Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/41fa46c5-b2d4-38bb-9e0c-8bf594b94940.roa
File:                     41fa46c5-b2d4-38bb-9e0c-8bf594b94940.roa (raw, json)
Hash identifier:          Sgvt3VCsjXZeTC+wm7rVEkGNyxKSFIcrv8leOVLgW7Q=
Subject key identifier:   75:17:0E:35:5A:F1:39:C6:E1:52:69:66:60:47:26:6A:0F:9C:32:D2
Certificate issuer:       /CN=1b1fd062-f802-4363-ad37-7232f990c625
Certificate serial:       010D0C9F432858487325BAD76209AE9057F636C0
Authority key identifier: D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/41fa46c5-b2d4-38bb-9e0c-8bf594b94940.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     397593
IP address blocks:        158.51.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:ba:d7:62:09:ae:90:57:f6:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fd062-f802-4363-ad37-7232f990c625
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=475b6070-0787-4c87-b28d-7a82fedd5bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:3a:6d:14:bf:d8:77:7e:75:3d:da:48:e1:
                    3d:21:04:fc:2c:cb:7b:ca:fe:54:cd:cc:8f:8f:f7:
                    a2:0e:dc:3f:25:c7:d9:1d:6d:66:46:98:b7:28:94:
                    94:31:b5:fc:fa:de:c2:2f:31:cb:01:75:02:4a:66:
                    54:0e:69:0f:fe:ef:98:2c:a9:9d:0a:fe:df:21:e4:
                    75:c9:7e:d4:1f:e1:f5:dd:ab:b7:fc:90:41:69:03:
                    a3:77:ad:f8:64:e3:74:a8:f5:b2:76:33:b1:3a:55:
                    4b:25:a6:f8:9b:27:74:ea:41:06:5d:5e:5d:62:a8:
                    30:ae:8f:d9:41:70:80:3e:91:c7:0b:73:5a:fd:7c:
                    0b:16:0c:f1:ed:8b:6e:b5:6d:8f:aa:fd:86:8a:8c:
                    83:49:6f:63:ae:70:44:04:44:4d:72:3c:60:eb:e0:
                    74:d0:ee:d5:d7:d5:e4:3d:7a:8d:b2:90:ee:63:7c:
                    97:6d:ec:4d:6d:6b:03:91:f2:0a:9a:0b:dc:a7:01:
                    64:d1:8d:00:ec:99:6b:04:1e:2b:23:1c:39:4b:82:
                    a4:d8:51:c6:65:da:98:66:ec:76:1f:0c:6c:b0:cc:
                    2d:2b:37:15:59:f3:2f:87:0e:e0:fc:48:5c:fc:f6:
                    dd:e7:43:7f:63:b2:1c:f5:d3:8c:8f:55:2b:db:b2:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:17:0E:35:5A:F1:39:C6:E1:52:69:66:60:47:26:6A:0F:9C:32:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/41fa46c5-b2d4-38bb-9e0c-8bf594b94940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.crl

            X509v3 Authority Key Identifier:
                keyid:D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:2b:c4:c1:74:36:5d:b2:a7:93:fa:e7:e3:72:1c:07:19:
         49:d7:fb:ec:c4:30:8e:d2:5b:68:57:80:96:f0:c5:42:1d:b1:
         46:3f:32:cd:8a:c3:e2:e3:64:6f:18:c4:a5:9a:24:7d:c6:27:
         e1:89:32:2a:ae:8a:7f:18:0d:7d:8b:ea:61:e8:6a:b6:92:60:
         08:1b:97:37:68:8d:10:e7:80:58:c9:3c:5a:6d:46:52:a8:05:
         29:b3:c9:2d:94:4f:50:3a:45:6a:9a:79:b7:d1:4b:50:20:1e:
         73:10:5e:82:a9:84:48:9e:1d:cd:e9:8a:b5:cc:a5:a2:b5:83:
         8d:d8:1d:08:44:cd:60:6c:fa:fa:42:cf:51:73:17:80:d5:b3:
         f1:db:12:13:da:52:f7:49:71:8c:36:ff:e6:8c:0c:f0:9d:3f:
         fd:48:28:90:d7:83:81:c8:42:d6:25:d9:65:5f:53:f5:dc:5b:
         77:25:d7:57:62:c4:3d:9a:70:d3:e5:c3:31:4f:a1:b6:5a:25:
         91:0e:ec:20:78:63:53:32:38:f9:0a:30:88:f6:a4:31:1a:46:
         0d:04:84:62:a6:26:81:54:eb:61:7b:43:35:b9:21:dc:2f:e1:
         6d:08:59:13:96:e0:b6:fd:2e:48:0b:fb:98:1f:29:29:d0:b0:
         ff:a8:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:59:03 2025 by rpki-client