Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b7b68721-0087-353a-8208-f878575e0c80.roa
File:                     b7b68721-0087-353a-8208-f878575e0c80.roa (raw, json)
Hash identifier:          rY9UNBz4uDCtecUPrWvGQpwBohHFIBPdWdVcM3WF4J4=
Subject key identifier:   E5:CF:38:B8:D8:FA:F7:F8:2F:5D:45:67:1E:97:5D:D5:85:4C:8F:CB
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F432858481F652512E1FD8F105242AF80
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b7b68721-0087-353a-8208-f878575e0c80.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     6102
IP address blocks:        47.19.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:25:12:e1:fd:8f:10:52:42:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=ff1d9a12-755b-4698-bd3e-b2133095c4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:63:9b:41:fa:33:76:69:49:4c:9f:64:e7:
                    b2:78:5a:7c:b5:89:77:6b:ad:2c:a6:f9:e7:09:82:
                    c9:fa:76:01:22:e2:5a:67:fe:8c:46:cc:27:03:1c:
                    ef:4e:a4:0e:dd:e3:1d:9d:95:54:a1:14:5a:fa:07:
                    38:63:cf:ed:87:5a:ff:4c:60:f8:40:08:9c:18:ce:
                    f1:76:cc:29:4b:43:67:87:a9:59:e6:b5:fc:5a:a1:
                    db:08:5b:1b:60:b5:89:7f:0f:f7:45:54:7b:55:ba:
                    62:8b:d2:33:34:db:ef:22:8f:0e:74:4a:94:1b:87:
                    66:20:f3:38:f9:cc:d8:00:ed:bf:be:6f:10:ba:27:
                    68:e4:ed:da:a3:84:2c:fb:4e:57:34:27:4c:b3:d9:
                    91:87:44:bf:6c:8f:65:04:5f:71:f7:23:0f:28:7f:
                    31:43:7a:f6:b1:53:95:0a:13:19:b5:20:05:5e:6e:
                    aa:8b:3f:16:b5:1e:e3:72:d9:42:ee:9b:ba:c3:6a:
                    b5:c9:2b:0b:24:8f:9e:d1:3b:55:ba:5e:14:94:56:
                    92:fa:75:23:b3:35:5f:e8:8a:03:d5:29:33:7e:83:
                    21:8b:57:dc:57:e4:cb:c0:2a:b8:26:8c:77:c6:9f:
                    76:e7:38:d1:66:32:32:0d:bc:7f:21:b4:ab:19:dd:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:38:B8:D8:FA:F7:F8:2F:5D:45:67:1E:97:5D:D5:85:4C:8F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b7b68721-0087-353a-8208-f878575e0c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:59:32:32:fc:4d:b2:fc:9e:de:3c:61:39:e5:b6:bf:ed:4f:
         c3:ed:79:0d:d8:3a:7a:36:11:75:02:e3:c5:77:80:9c:b5:13:
         83:fc:43:63:b7:d2:b4:b9:e2:ef:cf:cd:71:2e:5d:33:6d:eb:
         6f:62:52:ce:d7:43:55:30:e9:74:d9:a6:bf:37:17:83:5b:e4:
         a8:9c:e3:09:2c:17:61:e5:b9:9a:01:c9:bd:2b:2d:98:a7:a3:
         f1:1a:64:d1:a5:b0:06:50:73:2d:e9:be:d1:86:7f:ca:8c:12:
         23:fe:49:14:68:5a:9f:1b:1d:dc:14:3c:27:dc:2c:45:e5:06:
         12:ad:3f:3b:2d:a7:e9:7a:59:65:d4:39:bb:e7:95:16:a4:5d:
         d6:53:46:34:1d:bd:b4:b7:05:2d:c5:9a:9e:8d:50:7b:d8:24:
         75:85:c8:69:e3:dc:48:10:b6:83:4a:68:72:e2:28:43:ca:83:
         09:a8:f6:86:f7:37:a4:43:96:b1:92:1e:f7:5f:e9:8c:30:14:
         5a:bb:4a:3e:6c:49:08:f8:22:17:da:d7:64:80:93:f4:1d:75:
         a9:51:d0:cb:2a:2c:d5:a1:4b:03:5c:18:2b:01:c3:6f:4c:e6:
         12:ae:79:04:6b:45:09:a4:e0:d1:c0:1d:51:1a:c2:d0:2d:17:
         7c:59:d6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:41 2025 by rpki-client