Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea503a07-330e-3d72-8188-17594c9fada5.roa
File:                     ea503a07-330e-3d72-8188-17594c9fada5.roa (raw, json)
Hash identifier:          M3qiLKiexzm7QwKGN3pQIHDzO/ZirrIots2mbVG7xy8=
Subject key identifier:   1A:7A:3C:A8:A2:73:38:25:8A:D7:C1:B6:C5:F2:5D:C7:67:DC:93:DC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848279B62AACD6D80ACA37AE500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea503a07-330e-3d72-8188-17594c9fada5.roa
Signing time:             Tue 10 Dec 2024 00:36:30 +0000
ROA not before:           Tue 10 Dec 2024 00:36:30 +0000
ROA not after:            Sun 09 Mar 2025 23:36:30 +0000
asID:                     13335
IP address blocks:        172.64.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:9b:62:aa:cd:6d:80:ac:a3:7a:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 00:36:30 2024 GMT
            Not After : Mar  9 23:36:30 2025 GMT
        Subject: CN=b3431ad3-de7d-4b12-9c56-d09735030ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:c4:f0:7f:00:ea:38:99:cb:ff:02:e2:e3:
                    b8:5b:58:40:a1:1e:74:6e:f7:f4:bf:d4:be:70:a5:
                    ff:9c:67:93:fe:44:7f:bc:15:15:dc:95:52:38:b3:
                    f0:35:39:b9:bc:63:64:77:a8:5e:49:b6:b9:ac:05:
                    1d:47:78:a2:85:7b:3a:94:05:05:d4:0a:0f:30:d4:
                    30:34:a3:cf:f0:11:4c:1c:34:fd:f7:da:d0:42:b9:
                    31:c3:d8:2d:56:98:6e:db:58:5b:50:f4:82:ff:85:
                    57:97:43:e4:b1:a3:6b:2e:69:b5:c1:b1:83:40:7a:
                    55:3a:a9:8c:41:52:b5:1e:07:41:16:22:85:fa:ad:
                    68:54:18:63:bd:35:51:16:5f:d0:56:43:10:11:8b:
                    05:ce:34:d0:13:64:31:0c:fa:79:f0:1a:6e:39:91:
                    c6:ab:96:15:d6:75:1d:8a:bf:bb:ad:bc:6f:90:6f:
                    52:70:73:80:7f:3b:43:85:e7:f2:ee:3c:c2:c3:78:
                    52:23:64:96:90:a1:5c:62:0c:40:ab:ea:34:98:d6:
                    71:0d:aa:92:61:2c:1c:6b:68:c6:51:98:92:de:28:
                    02:ec:0c:3f:40:d1:01:ab:ec:50:9c:6e:39:d8:8a:
                    83:5a:56:51:f8:a2:f6:31:30:f1:13:c3:71:0b:cf:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7A:3C:A8:A2:73:38:25:8A:D7:C1:B6:C5:F2:5D:C7:67:DC:93:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea503a07-330e-3d72-8188-17594c9fada5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:eb:df:89:b7:4a:a5:aa:8b:86:82:58:2a:35:57:be:f0:
         74:1c:f4:14:95:cb:b1:da:3a:95:e4:9d:b8:ec:a0:b7:ed:b6:
         7e:1c:47:31:ad:83:31:ad:65:60:9c:ff:73:55:df:53:c2:fb:
         25:bd:04:3d:23:a8:50:4c:e8:b3:3e:54:38:16:59:2a:2f:07:
         3c:91:bb:6d:d9:2b:db:b6:75:a4:8d:7b:b1:0c:25:0a:27:3d:
         7f:2a:de:73:f8:5c:67:e4:7f:14:ed:3d:33:f9:a6:82:61:e7:
         fd:40:92:dd:7e:01:72:b4:ac:b6:b7:e5:12:c6:3b:b1:77:b5:
         c6:5a:60:b1:6b:de:53:9f:f1:d6:f7:30:fd:b7:10:dc:4f:00:
         64:23:19:05:b5:49:3f:aa:12:9f:af:4e:0f:53:5c:78:2a:ed:
         ea:d6:39:46:77:d1:42:c4:11:e0:24:f8:bc:73:fd:27:9c:55:
         d4:bc:bb:3c:b4:ab:71:4c:aa:83:59:d6:38:64:22:a1:ab:2b:
         10:48:93:bf:4e:e1:05:a8:b8:4c:a7:48:9e:d8:8b:21:b6:3f:
         19:0f:21:8f:f0:b0:3d:09:c9:5c:2d:54:5d:d0:08:f1:c3:af:
         9c:08:6e:41:94:65:cd:8c:20:8f:7e:4a:37:7c:3c:fd:44:50:
         74:ac:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:07:55 2025 by rpki-client