Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa
File:                     577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa (raw, json)
Hash identifier:          dc6S2xlPAgYkREAxhH/XBXx0XyY0kfaAuVeXe6CfLZI=
Subject key identifier:   7A:C1:DD:D6:B3:73:01:3F:B2:06:D2:54:34:34:08:35:F8:22:37:ED
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858483E1ABB92AE358CFABFD88980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     22006
IP address blocks:        165.254.238.0/27 maxlen: 27
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:bb:92:ae:35:8c:fa:bf:d8:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=f477cc72-1460-4d85-b79c-cf84a97dca1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:63:e4:cc:47:72:4a:dd:e0:57:4a:90:0a:
                    b8:c8:9d:f6:60:61:bf:d8:c3:1e:36:49:ba:1a:e8:
                    89:7c:53:e2:e1:3f:e8:2a:f6:92:54:2d:3f:c4:ba:
                    57:7c:11:55:92:1a:29:6e:b5:86:2b:59:6c:7d:9b:
                    c2:d2:8f:a6:5e:70:d0:c3:62:35:f2:71:91:4c:17:
                    cf:bd:5f:b8:01:48:f1:2c:f0:38:72:d8:03:45:df:
                    32:e8:18:9a:4a:3c:8a:da:56:32:ef:95:b2:0a:69:
                    86:6b:fd:46:33:13:91:85:5c:47:92:21:5e:d3:c2:
                    95:1d:e9:14:b7:67:49:01:54:f4:32:83:71:30:dc:
                    40:2e:29:a8:84:b1:1a:4d:fe:8d:ba:58:18:94:67:
                    32:ba:79:34:e8:83:38:a4:77:51:9d:e5:5a:df:bc:
                    08:6d:e4:6a:14:21:12:77:43:41:df:7b:ad:a2:15:
                    c7:d7:b5:b4:48:65:85:2b:31:21:d0:66:42:79:0e:
                    24:43:14:80:f4:f4:29:86:a1:51:00:f5:0c:26:fc:
                    96:24:8c:50:fc:2f:a5:0a:fd:ca:b0:69:65:db:f0:
                    63:d3:0b:f6:49:ff:f3:3f:60:e5:f7:0b:1c:51:88:
                    af:2a:f4:67:c8:89:b2:f5:ca:55:27:6a:67:7e:6e:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C1:DD:D6:B3:73:01:3F:B2:06:D2:54:34:34:08:35:F8:22:37:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.238.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:10:04:d2:2f:c6:06:37:9f:bc:25:54:16:05:83:bd:e1:ef:
         90:b5:29:16:24:17:d8:bb:70:c5:13:3b:e6:90:31:83:3a:a9:
         2d:8a:52:92:ba:19:1e:7b:56:e9:e7:ce:d3:20:5e:34:bd:a9:
         12:e0:6d:54:05:c4:c8:e2:cf:aa:6f:27:a9:e4:b8:24:f5:ee:
         36:88:15:8d:33:0d:5f:36:d4:16:b1:0a:80:10:05:4f:4b:f7:
         e2:22:ce:47:8c:65:5e:9d:60:3c:7c:28:77:ca:0d:3f:68:4e:
         09:2c:3b:77:b4:eb:ea:bd:c9:66:41:9b:0f:20:ad:4e:cd:21:
         20:82:7d:ac:d2:1f:3a:b5:3c:4e:66:46:21:73:1c:b4:a9:ea:
         e0:03:f9:38:37:e7:81:08:4c:3e:1e:f7:4c:88:0b:5b:30:20:
         ea:a4:8b:33:51:42:5f:c1:01:95:c0:bf:e0:f3:35:1a:bd:17:
         f7:16:a6:50:79:5f:82:d0:78:44:c5:f3:88:8e:a8:d1:34:ce:
         2d:f5:58:57:3e:51:ca:ac:4b:fc:eb:51:df:e4:6d:2f:45:9d:
         bc:90:fe:2a:2e:28:e6:2b:7b:dc:6f:cb:0d:3e:72:d2:d1:00:
         da:1c:3c:b8:5d:6a:1b:37:b0:83:e3:cf:31:7a:36:34:bd:ef:
         89:ed:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:25 2025 by rpki-client