:02 2025 GMT
        Subject: CN=35c06464-31b4-4ffa-abf5-15c08297f24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:ef:f9:2a:dd:63:e7:68:ec:78:74:be:cd:
                    75:3f:0f:be:65:ba:d5:01:44:0f:46:6c:62:1e:a5:
                    5d:30:66:dc:c4:d5:46:40:fa:22:48:8c:b9:ad:01:
                    a3:c1:80:6e:6b:74:41:99:7f:da:42:a9:b1:81:58:
                    97:e5:af:5f:ac:9e:c2:ac:d0:50:8c:14:46:83:a1:
                    3c:26:73:bb:64:72:56:e1:72:cd:4b:9d:77:0f:92:
                    b5:38:72:f8:86:cc:2f:b6:8a:21:c7:42:80:ab:99:
                    5f:b1:0a:6f:55:a0:3a:87:52:8b:0d:64:24:76:f4:
                    67:8a:58:de:df:a1:3d:0b:88:19:fe:3b:de:87:df:
                    08:46:31:e2:f9:c6:48:30:cc:b2:21:cc:5b:22:04:
                    8d:82:e0:6e:d8:2b:92:ac:bc:05:e8:e5:63:8b:7c:
                    8d:06:32:12:6d:b8:f9:39:fe:c0:d3:be:d8:22:3d:
                    cd:1b:e6:ae:89:00:ff:2e:f5:e2:23:08:e3:cc:48:
                    c4:41:a6:fc:25:49:04:bd:ae:01:41:35:ec:74:98:
                    70:49:cc:0c:97:1a:bf:90:18:32:8d:02:8f:02:f6:
                    20:6d:2d:9a:e9:99:86:ec:da:08:52:46:40:8d:2a:
                    7b:34:72:3d:99:fb:e5:d0:1f:c9:88:34:b6:73:19:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:B2:52:8D:21:08:24:51:87:22:FE:85:A6:26:5F:E4:61:8F:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fc7722bc-279f-3d0a-9b4a-12248aafb07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a6:6b:24:7e:7d:a5:c0:cb:c1:46:dd:2b:79:53:72:3e:14:
         59:6d:b5:0a:70:eb:af:b9:07:35:9c:37:3b:7d:d2:3b:05:0c:
         ee:dc:c5:45:10:62:ca:35:6e:50:cf:51:b4:ae:94:b0:ad:3f:
         57:d8:f0:1a:23:73:83:c0:1d:35:bd:fc:3a:e2:e7:44:5b:8d:
         ce:82:90:38:5c:e6:82:37:76:44:06:f5:0a:87:81:79:f0:cb:
         ce:94:c7:c2:6a:95:72:ed:a1:2a:84:f3:6e:ce:57:09:a6:47:
         59:37:00:b8:d7:ac:dc:58:94:02:b0:27:3b:a7:0f:2e:54:34:
         dc:e6:23:fc:3b:70:0e:bd:28:fa:37:66:47:14:ce:56:9e:63:
         cd:5d:cf:50:f7:8b:01:12:41:0f:64:1f:9a:e1:13:be:a3:cd:
         51:a4:5a:db:cf:43:3d:9a:82:8c:47:a2:85:be:3b:8b:37:67:
         ff:96:f9:fa:c9:cd:44:ba:30:96:1f:42:68:fa:2e:bc:82:7b:
         0c:be:11:3d:9d:31:18:35:f0:2e:f7:ab:83:c1:03:d8:04:86:
         c2:8b:8c:a1:87:bc:ce:36:67:b9:db:db:fb:8f:16:40:d6:d2:
         d5:74:ea:92:7d:97:e0:ef:50:45:a9:85:cc:8f:79:51:90:86:
         12:25:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:00 2025 by rpki-client