Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/391d27fa-5c61-36ba-b7e5-4200f69ee018.roa
File:                     391d27fa-5c61-36ba-b7e5-4200f69ee018.roa (raw, json)
Hash identifier:          eE+VWkjfBxhG+r7RlcwNlaQu0KBOXPxMxwR6BhF/J/c=
Subject key identifier:   D5:BE:49:26:CB:2C:D1:11:84:0B:86:47:AE:81:BF:6E:CA:17:EE:E0
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285847E35F6F50A1FC878A3D5102C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/391d27fa-5c61-36ba-b7e5-4200f69ee018.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     14618
IP address blocks:        165.85.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:6f:50:a1:fc:87:8a:3d:51:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=da722b21-328f-40a5-b08f-2c30b2c79e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f3:f2:64:2e:f7:e3:a8:53:65:2c:9f:73:57:
                    06:fa:d1:b5:4e:f7:63:fa:fa:e8:79:ad:1b:a4:40:
                    e9:d1:30:4b:49:4a:93:72:65:15:65:1d:11:71:b7:
                    12:f1:b5:df:2a:23:72:78:a0:f1:c8:c0:83:43:c4:
                    82:b6:4f:69:74:15:2e:86:05:5d:02:09:3f:01:ba:
                    0e:f5:a1:4b:b4:24:97:93:14:ae:ea:8d:45:49:45:
                    ac:af:ae:a7:6d:5f:ab:a6:96:65:ac:8b:c6:59:fe:
                    79:f8:8f:6b:c4:21:ba:01:37:20:cb:11:81:52:e2:
                    75:e0:c9:2f:32:7b:ea:fc:f8:d4:57:cf:8a:38:0f:
                    bd:23:1d:42:8f:f7:b8:cf:15:51:b6:d0:ab:94:29:
                    f5:5b:e8:ef:d5:1e:66:c5:9d:24:f8:ce:48:cf:a3:
                    b2:88:77:06:7c:51:88:05:59:26:30:35:f4:76:c2:
                    2f:9a:51:97:fe:69:c4:d3:79:64:1c:7b:19:b3:33:
                    01:a3:92:ce:c0:ed:d1:4e:75:66:d6:79:59:cd:7b:
                    05:0c:99:e4:e3:15:61:f5:4e:01:54:cd:8b:3e:e1:
                    e0:41:da:15:26:32:ba:bb:af:78:07:67:7a:39:3c:
                    89:41:99:e1:c8:7b:83:80:af:ee:62:b8:b1:2d:85:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BE:49:26:CB:2C:D1:11:84:0B:86:47:AE:81:BF:6E:CA:17:EE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/391d27fa-5c61-36ba-b7e5-4200f69ee018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:cd:e6:7c:5c:4b:01:39:60:57:32:14:c8:54:fd:15:a5:17:
         8a:28:e2:2c:31:74:8f:03:fb:3e:44:bc:43:83:d1:2c:1e:99:
         77:16:30:5c:50:8b:0a:2e:07:96:45:46:b1:e4:a8:8f:1a:9d:
         0a:e7:91:c7:e5:84:9c:7d:d6:6e:e2:f1:b8:35:fb:93:9e:5c:
         f0:97:52:68:e9:38:ba:af:f7:35:2e:51:c3:d2:35:63:7c:fe:
         ce:f0:4a:a5:90:65:43:b8:da:21:7c:7f:24:a8:74:26:1f:4b:
         e8:fb:51:f8:3c:09:0b:58:c4:74:fe:5d:60:04:1d:d6:36:e1:
         e7:b3:fc:c4:f3:69:73:ef:52:b7:02:93:8b:3e:43:0a:48:45:
         5a:5c:86:a1:67:6c:a8:28:ac:48:1a:60:8c:03:75:87:75:52:
         c3:68:66:c3:b6:54:a0:b0:7b:d6:97:4d:ec:69:1f:55:cd:82:
         dd:58:70:76:60:8c:d6:0b:c3:be:83:76:69:b2:b0:ea:62:be:
         3c:0c:8b:61:44:82:d2:b5:e9:35:e2:30:79:73:fa:f3:21:90:
         f2:f2:30:5e:d2:c6:f6:49:ea:25:ba:3f:47:d5:19:d2:e7:f0:
         0b:2e:19:0b:36:38:5e:31:52:e7:9d:98:26:97:de:91:a2:55:
         bb:86:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:36 2025 by rpki-client