Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/8b72ed14-0b96-368a-9d8d-d94cb69d93e1.roa
File:                     8b72ed14-0b96-368a-9d8d-d94cb69d93e1.roa (raw, json)
Hash identifier:          uguD2v3hAbKr9NpHUtKIUXb8cnCpbLaQZPKNshi3GbA=
Subject key identifier:   5F:48:5F:2E:59:F3:F8:78:D7:1B:91:D3:12:EA:F3:D1:49:36:F8:92
Certificate issuer:       /CN=2513cb93-255b-4158-8458-a4ddc4350987
Certificate serial:       010D0C9F432858484C101D9374D540DF3B309500
Authority key identifier: 61:0D:CA:96:C4:4A:BD:20:78:2B:E8:18:8E:C0:15:97:DA:A6:57:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/8b72ed14-0b96-368a-9d8d-d94cb69d93e1.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     17318
IP address blocks:        199.30.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:1d:93:74:d5:40:df:3b:30:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2513cb93-255b-4158-8458-a4ddc4350987
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=bbf171fd-826d-4c94-a377-a36951a5dbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:da:67:1d:7a:a0:87:73:e4:cd:39:79:5c:
                    a5:7d:11:47:c2:8a:48:34:cd:12:f1:b6:d1:85:5d:
                    eb:bd:e9:2e:4c:8a:d1:fb:d0:b2:9c:bb:1e:b0:c9:
                    30:68:e7:8e:e2:38:61:0e:f5:d9:55:35:04:97:a9:
                    38:38:41:7b:17:3e:61:70:ef:da:b3:ee:1c:a7:67:
                    e0:02:de:76:67:4d:bc:f6:df:da:1a:c4:f2:b9:3c:
                    56:3e:9f:7f:b0:35:d6:03:ee:48:30:30:ca:d0:cf:
                    c0:66:e2:be:98:e0:25:94:3d:e7:09:78:d4:c5:51:
                    7c:16:47:0c:62:34:1c:e4:32:0b:07:c9:ef:92:cb:
                    2d:d9:53:e6:2a:b6:c6:51:10:18:42:5c:b4:6f:5c:
                    bf:4a:87:33:05:70:41:78:c9:73:03:cc:64:24:d2:
                    ca:f3:ba:61:90:9c:98:b5:0e:3a:e3:c0:1b:56:19:
                    30:60:fb:7f:e1:75:d0:6a:a6:1b:c8:8b:0e:55:d6:
                    98:ed:c3:13:0b:97:22:fe:b7:0d:d0:93:63:00:74:
                    ab:0a:66:3c:90:d1:71:4a:34:4c:87:ad:d0:f9:59:
                    ca:4e:1a:43:7f:f5:ca:b9:f3:d1:0a:43:77:63:72:
                    e3:d3:29:d0:27:40:e3:67:e9:7c:6f:22:c1:87:c8:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:48:5F:2E:59:F3:F8:78:D7:1B:91:D3:12:EA:F3:D1:49:36:F8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/8b72ed14-0b96-368a-9d8d-d94cb69d93e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987/2513cb93-255b-4158-8458-a4ddc4350987.crl

            X509v3 Authority Key Identifier:
                keyid:61:0D:CA:96:C4:4A:BD:20:78:2B:E8:18:8E:C0:15:97:DA:A6:57:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2513cb93-255b-4158-8458-a4ddc4350987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:07:6b:63:3a:4c:ea:2a:79:ee:5c:dc:7f:1c:06:64:b5:
         fb:fd:19:ae:09:6b:3b:e8:3f:81:0f:0e:de:10:0b:6a:11:a0:
         b0:68:73:4c:c0:6c:5b:4b:5c:5d:1a:b2:bd:85:c7:7e:b7:73:
         a4:07:d6:a0:58:0c:4f:eb:26:57:62:04:cf:0e:44:34:2f:06:
         79:b5:d2:10:0e:2d:9f:93:28:ea:1b:c4:d5:89:05:fd:6c:80:
         72:59:ac:cf:2f:16:9c:8e:26:9a:52:07:9c:53:8c:21:b1:58:
         0d:76:d6:c4:2a:fb:6a:45:a3:e0:73:0d:c8:ef:92:84:b1:70:
         33:a0:01:b9:82:3a:64:04:c7:16:ab:67:66:68:76:4e:6c:1a:
         c7:a9:17:b8:81:f2:3b:15:d1:df:fd:26:46:e9:90:ba:dd:62:
         22:c4:46:cf:a5:d0:9b:d3:cd:30:54:38:a0:d7:95:0e:51:7a:
         8b:9b:ae:73:62:56:49:90:06:52:b9:de:b9:23:88:cf:28:6b:
         5e:40:33:0f:f1:e9:fe:21:fc:34:58:64:33:a3:f1:83:2f:fa:
         ea:f6:c6:87:96:9b:36:b7:7d:b5:dd:61:9e:43:78:5e:87:12:
         f5:8b:51:59:0c:35:1e:4e:95:bd:54:11:9d:e7:42:84:07:14:
         48:94:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:55:34 2025 by rpki-client