Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa
File:                     fbb388ff-402d-371a-b111-12939dcd0b26.roa (raw, json)
Hash identifier:          XfB5b2hd+vS2r9w94N90TLoaoq0qe67qt+j848IOuZo=
Subject key identifier:   CA:56:B4:0E:61:DC:BA:F3:91:7C:BA:89:79:BA:42:42:1A:21:D5:1A
Certificate issuer:       /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
Certificate serial:       010D0C9F4328584814AA1E1F800180AF37C67240
Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa
Signing time:             Tue 03 Dec 2024 05:45:49 +0000
ROA not before:           Tue 03 Dec 2024 05:45:49 +0000
ROA not after:            Mon 03 Mar 2025 05:45:49 +0000
asID:                     19201
IP address blocks:        143.223.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:aa:1e:1f:80:01:80:af:37:c6:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
        Validity
            Not Before: Dec  3 05:45:49 2024 GMT
            Not After : Mar  3 05:45:49 2025 GMT
        Subject: CN=0029e512-89e8-4829-b4b5-8b6fc753b2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:77:e7:52:be:3f:b7:bc:b7:bd:65:fa:59:
                    ac:0b:51:1f:82:b8:83:47:dd:bd:21:a0:ba:1a:c4:
                    cd:b3:29:a5:f0:6c:3f:52:10:d7:85:e0:4c:39:58:
                    d3:05:6d:9e:76:7a:a1:59:88:93:49:96:c1:f6:61:
                    49:92:1a:f1:39:64:0b:90:8a:5e:cf:7c:6c:93:74:
                    24:85:17:b4:aa:16:00:70:06:54:2b:15:57:f3:bc:
                    f5:a6:d3:49:0b:3f:38:ed:55:d5:71:2c:b2:a0:fe:
                    7d:41:d2:e3:00:52:6c:a3:87:61:8a:bf:12:2a:a6:
                    55:6a:da:2f:c5:e3:2b:b6:33:07:aa:f6:70:c3:12:
                    57:e9:5c:5b:22:24:e9:d3:c0:c6:a2:8c:5f:8f:08:
                    a0:47:52:66:00:b4:4f:6d:3a:c7:fd:4c:28:6c:2b:
                    e0:07:61:ac:09:9e:c6:93:d8:3b:b0:8f:6e:5f:31:
                    f5:ba:ee:0e:79:04:b6:df:b3:75:c2:32:94:53:8b:
                    7c:b7:fd:b7:48:fd:58:06:13:23:2f:fc:3f:0b:73:
                    5f:2b:4c:6e:c3:64:01:4d:28:e9:90:cb:01:32:8f:
                    b6:41:cb:04:ab:50:21:45:80:17:31:04:ac:f2:52:
                    73:8a:b2:1e:cc:67:17:20:f3:48:af:41:95:0c:c9:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:56:B4:0E:61:DC:BA:F3:91:7C:BA:89:79:BA:42:42:1A:21:D5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl

            X509v3 Authority Key Identifier:
                keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e7:e3:ba:11:ab:38:4b:27:dd:48:62:48:19:a4:27:78:ff:
         22:f5:67:45:e7:eb:57:dd:4d:f6:99:68:1e:87:be:47:70:9b:
         13:1f:97:80:ea:d6:7c:39:fa:09:c3:d5:6e:2b:90:14:49:20:
         4e:d4:b1:57:f7:2b:10:b4:90:53:73:e0:8a:31:c7:10:da:a6:
         c7:2b:6e:f4:d0:35:7e:f7:0f:ba:9d:4d:ac:5d:53:03:94:0b:
         d3:6d:b5:a2:c8:b5:20:60:f8:87:7b:b2:7a:9c:63:1a:e2:62:
         66:4b:ca:0b:a6:9b:93:88:b4:d4:90:29:29:9c:d5:87:90:36:
         f5:b9:09:00:fb:73:8b:af:67:2e:a6:ec:4c:7d:99:47:99:5d:
         68:b5:dd:f7:44:2c:7c:98:59:a6:2f:6c:5a:32:cb:84:99:04:
         f4:01:53:ef:ca:11:f8:19:06:a0:6e:ce:fa:a5:9d:90:03:3c:
         97:cd:a2:a4:bd:91:83:6b:92:bf:62:9b:c5:58:34:3c:4a:51:
         27:cc:71:a8:e4:b9:57:8c:c5:26:a1:01:5e:f0:06:14:d1:f4:
         68:39:47:de:66:46:0d:bb:42:e1:c5:13:3b:a8:b0:f7:8a:77:
         ab:7c:0c:3b:22:b5:82:b1:78:84:27:76:20:80:73:a1:f7:9f:
         d0:bc:10:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:40:56 2025 by rpki-client