Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa
File:                     feab4e24-c427-3262-ae07-c36619833029.roa (raw, json)
Hash identifier:          l1Z+TR9JbpBLsu7dq39Mi3bydB9Q9zAQvtJQqUiMxtk=
Subject key identifier:   BA:27:7B:93:CE:13:6F:B3:69:7E:C1:C4:36:B0:87:6D:21:8C:2D:75
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F43285848854B423F61940D2BE43B9080
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     46841
IP address blocks:        162.218.240.0/21 maxlen: 24
                          162.251.0.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:42:3f:61:94:0d:2b:e4:3b:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=8f7ae332-a198-401e-a50d-170f51e01294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:4a:02:d4:25:60:39:6a:b3:88:c4:f0:c4:
                    3c:42:a5:bc:17:79:90:09:2f:09:ca:00:d5:51:b0:
                    23:c3:9b:24:bb:1e:11:ac:fe:6a:37:28:a2:5b:93:
                    0d:99:38:00:1d:69:75:25:b3:ff:18:17:df:20:c2:
                    1b:85:c2:b6:b6:e9:03:71:75:d3:99:a9:c9:13:ed:
                    21:93:9c:cf:7c:d2:ab:ca:65:37:d3:7d:b5:f6:3f:
                    79:17:ef:10:16:3f:d7:03:f3:a0:3b:b4:4f:7b:0c:
                    b4:1e:f1:16:c4:cc:76:08:41:53:22:32:52:f8:03:
                    45:36:a3:db:34:46:98:cb:a2:8f:61:08:3c:7e:54:
                    61:50:39:0d:af:05:4a:48:46:b7:f7:65:4e:6a:84:
                    e1:50:b8:ef:5c:09:44:40:7d:95:f1:fb:90:21:67:
                    35:31:89:b1:95:ae:d5:5f:a2:cf:1b:75:81:71:b1:
                    72:c3:62:5f:4c:9c:19:82:9e:4a:02:de:c8:bb:90:
                    1a:e5:d3:fb:0c:a6:41:2c:4e:92:4f:5b:7f:ac:9a:
                    25:90:ec:86:be:93:56:70:1d:b7:7c:dd:25:bf:76:
                    a9:54:23:f9:e6:dc:32:85:69:cc:14:3a:31:85:93:
                    4e:f9:2b:69:47:32:d5:46:99:69:27:9c:45:79:d5:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:27:7B:93:CE:13:6F:B3:69:7E:C1:C4:36:B0:87:6D:21:8C:2D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.240.0/21
                  162.251.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:62:90:aa:88:2d:5d:b3:d7:50:43:4f:21:e8:9a:33:59:2e:
         04:f9:05:b2:44:d1:91:c6:06:a8:16:2d:bf:36:9b:0e:c8:e8:
         36:d7:65:f1:0c:4b:ce:84:ef:8f:cc:f2:01:07:af:89:88:fe:
         8b:2d:29:aa:0f:d5:d3:4e:6b:76:bf:86:a6:55:b5:c3:d6:06:
         ab:57:f0:be:b7:c7:47:f4:17:5e:e4:24:a1:f6:4f:1c:89:27:
         bf:21:42:43:c2:8c:29:bb:80:73:56:c2:63:ff:bd:89:3c:27:
         d6:0b:b6:f7:01:64:b9:85:b8:a0:90:58:6d:69:82:dd:68:10:
         40:69:00:1b:c4:3d:de:e4:68:ce:33:df:59:18:26:67:69:63:
         ef:7a:92:c7:f3:63:66:48:d9:f7:f9:3c:1e:b5:2c:53:1a:bf:
         91:78:62:de:73:48:03:0c:11:f8:aa:a6:d3:02:ef:63:a4:8a:
         fc:e5:d2:02:2f:70:fe:6e:b2:15:e8:20:f0:7f:74:76:b8:29:
         ef:7d:f3:a2:d8:ea:24:c7:8b:63:fe:a3:c4:ed:61:08:1d:d3:
         70:29:cd:a4:45:8c:c6:04:bc:45:f4:b3:70:94:fb:94:c1:d4:
         3b:d0:63:b9:ec:71:3a:ef:93:34:a3:39:b7:6f:4b:22:5b:86:
         dc:74:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:14:42 2025 by rpki-client