Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/497d7953-4413-3ee7-8712-ff7511dba542.roa
File:                     497d7953-4413-3ee7-8712-ff7511dba542.roa (raw, json)
Hash identifier:          VKCfwOpVw6+/9Z4vGQ9GRIAsrXuECSrlyG+6Rze0xlw=
Subject key identifier:   CF:50:A6:79:68:9A:2F:F8:B4:8D:27:84:C0:4A:23:DA:D1:19:CB:15
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858488815E50E05261873D1E8A000
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/497d7953-4413-3ee7-8712-ff7511dba542.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     32133
IP address blocks:        64.98.240.0/20 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:e5:0e:05:26:18:73:d1:e8:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=ba9f1f5b-3949-47f2-9d8d-81c07d327ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:fd:20:31:7a:6f:56:cf:77:b7:6e:b3:94:
                    03:2a:f6:da:20:10:7d:53:0d:5d:82:98:a4:7f:7f:
                    c9:03:87:34:60:9c:4e:a5:36:33:d1:c1:62:84:a2:
                    a6:46:84:04:a5:47:30:f3:23:97:4a:6c:45:ed:52:
                    41:b8:b2:8f:99:a1:ea:77:1e:fb:90:d7:98:87:30:
                    97:47:48:37:70:16:3c:90:6c:79:e0:a4:ea:b0:ec:
                    88:3b:eb:73:61:3f:4c:91:84:59:80:e0:e7:8b:37:
                    aa:fd:63:2c:a2:4b:7a:c1:ea:7c:7e:30:24:20:7c:
                    9e:85:72:1c:0e:78:4d:5a:d1:8e:d6:33:b4:3d:37:
                    38:bf:9b:99:07:13:45:dd:13:cb:a7:2d:77:3e:dc:
                    9f:09:30:51:1c:15:5f:82:75:d6:39:bb:a1:c9:1e:
                    bc:7d:6b:bc:a2:9f:00:e1:1e:fb:91:23:65:0a:c8:
                    db:7f:d1:28:6d:e7:7d:49:e2:c2:86:25:66:b3:b0:
                    f0:8a:c5:c8:24:5a:9d:22:5c:62:2e:1c:8c:5f:73:
                    ca:5c:bd:53:df:37:c6:d7:b8:cd:78:0d:96:5f:3c:
                    2c:7d:1c:a8:db:d7:c4:65:e0:8c:34:97:a2:88:21:
                    f1:b6:ce:0c:68:b2:1d:9f:f0:b2:a6:32:4d:34:28:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:50:A6:79:68:9A:2F:F8:B4:8D:27:84:C0:4A:23:DA:D1:19:CB:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/497d7953-4413-3ee7-8712-ff7511dba542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:62:a8:9c:4a:6a:52:f9:a0:99:8a:87:c5:e1:b9:c4:5e:93:
         4c:b8:53:3c:86:9b:1d:01:58:e1:66:79:25:7e:08:0f:6f:b0:
         1f:fb:10:88:d5:70:d6:bb:7f:42:95:59:72:9b:41:10:cc:a9:
         0e:bf:6a:cc:03:3f:d2:10:4b:55:29:10:ff:b9:ad:f6:ec:fa:
         bf:50:c2:e2:4b:91:cb:d6:be:2e:de:23:b6:45:40:49:52:71:
         32:8c:65:c5:85:d2:ac:b8:b1:b7:1f:c6:ea:a2:fd:ac:15:a0:
         72:25:d8:35:77:d9:4e:73:a2:af:8c:24:b1:b2:a0:3d:c7:a8:
         7e:5c:1f:06:ef:0a:d6:08:03:2b:16:3c:41:39:9b:0f:1d:e2:
         b8:59:c7:31:8a:e7:ab:54:43:40:b6:8a:21:7e:8a:d4:a1:af:
         5b:cc:b6:d3:b9:cd:82:bf:9e:6e:e4:d6:83:e0:97:de:8a:a6:
         06:5d:f1:d4:7a:1d:08:ad:be:c5:16:9e:c7:5b:4f:04:e3:66:
         6d:24:60:de:a0:38:a1:7f:2c:d0:0a:6d:61:48:f1:32:00:21:
         8b:79:7d:5e:48:c3:22:79:85:fa:bc:aa:57:4a:52:28:2b:a1:
         3c:ba:40:f4:d3:49:d2:54:b9:c9:22:0d:48:da:03:3d:8c:09:
         2d:cd:07:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:31 2025 by rpki-client