Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5f1baae2-e684-36ca-90d9-fe3a9fba8078.roa
File:                     5f1baae2-e684-36ca-90d9-fe3a9fba8078.roa (raw, json)
Hash identifier:          4bRcISzF/tzlTqf1ROc1XxLm+pl6tiftiHsUze9cmwo=
Subject key identifier:   1B:B2:5E:4C:F8:80:04:70:B2:43:11:71:92:68:47:5C:7E:A1:13:08
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285848828087DBE7B8A0C659717820
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5f1baae2-e684-36ca-90d9-fe3a9fba8078.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        199.255.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:87:db:e7:b8:a0:c6:59:71:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=b1dd3f46-d804-4f64-b620-e892be528a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:01:a7:c1:a5:6a:7c:82:79:52:92:5c:7e:
                    51:bc:85:c9:7f:ae:fe:ed:d9:42:3a:fa:2f:bc:aa:
                    62:f3:ec:5a:e3:18:09:38:d8:39:9b:0d:e0:31:d9:
                    ed:c6:50:ce:03:35:92:50:8f:a4:12:1a:e4:f7:80:
                    dd:26:c2:29:9e:34:09:75:20:26:b2:9a:33:9f:a2:
                    01:57:19:45:98:2a:19:e8:40:4c:0d:1a:92:44:fa:
                    a2:26:f0:25:df:b2:4c:7f:8a:48:44:14:36:27:9f:
                    31:49:a1:75:ed:85:cf:3a:61:e5:14:df:1c:fc:61:
                    e7:f3:6a:e7:15:c7:d8:40:23:02:5d:84:57:e0:32:
                    73:27:27:7c:d7:8e:81:5c:39:7a:22:d5:9c:35:65:
                    36:07:89:a9:dc:0c:78:12:d8:82:3c:79:69:7e:e0:
                    69:b0:4e:10:de:22:fd:d3:6a:49:56:ed:61:72:11:
                    91:29:a0:dc:78:41:22:f9:9f:fa:57:55:ed:ca:58:
                    05:2d:f6:b7:ad:05:e0:7b:00:e2:bf:ba:f3:bb:0a:
                    c5:65:e3:fa:51:73:22:ac:70:25:77:4d:12:47:b6:
                    da:86:0f:46:e9:d0:6a:7f:97:d4:eb:42:e8:40:3a:
                    99:f5:82:ff:8f:49:bb:24:6c:0f:42:0e:7d:66:d0:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B2:5E:4C:F8:80:04:70:B2:43:11:71:92:68:47:5C:7E:A1:13:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5f1baae2-e684-36ca-90d9-fe3a9fba8078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f4:21:68:ee:0f:59:ee:86:3f:c0:dd:e8:d9:70:fc:75:2f:
         f5:19:4a:93:61:29:cf:66:47:33:6d:08:14:72:4d:35:e9:34:
         26:1d:73:21:cb:ff:63:6b:47:24:c3:c8:bf:90:2f:df:dc:c8:
         e7:19:d1:c9:2f:13:34:82:a8:7b:ad:55:9c:2a:cf:76:bb:e9:
         a7:b3:0e:21:92:40:03:dd:a2:7e:be:0e:79:b5:83:b0:20:b4:
         3b:dd:79:16:b7:61:6a:18:43:4c:c3:c8:86:34:00:15:d7:96:
         02:b1:84:a6:cd:0c:a1:be:c4:2f:00:64:86:2c:55:1c:82:16:
         31:eb:c7:d5:51:5f:f6:c0:af:3d:91:b6:59:43:11:b7:25:3d:
         4f:42:f3:ce:8d:63:f5:ee:ed:31:cf:f1:b1:d0:f5:73:89:78:
         f8:e2:d1:3f:de:b8:51:4c:57:cc:e5:9a:a8:d1:29:5f:f7:f6:
         04:53:b6:61:f2:1a:df:9f:d4:5e:b6:74:8f:5b:53:fd:fd:9b:
         5e:58:bd:cd:5d:fc:7d:57:61:3e:4a:90:1c:f2:43:a7:ef:98:
         4c:24:cd:9f:f1:fe:29:c1:a2:69:f2:16:3c:69:19:86:06:88:
         14:9a:87:49:16:43:bc:d4:3b:de:0a:9a:11:f2:97:ac:e1:9e:
         81:b4:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:04 2025 by rpki-client