Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5259d6e8-587f-3939-8be3-016d945818ce.roa
File:                     5259d6e8-587f-3939-8be3-016d945818ce.roa (raw, json)
Hash identifier:          9QziJsn0FT+acreVhGsDtCDI/LXf7zwQdzLJYLSbyHo=
Subject key identifier:   EB:80:1E:2F:15:06:37:0E:C3:38:43:B8:5D:16:01:8F:28:9A:85:C4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285848222FE7965B33477D32419B00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5259d6e8-587f-3939-8be3-016d945818ce.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     27630
IP address blocks:        140.174.128.0/19 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e7:96:5b:33:47:7d:32:41:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=802d4760-cf6a-47c4-8629-1f71b6c758a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:9e:6c:ee:2f:d5:9e:05:5c:70:90:aa:18:
                    f6:9e:24:b2:e9:97:0d:88:62:b3:d0:24:0a:57:dd:
                    d6:e8:ec:91:00:39:49:2a:5e:66:e0:b3:7d:ad:65:
                    7b:2d:96:a3:f4:f4:cd:9a:21:17:47:c2:6d:08:c4:
                    92:3c:44:90:0a:a9:a8:a5:db:0f:ef:c3:45:17:cf:
                    c8:ee:43:9f:1e:69:19:3e:75:84:9c:4c:bd:31:f0:
                    b9:bf:e5:2a:28:64:6a:3b:a6:59:d0:27:90:1f:dc:
                    53:5a:c9:ed:c1:dc:6a:bf:6d:a7:89:92:d8:ce:4b:
                    f0:63:69:3e:e4:a7:21:0a:29:c6:3a:9b:28:d9:6e:
                    56:d6:30:2d:9c:75:26:a4:00:ee:8d:bc:99:b1:4b:
                    09:c7:be:a4:31:f0:e3:c3:1d:d1:20:60:bb:1e:e8:
                    ee:cd:31:17:53:33:58:a7:df:a5:fa:dd:38:f7:49:
                    b2:fd:04:22:26:03:be:2e:0c:fc:40:1b:aa:de:5f:
                    03:59:3b:d4:ad:8f:5f:26:c8:2e:91:e7:f4:d3:4e:
                    f3:b8:cc:fa:d0:71:fe:85:36:06:bb:9a:ef:af:9e:
                    5a:63:b6:af:03:69:be:05:1c:54:85:bf:5f:59:1b:
                    17:1d:d9:dc:96:a8:c9:ab:5f:a5:f5:f5:29:6c:91:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:80:1E:2F:15:06:37:0E:C3:38:43:B8:5D:16:01:8F:28:9A:85:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5259d6e8-587f-3939-8be3-016d945818ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:38:35:46:21:e8:9f:93:f4:11:1b:30:65:dd:d2:d4:5c:
         cb:bb:77:b9:8c:bc:78:69:7d:94:e8:c1:b5:69:ea:ee:d0:cd:
         83:ad:9c:14:47:a0:5d:1d:5d:b4:f4:84:c7:f9:d3:08:e2:9b:
         e4:34:27:0e:0a:6e:6d:32:66:47:78:1d:f6:a8:f8:09:2b:75:
         59:0b:87:1b:18:84:14:17:23:3d:84:35:8b:cc:1d:e0:da:dd:
         5e:f3:30:87:44:fb:4b:db:d1:91:a9:be:72:f6:c0:7f:2d:89:
         1a:dd:d2:b1:b6:7e:c7:79:d7:bd:a1:f5:74:65:7e:a8:3f:42:
         39:99:c6:17:e1:cd:88:f8:e6:15:3b:a3:30:c6:2c:d4:9a:43:
         fa:08:df:e3:bb:7e:1e:f1:0b:a8:bd:3a:d3:04:fb:4b:a5:01:
         1c:fe:6e:63:74:d5:66:45:30:99:e4:5f:d6:b7:46:e4:03:4c:
         60:65:93:cc:d5:0d:61:28:d6:f7:3a:0b:0e:1d:72:f1:2e:22:
         d5:ff:56:e0:3e:db:75:68:d5:7a:f0:77:b2:cd:5e:50:05:23:
         86:09:df:cc:c9:97:2a:81:ef:c5:33:a5:b0:0e:bb:f3:4c:b2:
         e0:50:a8:8e:f0:c4:8e:a8:97:9b:db:a9:6c:8a:f3:e3:a3:8d:
         05:79:13:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:31 2025 by rpki-client