Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9829d3a1-4ab8-3ab2-a4ff-2a2af6df1e58.roa
File:                     9829d3a1-4ab8-3ab2-a4ff-2a2af6df1e58.roa (raw, json)
Hash identifier:          Xzh6D36/ewea/E5hOrbEfpq97N7WoHYILJSaI0IRJws=
Subject key identifier:   C5:FA:DC:23:89:F4:A4:C5:C4:0A:5A:6A:61:87:84:BC:2A:95:1F:96
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584838855DE84218B64932E1ED80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9829d3a1-4ab8-3ab2-a4ff-2a2af6df1e58.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     1225
IP address blocks:        165.254.60.80/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5d:e8:42:18:b6:49:32:e1:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=9fd6ebb4-1b5e-4148-8922-fc4ce6f09997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:a8:59:be:5e:14:76:8d:05:d1:0b:a2:13:
                    82:c7:a0:27:8d:9d:9f:bd:bc:ec:88:ad:ea:5f:55:
                    7b:ce:36:ad:d5:d0:1d:a9:57:10:cf:d4:e3:2c:bf:
                    b8:11:4f:61:43:6e:f7:a4:ea:5e:d9:0a:f2:15:af:
                    91:6e:d1:ee:2f:62:25:86:84:8e:68:9e:ef:c9:32:
                    b9:80:e7:79:46:54:47:a3:9e:69:d8:f5:03:04:31:
                    32:dc:21:cd:ee:fa:28:ed:e0:e4:d4:d9:d4:0e:e8:
                    a2:20:49:29:4a:6a:1e:00:d4:6d:d0:0b:a2:2c:0c:
                    7b:3e:6e:dc:f8:9b:e0:d6:03:b1:3b:bc:5f:3d:e2:
                    c4:85:44:b0:1b:15:fb:e2:be:35:8a:f1:b4:e5:8e:
                    17:01:6a:b5:a9:4c:9c:cb:c4:db:fa:41:9f:6b:b1:
                    5e:27:bb:85:91:ce:07:3e:9b:15:c6:0f:0d:22:ec:
                    dd:7b:10:b0:6a:13:fc:9b:8b:c6:04:fc:69:88:ef:
                    1c:53:72:0f:25:39:09:0e:16:41:8a:8f:b2:75:17:
                    bc:21:e2:17:80:e4:7d:d5:f8:be:3a:f8:dc:2e:5b:
                    f3:a9:37:07:42:a0:2e:51:f1:b7:e4:4d:7f:22:0a:
                    94:59:5c:b1:04:cb:52:4e:91:12:39:30:d2:fa:83:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FA:DC:23:89:F4:A4:C5:C4:0A:5A:6A:61:87:84:BC:2A:95:1F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9829d3a1-4ab8-3ab2-a4ff-2a2af6df1e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.60.80/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:66:b2:df:f6:ab:ee:28:b0:3f:20:f1:69:16:19:69:8e:6d:
         2a:d7:f2:1b:b2:09:c2:35:ef:c0:31:b6:1c:f8:bd:67:57:57:
         f3:98:ca:2c:85:33:a8:f4:65:3e:fc:4d:6e:63:8d:68:bf:f2:
         ed:7d:cb:7e:04:f5:7f:1b:4b:85:ec:47:f5:d5:ef:40:89:14:
         4f:d1:de:9e:96:00:5f:3e:39:39:a7:3b:b9:19:6e:e9:bc:20:
         49:50:ad:28:38:62:2d:c2:6f:5c:64:97:8e:c7:15:69:1b:0b:
         20:92:9c:ed:14:3e:6c:89:ae:45:5f:fb:3e:68:e1:34:11:b6:
         3b:13:3f:86:73:53:1d:c4:17:3e:82:e6:28:81:2c:0d:65:b9:
         06:b7:58:38:cc:6b:23:40:36:e6:b1:6f:78:d1:fc:26:95:0d:
         6d:8e:22:69:91:43:2f:a9:a8:c4:c3:04:ec:23:11:71:87:58:
         08:83:81:1f:7f:95:4c:d8:22:6a:c2:d0:ba:b5:7c:71:38:24:
         00:b7:6b:a6:06:67:93:86:14:6d:5d:48:08:41:c7:37:b3:be:
         71:bc:97:6f:c5:4d:d7:91:1c:61:7c:4d:aa:97:65:39:6a:1a:
         45:4f:da:dd:a1:35:65:27:be:62:3a:34:c6:22:dd:64:f9:90:
         1a:64:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:00 2025 by rpki-client