Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa
File:                     fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa (raw, json)
Hash identifier:          +GCkC00cQ1eWgopJjiitJMfsJW48eMT/BoTdAk7tZN0=
Subject key identifier:   28:68:B5:F5:99:AA:B3:3F:1E:0D:29:E7:69:C9:AE:99:85:04:E4:FE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584825617713F6126E7A21C98620
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa
Signing time:             Mon 09 Dec 2024 05:28:11 +0000
ROA not before:           Mon 09 Dec 2024 05:28:11 +0000
ROA not after:            Sun 09 Mar 2025 05:28:11 +0000
asID:                     13335
IP address blocks:        162.158.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:61:77:13:f6:12:6e:7a:21:c9:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 05:28:11 2024 GMT
            Not After : Mar  9 05:28:11 2025 GMT
        Subject: CN=77785292-e46d-4cd2-953f-ddb6d8765a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:e3:5d:a5:5b:f6:b5:6e:e9:01:5b:50:e0:
                    27:fa:ae:f3:19:5b:81:ab:12:02:c7:61:3d:5d:68:
                    24:14:9d:d9:71:58:37:1b:2a:3e:e9:76:e9:e5:07:
                    66:c9:01:d3:d4:65:69:7d:69:17:cb:ce:78:39:b0:
                    93:68:ac:3c:9c:4e:09:9a:e2:6b:f2:0f:4e:71:d7:
                    2f:b9:f7:f4:89:5a:9a:0a:e4:7b:81:64:86:9c:6c:
                    17:4e:1e:8c:10:83:bb:42:57:a0:c9:2a:7b:45:01:
                    d1:aa:f0:b0:c7:16:16:d7:b1:f2:21:ac:9e:a4:0e:
                    6a:67:e9:b1:d6:0d:3a:57:05:d5:7b:9e:82:45:d6:
                    7e:e6:42:6c:5a:b9:56:09:7e:9a:91:2f:bf:c7:ce:
                    98:9a:9b:0d:a3:d6:7d:09:a4:f6:77:9a:21:10:72:
                    79:66:db:20:a2:1e:47:bc:82:d1:36:8f:10:89:24:
                    6c:52:e3:8c:1a:c1:47:6d:04:23:f0:0e:29:81:12:
                    ea:cb:42:bc:d1:dd:a3:a6:f3:ca:d1:6c:52:6c:68:
                    d8:b9:c8:0d:a4:bc:4a:5c:6d:04:91:4a:e6:2e:4c:
                    04:cd:be:d2:67:b6:5b:90:e7:37:a5:3a:2d:e7:68:
                    fa:a5:8a:92:92:07:90:b9:44:79:de:53:f2:c8:4f:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:68:B5:F5:99:AA:B3:3F:1E:0D:29:E7:69:C9:AE:99:85:04:E4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:eb:45:f5:76:1e:d9:ca:59:f4:c8:1e:cf:8f:09:25:bc:51:
         57:be:4f:76:3f:ba:de:60:ab:b6:e2:86:15:4e:ca:8c:7e:47:
         ea:11:2c:b9:80:b6:c8:a9:85:0e:89:13:d6:fe:f6:1c:9d:f1:
         06:b6:2d:d8:53:18:d0:08:3f:f5:1a:79:74:84:10:b6:7e:89:
         44:f3:b3:60:11:97:6a:8c:7c:87:45:3a:48:b0:fb:2a:c5:59:
         ee:c6:44:98:29:e7:ab:bc:86:3e:f4:56:56:0a:87:d6:11:2c:
         1a:67:b6:d2:cc:20:c8:b9:11:f8:d5:df:82:50:22:8d:07:52:
         1f:2c:14:51:1a:6a:b6:9b:ee:98:9f:8c:c5:bd:22:55:27:a8:
         f2:cd:dd:c7:3a:a6:ab:3a:be:66:0f:7a:74:e5:a6:84:e2:b8:
         a1:3a:68:50:7b:ab:9a:2c:47:10:b8:47:8d:6e:81:48:fd:c4:
         88:7d:75:cc:c2:da:d1:7c:6b:b8:02:5a:63:2f:d6:29:db:76:
         c3:05:e8:69:81:76:96:91:97:d5:e3:4f:3e:a9:75:f1:87:d3:
         97:d9:34:78:3d:e8:0c:ef:8d:0d:68:0a:32:df:96:f7:b4:be:
         fb:c9:26:a5:4a:bc:ec:5f:77:59:ac:90:2e:51:c4:1f:0b:c4:
         da:ca:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:22:38 2025 by rpki-client