Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa
File:                     7cc02203-158d-396c-b655-061c5cbbf221.roa (raw, json)
Hash identifier:          iAmgJTetM0Jzl0PBDql4r7c+kmvsWnFfJyqbXG3Maxg=
Subject key identifier:   A2:5D:E5:E0:64:23:44:82:DD:9B:FE:E4:01:EA:6A:C6:4F:0D:24:0B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584858A05CBE8FDBAE4A6951BF80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     26004
IP address blocks:        165.254.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:5c:be:8f:db:ae:4a:69:51:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=ac38cb47-1586-4828-9049-709a03125124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:f1:af:ab:02:d7:9f:b2:7a:08:ee:01:43:
                    40:69:4d:dd:e5:dc:14:cf:0c:e9:b5:42:0c:04:07:
                    10:f9:c5:ee:f8:90:38:c9:af:73:3b:b0:68:33:cb:
                    80:64:52:22:bb:6e:ba:35:86:81:8c:ab:e8:21:32:
                    81:b9:cf:95:f6:c0:e5:73:4e:9b:05:87:6b:d5:87:
                    36:b2:53:82:b8:d5:72:49:eb:58:8b:ab:d7:01:46:
                    2e:f2:02:33:59:60:bc:26:64:a4:a4:75:04:fd:18:
                    00:d2:9e:af:57:b5:7c:35:eb:f5:78:8a:75:9a:d3:
                    8f:d9:10:92:e6:c9:20:b9:f0:84:38:2b:ac:aa:2b:
                    8e:dd:d5:1e:4e:38:a9:97:99:aa:0b:bb:f2:08:71:
                    90:62:80:7f:a1:a1:f2:d1:e6:90:8d:cd:88:2e:f9:
                    37:48:98:38:29:9a:0c:ac:17:e6:cc:7d:a2:4f:9c:
                    a1:6a:9e:bc:04:5a:b6:08:87:97:49:f0:0e:3a:a9:
                    14:01:82:3c:00:d4:28:81:cc:5d:8a:e1:eb:86:2f:
                    ca:c2:20:28:e3:37:ce:41:6a:2a:0d:ff:71:c1:00:
                    39:62:b9:81:85:00:87:8b:93:69:bc:e5:e6:4e:cf:
                    b0:3e:d5:05:1f:82:3d:cc:8c:6b:a2:1c:d5:68:62:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5D:E5:E0:64:23:44:82:DD:9B:FE:E4:01:EA:6A:C6:4F:0D:24:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:57:17:21:9c:7f:1d:bb:c0:c1:9c:79:5a:64:70:97:83:ec:
         8b:27:e0:13:fc:78:55:43:5a:6d:7a:9e:e5:e3:6b:62:32:96:
         2c:a5:75:9b:a3:4d:7b:a6:f2:41:5d:a5:73:0f:48:66:a2:a8:
         c6:3c:51:f0:b1:57:38:ea:2b:9a:f4:79:98:c6:6b:63:30:89:
         5d:0c:03:e3:09:68:eb:11:32:eb:ab:8f:24:d1:3c:08:8f:0d:
         27:41:e9:1e:c6:71:7c:b1:5b:60:be:3c:3e:6d:56:96:14:00:
         0b:a7:3e:68:0a:d5:19:02:a3:5d:ff:65:e8:8a:ae:2a:37:fe:
         bb:d5:de:80:d1:0d:61:21:46:52:cc:74:8c:31:7a:a3:a6:02:
         f3:34:f9:62:51:df:13:5c:bb:18:5d:a3:03:a6:f4:c0:a5:ff:
         54:1c:30:58:b2:55:07:0a:9b:cc:a5:9d:5c:2e:c9:eb:28:cd:
         26:79:c8:a0:0b:16:a0:94:22:c1:fe:6e:6a:33:3f:36:94:7c:
         aa:82:04:9e:57:98:f9:35:ab:f0:95:cd:b7:00:6a:c9:e8:8c:
         b0:18:29:e6:a2:49:b4:2b:58:84:30:cd:c7:91:1b:e5:05:0d:
         5d:78:d2:ee:bb:a0:0e:eb:d2:07:48:ef:7b:c1:dc:3c:ec:2f:
         bf:0d:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:33 2025 by rpki-client