Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa
File:                     b945e2a1-3f45-305c-afce-b18a9404721d.roa (raw, json)
Hash identifier:          DSMAAagUNrEJnN89MaI2BqpZOP/gCKZ9fSqppVQaLGc=
Subject key identifier:   25:7D:27:C1:82:4E:77:E6:C1:F3:A5:9E:7F:21:A1:7B:B9:FC:20:E6
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F43285848960B5B82EF0496EB818542C0
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     397976
IP address blocks:        195.85.118.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:5b:82:ef:04:96:eb:81:85:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=0a075d2f-b9ad-4182-90a4-8819ce18385d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:17:fa:1e:34:44:7d:7f:2c:a8:bf:5c:01:
                    f4:68:c7:1d:76:47:fa:16:00:a1:d8:10:73:54:d6:
                    aa:14:c8:71:6a:23:4a:f8:97:35:22:c9:a0:e7:48:
                    b0:79:f5:ce:9a:8c:dd:20:62:83:10:50:a4:3d:4f:
                    04:12:26:07:09:fe:5f:60:a5:00:45:41:74:82:9f:
                    08:1b:06:8a:80:33:aa:d1:c7:5a:d3:d1:e7:13:1b:
                    f9:10:44:2b:8d:37:37:5e:76:86:69:05:33:10:02:
                    1d:20:3a:cd:27:c6:3a:6a:b8:94:98:d2:8a:e8:b8:
                    a8:94:cf:72:b6:b6:b4:61:6e:e0:c7:6f:43:0c:7f:
                    52:36:9f:8d:d0:f5:08:5c:d9:a2:ba:a1:34:bc:2f:
                    7d:7b:4a:4c:0e:f1:a3:13:37:90:20:5d:2d:13:4f:
                    e2:96:38:d8:1a:2e:fe:94:4d:4a:a3:29:6f:77:5f:
                    02:ed:6c:b5:13:d4:ce:67:05:bd:e0:56:f0:4e:1b:
                    71:84:64:69:d2:82:dd:bc:64:c0:4d:eb:1f:3b:5c:
                    a3:d1:c7:34:90:65:5a:01:ef:7b:18:7c:5b:4d:22:
                    a5:1e:96:98:58:09:51:6c:87:41:6c:4b:2e:64:67:
                    7a:c7:38:a7:0d:f2:ae:dd:c5:0e:33:8d:e9:78:c2:
                    fd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7D:27:C1:82:4E:77:E6:C1:F3:A5:9E:7F:21:A1:7B:B9:FC:20:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c2:dd:83:2b:44:32:f8:7e:be:47:6e:37:eb:fc:b7:9e:e5:
         3c:48:25:dc:04:89:79:96:25:31:71:8e:ba:67:7d:f4:29:42:
         a4:cf:78:16:7c:88:83:7a:a5:8c:d0:e8:cd:07:88:ea:f9:cb:
         8d:5f:bf:a5:ac:02:10:7d:6d:04:54:01:aa:87:ac:a9:4e:78:
         84:ff:3a:1f:0d:c3:76:1e:28:25:db:ea:31:1a:d0:37:70:a1:
         7d:4b:4d:bd:e4:ab:25:8a:e7:db:b2:cd:15:69:79:4d:cf:37:
         59:bd:7f:50:38:a0:db:ba:1c:1d:80:0e:46:7c:b5:06:41:36:
         39:5c:48:14:0f:5c:74:ed:92:2b:b2:c3:82:a7:c7:49:6e:f6:
         84:57:fb:71:c1:8a:e2:29:3b:63:4b:8e:7a:fa:50:50:21:83:
         4f:9d:9e:af:30:c1:2c:91:15:3c:65:0d:68:eb:98:12:7b:9f:
         73:71:a8:27:8d:66:7e:52:f6:78:d6:e3:a2:54:ae:59:1e:17:
         32:e9:d3:56:72:66:95:f7:7c:f4:f0:12:34:74:78:eb:78:59:
         0e:ae:1d:e2:47:61:2b:0b:07:7d:f2:37:40:c5:46:82:0c:a5:
         71:46:75:54:fa:c1:89:90:3a:9b:00:f4:f3:5e:d5:7a:0f:e2:
         09:df:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:54:01 2025 by rpki-client