Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/e4889475-03c8-3046-b487-19eaf00d9537.roa
File:                     e4889475-03c8-3046-b487-19eaf00d9537.roa (raw, json)
Hash identifier:          m14nbI9CYj3OJjhPffZRig4ez7whUKd6/Zv3uuD0d90=
Subject key identifier:   15:84:2C:AF:77:D1:7C:C8:4A:C8:10:E4:BF:4F:CA:F0:B6:38:19:F4
Certificate issuer:       /CN=05a2efdb-ee12-40bc-8c32-27ae26210fd3
Certificate serial:       010D0C9F432858485E35AD923685E3C7CFB49800
Authority key identifier: 54:3B:A7:AE:54:3B:D8:15:09:0D:EC:C5:E5:C1:AC:92:D6:C5:FF:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/e4889475-03c8-3046-b487-19eaf00d9537.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     31898
IP address blocks:        208.76.122.0/24 maxlen: 24
                          208.76.123.0/24 maxlen: 24
                          208.76.124.0/24 maxlen: 24
                          208.76.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:ad:92:36:85:e3:c7:cf:b4:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a2efdb-ee12-40bc-8c32-27ae26210fd3
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=1a56839a-b121-48aa-b036-e8b1e658af3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:2b:34:e6:0c:76:53:89:6b:33:1c:77:5a:
                    50:07:ce:9e:20:86:f9:1d:15:9f:de:7f:f0:6f:b3:
                    1f:64:b2:7d:22:9e:40:3e:f8:fb:c4:4f:02:7a:b0:
                    f0:09:1e:9e:a5:cf:a2:45:f7:83:77:60:42:d6:b2:
                    14:06:3b:f5:5f:5f:b7:7b:c3:54:f3:a1:d2:a5:83:
                    12:50:82:1f:85:7c:40:09:6b:82:14:8d:85:43:51:
                    6c:bd:85:17:da:fd:ab:89:13:8f:d7:3b:c2:2d:66:
                    52:4a:6d:d8:82:72:e6:7e:c4:b6:a0:2c:49:97:e4:
                    bb:18:f1:89:1f:5a:29:1c:9d:54:55:fe:0f:fb:c1:
                    11:ba:23:d5:32:54:25:ad:f8:03:20:8a:c8:df:93:
                    e3:7e:52:cf:bf:f9:77:67:57:e5:0f:c1:10:24:a8:
                    59:52:77:e7:72:8a:cf:2d:f1:da:4d:8c:31:83:4c:
                    28:a5:fe:32:88:61:b3:2e:fa:09:5c:ca:13:ea:ee:
                    09:64:c0:dd:88:cf:ea:4c:e8:41:95:7e:75:f2:e2:
                    e6:19:cc:9d:d5:f6:d8:7e:1c:fe:2d:00:7b:99:ff:
                    da:f1:2a:bc:b3:27:b3:fd:de:91:a4:10:d5:4c:56:
                    65:82:3e:cb:08:4f:9e:ff:2f:9a:e6:a6:52:d9:86:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:84:2C:AF:77:D1:7C:C8:4A:C8:10:E4:BF:4F:CA:F0:B6:38:19:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/e4889475-03c8-3046-b487-19eaf00d9537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/05a2efdb-ee12-40bc-8c32-27ae26210fd3.crl

            X509v3 Authority Key Identifier:
                keyid:54:3B:A7:AE:54:3B:D8:15:09:0D:EC:C5:E5:C1:AC:92:D6:C5:FF:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.122.0-208.76.125.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:34:3f:2d:e5:77:eb:8d:8c:f3:a8:f5:27:ae:dc:8c:7b:be:
         62:e9:95:5a:fe:ac:84:fc:92:cb:b0:d7:b4:be:93:5d:74:b7:
         01:3a:c5:b5:77:4e:4a:dd:bf:a1:a2:81:d9:2f:f0:d0:f1:f0:
         92:ca:77:c6:56:00:2d:a1:f9:17:9b:76:60:e2:50:46:01:0d:
         22:10:48:00:86:0d:cf:ca:a0:14:74:f9:9d:81:cb:ac:ba:9a:
         5f:c9:67:ee:e8:d8:a3:66:a3:60:95:83:fa:eb:6e:54:9d:ef:
         26:81:87:7d:4d:f0:2b:22:52:e5:5b:ed:2c:88:36:cd:8b:05:
         d8:17:63:75:cc:1d:62:ea:c5:f2:68:f6:70:19:c7:b7:50:bc:
         e4:1d:12:96:d7:7b:11:00:c5:91:79:35:ef:4d:d9:fb:86:6b:
         97:e1:10:33:e6:4f:ec:f3:24:81:6f:3e:c6:10:a9:58:a8:82:
         6d:d9:68:bd:ef:b3:06:7d:d3:1a:98:6c:11:b0:db:bc:0c:b0:
         e0:c4:88:d5:5a:ff:42:e9:63:d8:2e:a3:48:1c:2b:5a:a8:13:
         93:be:78:51:4b:56:ea:f2:ac:60:e2:35:d0:df:74:0b:22:ef:
         d3:f5:5e:09:83:d3:1e:e8:be:74:49:75:dc:78:ac:a6:02:24:
         46:d8:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:21 2025 by rpki-client