Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/9f0c2946-1408-318b-8471-4ca32d89ac0f.roa
File:                     9f0c2946-1408-318b-8471-4ca32d89ac0f.roa (raw, json)
Hash identifier:          fsdhV/OYqQP++1yUPJZXmNtV3I91CPpMstRW2fFb8Mc=
Subject key identifier:   3C:CB:B7:48:4E:D3:94:8E:57:E5:6A:82:2E:25:83:96:91:52:7B:C8
Certificate issuer:       /CN=ee028edb-9e33-45f7-b0cf-c014e2010825
Certificate serial:       010D0C9F432858487755C68756E8EDA5FC3A2C00
Authority key identifier: 64:D6:4F:90:FA:6A:5C:F8:ED:7E:F8:15:23:EC:55:15:25:0A:CE:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/9f0c2946-1408-318b-8471-4ca32d89ac0f.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     53745
IP address blocks:        140.235.52.0/22 maxlen: 24
                          2602:811:f000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:c6:87:56:e8:ed:a5:fc:3a:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee028edb-9e33-45f7-b0cf-c014e2010825
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=f7b17434-52ab-4d8c-8b89-a552fe45f7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fe:ae:b6:27:e2:25:82:4e:16:cc:05:78:c3:
                    df:37:be:e9:50:3d:92:cd:45:1f:61:12:96:ba:cc:
                    bf:82:b3:35:00:50:83:75:5e:85:db:da:7c:56:59:
                    01:fa:89:a0:f2:57:a6:b0:59:b9:cc:64:de:1c:64:
                    a9:6b:28:8d:a9:c1:d0:3f:e6:e0:92:83:be:76:00:
                    a4:93:17:e5:bb:63:8d:24:4a:e5:3b:84:60:18:01:
                    dc:11:77:3d:d9:2e:36:84:fc:6d:cf:42:d6:a6:d9:
                    1c:b5:06:1e:2b:cb:ef:94:86:75:70:6b:0a:f7:b9:
                    71:ee:d5:b3:04:e6:58:ed:52:84:2d:04:b1:d2:94:
                    ef:1f:bc:82:f1:26:f6:49:51:e0:8f:f9:b5:4c:76:
                    1b:f5:d4:43:02:39:fe:d0:2f:d8:9d:8d:cd:6c:89:
                    ea:88:aa:82:76:f3:37:80:bd:80:d3:06:b7:52:70:
                    b7:a7:f5:77:f4:45:29:88:1f:c2:f2:6d:b7:2b:25:
                    e3:5b:42:09:ea:c4:7b:f2:5f:00:a0:ad:a1:21:a9:
                    e1:b9:c2:b6:71:66:1d:04:38:0b:4e:7c:8c:75:fa:
                    35:8c:66:18:ac:03:b6:0a:2f:7a:2a:ee:9a:81:fa:
                    54:33:bd:a1:d6:f6:65:7f:cc:f0:51:20:9e:10:d0:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CB:B7:48:4E:D3:94:8E:57:E5:6A:82:2E:25:83:96:91:52:7B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/9f0c2946-1408-318b-8471-4ca32d89ac0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/ee028edb-9e33-45f7-b0cf-c014e2010825.crl

            X509v3 Authority Key Identifier:
                keyid:64:D6:4F:90:FA:6A:5C:F8:ED:7E:F8:15:23:EC:55:15:25:0A:CE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.52.0/22
                IPv6:
                  2602:811:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:8a:3e:fd:e3:23:78:d5:bc:44:41:d8:3c:f9:50:64:6f:
         84:94:db:aa:e2:2c:8f:27:97:03:dc:fa:55:28:7a:7d:4f:bd:
         db:31:d1:39:56:2c:82:c4:9f:51:53:2f:ce:1a:ce:95:28:c7:
         eb:d7:39:ee:b9:c8:73:d7:1d:52:32:7f:6c:99:6c:b0:c5:5b:
         68:95:6a:04:33:4d:6f:15:c2:b2:bf:fe:cf:d0:cf:89:df:fe:
         4f:31:45:7b:22:de:97:6e:71:e1:ca:16:eb:9e:8a:98:1d:b9:
         ad:e0:68:28:43:b3:bc:34:ec:6e:6f:3a:63:5f:69:2a:7e:20:
         ce:99:9d:70:1e:9d:32:8c:8e:fd:2a:73:18:58:18:23:09:63:
         3c:a9:80:6a:53:b8:b1:57:c2:73:8b:ed:c5:d2:96:17:6a:58:
         84:30:0e:b7:6f:c7:bc:45:f7:63:09:85:91:2e:30:90:5a:93:
         47:00:0e:64:9c:9b:8e:33:09:a4:6a:9e:7a:8a:1f:32:5a:1d:
         60:a2:6b:e3:62:8c:16:a8:ff:16:01:47:e1:f2:75:69:c1:25:
         e8:81:c8:c8:a3:90:ef:f4:b7:d8:19:e1:39:4e:cb:4a:44:d6:
         28:41:b3:9a:89:f3:e4:24:74:b8:aa:7f:20:5b:a1:d1:42:81:
         47:1c:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:55 2025 by rpki-client