Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eed0ef01-dee5-3cf9-8308-b126fd46f689.roa
File:                     eed0ef01-dee5-3cf9-8308-b126fd46f689.roa (raw, json)
Hash identifier:          1Ry6Y9vELoJ3EoTJnsRyj6jFk1i5j5RVQt4fpsWdPuk=
Subject key identifier:   67:18:A9:36:7F:56:29:97:B6:E3:F8:EA:25:91:F8:74:56:3F:97:EF
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858483E1ABB637989F38F037A7E40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eed0ef01-dee5-3cf9-8308-b126fd46f689.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     55034
IP address blocks:        204.141.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:bb:63:79:89:f3:8f:03:7a:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=f0e8eebd-9bf6-49a4-963b-2d0acb48d855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:8e:b4:fe:8d:28:32:0d:b4:04:bd:e5:2f:
                    df:d7:3f:42:a7:fd:c1:d7:35:1d:e9:8c:ab:52:aa:
                    b1:d2:fd:d9:5b:dd:5f:a9:c2:73:12:85:95:4e:e5:
                    b0:8d:34:29:11:94:88:43:dc:0b:99:69:70:fc:e7:
                    37:97:a3:3a:6e:37:5e:d1:60:f8:66:bd:34:01:2f:
                    bd:9a:a6:8b:27:d4:42:04:64:4b:d3:2f:34:ea:fd:
                    e9:01:c2:ec:b5:91:7d:f7:c0:83:96:6d:d4:c2:24:
                    7c:0e:28:c9:19:dd:4f:47:46:a8:e6:c4:bf:5e:2f:
                    9a:97:ca:07:a5:e4:e8:3f:0e:12:2e:cb:ed:a6:4d:
                    29:b6:e3:6d:35:c0:3f:7a:23:c1:81:f2:58:4b:75:
                    b7:07:e8:f8:e9:11:40:2e:04:83:7d:3f:8f:32:81:
                    6b:99:12:5e:dd:db:a4:62:7c:06:87:6c:61:ab:1b:
                    a2:d2:57:a8:05:3a:ee:f5:54:b2:ee:5d:93:fe:10:
                    f3:2d:14:6f:09:d0:bc:18:bf:89:00:1d:e5:d1:82:
                    15:f1:16:56:14:6f:d0:4c:a8:5f:c6:ea:96:ee:e8:
                    25:44:ee:cd:81:69:b4:c8:50:b6:3c:cd:67:02:54:
                    c3:d7:51:03:4f:75:38:81:70:bd:40:86:a5:86:1b:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:18:A9:36:7F:56:29:97:B6:E3:F8:EA:25:91:F8:74:56:3F:97:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eed0ef01-dee5-3cf9-8308-b126fd46f689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:10:bf:97:fa:47:32:aa:c1:32:89:f8:42:34:18:5e:13:25:
         68:80:4a:f5:9a:7c:a3:a1:67:d8:ea:d2:2f:4d:ec:25:f1:d4:
         d8:66:b6:14:4c:9f:3b:9f:d9:a8:ec:57:ba:8e:fe:b3:c2:5e:
         fc:01:a7:3f:6c:b3:6e:e7:85:3c:ac:16:72:62:4e:1e:af:fd:
         a0:2a:01:80:fc:e0:fb:49:71:1e:81:8b:f2:e2:20:73:41:05:
         4b:d6:4d:f4:4e:fa:5d:97:a6:cd:99:e1:cc:35:42:54:2c:fc:
         84:07:88:0b:04:b8:20:a1:97:aa:4b:57:99:2d:fc:e2:8f:82:
         87:86:69:f8:07:b0:fc:29:b4:f2:5d:04:da:b6:1c:46:23:6e:
         3f:bc:e8:74:29:bf:54:40:92:57:08:36:2b:72:3f:ee:3d:15:
         94:0f:3b:5f:80:cc:38:25:32:cc:a8:fa:31:ba:45:cf:1d:11:
         c5:e5:c3:0d:8f:81:e6:04:f8:bb:c4:94:b2:d7:ad:37:2b:8a:
         6e:49:08:62:65:f3:e4:5c:61:75:17:f3:2c:ad:f9:4a:d0:61:
         c8:e6:17:9d:77:70:34:f7:6c:b2:17:46:11:25:99:c4:10:a8:
         72:63:b5:05:0c:95:5a:47:e6:b7:be:c4:a0:69:a8:70:40:24:
         c9:e0:c6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:26 2025 by rpki-client