Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cb493c23-9729-390d-a805-e1a7f3db8e26.roa
File:                     cb493c23-9729-390d-a805-e1a7f3db8e26.roa (raw, json)
Hash identifier:          rpoDwwi2jaai9GETsC4r6lV815JabCXROCdhynsylCo=
Subject key identifier:   04:B6:DB:2E:E3:9C:E6:E3:7C:5B:27:72:75:4B:96:84:F2:17:4A:78
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F432858487A207804E00F18A7C43DCB80
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cb493c23-9729-390d-a805-e1a7f3db8e26.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     397546
IP address blocks:        192.122.192.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:78:04:e0:0f:18:a7:c4:3d:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=8c605dfc-0319-40e2-9830-3d8ccbfd454c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:86:fc:5e:96:bd:1a:21:58:70:0b:28:95:
                    20:5e:be:6b:06:ea:db:4c:34:85:4b:ed:11:c1:04:
                    6e:f1:6b:a1:fb:2b:2b:10:6a:fa:03:08:5e:ea:66:
                    f8:57:c3:da:d3:69:1f:e7:47:8f:38:b2:a2:25:f2:
                    09:3e:40:96:3f:b0:c8:9b:3e:61:c2:00:71:ca:b3:
                    f6:01:ba:5e:d8:8e:82:f7:6f:45:29:4f:b9:e3:2c:
                    26:82:d5:3a:34:99:5e:56:10:77:07:7c:da:6a:5d:
                    be:ee:5c:fe:ac:1b:29:90:49:98:d9:9b:e6:20:87:
                    4c:23:a5:70:5d:b7:86:9c:38:31:83:f0:c4:75:bf:
                    66:3b:90:37:bf:b2:f3:d7:0e:5f:f4:52:ef:d5:e2:
                    70:b0:96:83:cc:d6:46:82:c6:14:b7:81:85:50:55:
                    63:47:ba:6d:23:69:e9:39:08:b1:fa:43:6f:31:b6:
                    2d:92:e9:36:34:2d:4b:21:0f:8a:2e:6c:88:b3:59:
                    d5:ef:e5:93:b7:7b:d6:f8:3d:40:33:b9:ed:cb:45:
                    31:97:20:36:c0:c3:4f:bd:08:71:f9:45:06:3f:da:
                    14:ce:1a:7c:02:64:a5:11:cf:60:cf:af:b5:e7:b3:
                    fb:13:9b:b5:b1:a7:93:ed:af:78:1f:53:39:42:7d:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B6:DB:2E:E3:9C:E6:E3:7C:5B:27:72:75:4B:96:84:F2:17:4A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cb493c23-9729-390d-a805-e1a7f3db8e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:06:e4:2b:83:a4:b4:6e:44:98:5f:c3:7a:3b:ae:ca:81:1e:
         8f:2f:ee:5c:95:16:a2:81:c3:75:09:49:26:0b:20:62:2e:65:
         f2:54:02:b1:65:5e:0f:57:17:16:64:49:6d:f9:2c:4c:9a:9a:
         60:3f:77:84:ed:37:37:28:73:04:e9:85:c6:d9:cb:cf:d8:0f:
         bc:32:65:dd:96:fb:f7:06:ae:ad:a6:26:40:00:bf:3c:c3:e9:
         43:3f:64:97:7e:a9:6c:a0:8c:a4:99:96:94:3b:46:4d:4d:58:
         62:f4:5b:c5:51:e0:21:9f:51:d9:1e:6a:f4:86:fc:80:68:46:
         dc:23:68:6d:96:ab:0f:85:bb:c1:20:e1:c0:ba:e4:8e:7e:04:
         90:dc:2f:1f:6d:d2:97:6f:de:e0:bb:08:5d:eb:68:be:8b:46:
         af:40:eb:fc:92:00:c7:ed:e6:9e:3b:6c:37:b0:60:76:9e:76:
         9e:c6:c3:bf:51:eb:ad:b6:08:d5:ed:42:34:13:dc:4f:64:40:
         cc:e0:df:46:04:7f:bb:26:57:ac:7b:cb:f5:c8:3c:f9:41:59:
         64:f1:5a:3b:a1:f5:31:1d:b4:c4:bf:f3:b9:52:d8:00:1c:71:
         f2:bd:6b:92:c2:fd:72:2d:f9:6d:07:31:f6:9c:5a:c9:e5:42:
         6a:08:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:36:53 2025 by rpki-client