Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38b3549b-ca8f-3b0d-9999-1cb473a807b6.roa
File:                     38b3549b-ca8f-3b0d-9999-1cb473a807b6.roa (raw, json)
Hash identifier:          spSwJygO5OujUTmVcAc1HuFC8Xrh6VPq6q4D1oe1C1Y=
Subject key identifier:   50:D4:8F:F2:CF:C5:ED:A3:5A:43:AC:96:BC:C9:3A:51:19:B9:9D:F2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848781B96C7600573ADF0BA1080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38b3549b-ca8f-3b0d-9999-1cb473a807b6.roa
Signing time:             Tue 07 Jan 2025 20:39:29 +0000
ROA not before:           Tue 07 Jan 2025 20:39:29 +0000
ROA not after:            Mon 07 Apr 2025 19:39:29 +0000
asID:                     7029
IP address blocks:        139.55.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:1b:96:c7:60:05:73:ad:f0:ba:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan  7 20:39:29 2025 GMT
            Not After : Apr  7 19:39:29 2025 GMT
        Subject: CN=08171067-d9fd-4a45-af74-fe649145f8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:65:a8:34:4b:a0:f8:d5:66:44:98:c3:87:
                    e6:0f:32:1c:e1:18:b3:b0:d1:e0:a7:00:b3:31:01:
                    69:95:00:60:34:0e:84:b1:5e:42:29:13:3a:bc:9a:
                    86:38:fc:ff:ae:5c:2c:f9:c8:b7:33:32:f5:dc:88:
                    a3:c3:8f:a3:3d:7e:ac:e0:a0:2e:0c:54:c5:c4:b4:
                    38:71:06:0b:16:be:4f:d1:07:68:21:01:26:97:c3:
                    4e:eb:9d:32:f3:8f:f2:51:9b:69:56:67:36:f9:19:
                    af:04:b8:cf:eb:0e:a7:4a:3d:59:3d:ca:f6:e9:02:
                    e4:6b:75:b2:ab:71:ef:4c:54:79:c1:67:a5:9e:4a:
                    1f:82:62:b0:a8:5f:43:0a:6d:aa:4a:2e:34:e0:68:
                    aa:0a:bd:79:d7:43:b9:53:0e:6e:4d:ee:a9:01:2d:
                    65:16:44:1f:c1:e7:1a:0c:98:ef:fd:6a:17:21:79:
                    7e:97:ed:bd:d2:ed:5a:5e:2e:36:23:f4:fc:36:4e:
                    87:21:b0:69:aa:67:c1:56:ab:7a:c6:87:9c:49:ed:
                    40:47:c2:e1:be:92:49:19:89:6b:31:b3:8a:b0:b0:
                    8c:71:db:78:a9:b9:d9:a6:8b:58:11:52:a7:5c:c3:
                    74:6d:12:b7:80:61:60:7e:17:67:4b:44:f2:6c:5b:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D4:8F:F2:CF:C5:ED:A3:5A:43:AC:96:BC:C9:3A:51:19:B9:9D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38b3549b-ca8f-3b0d-9999-1cb473a807b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.55.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:43:82:86:20:fa:4a:ea:3c:25:bb:17:43:80:a6:74:5d:
         8e:62:86:3b:0c:c8:ca:93:10:ec:c4:06:a9:4c:76:52:d4:dd:
         4a:d2:21:f8:77:c5:cc:65:d3:24:11:7e:44:fa:63:a8:0e:0b:
         04:e4:72:33:a4:b3:a0:b1:37:fb:60:b7:f4:fb:aa:d4:f1:73:
         40:46:8c:4f:39:57:a6:93:d0:e9:34:5a:ed:28:e5:4f:11:ea:
         27:8c:fc:5c:ea:25:a6:99:8a:06:3e:67:65:4d:0e:6b:ae:39:
         d9:83:5d:ee:77:a6:af:b3:cc:91:bf:d3:26:b0:70:6d:6a:32:
         03:ea:28:af:06:0d:54:31:5b:20:13:38:7b:01:8a:be:3b:7a:
         a8:f9:80:1c:57:90:09:bd:43:47:76:c9:de:e3:59:fb:7f:ad:
         14:16:90:b3:ac:09:37:92:1e:43:b8:9b:1f:02:48:2a:71:38:
         94:75:52:29:fd:3b:fe:19:a7:44:f1:e9:62:ac:c9:3e:56:b4:
         c9:04:15:e9:8c:1c:c2:ba:f5:0b:ca:5c:7d:6a:41:44:7e:36:
         ed:7e:ec:63:14:50:5e:c3:02:51:2a:ef:c8:25:18:df:00:61:
         62:88:27:38:5e:19:0a:23:2c:48:67:80:9d:0b:b8:de:de:d4:
         12:64:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:30 2025 by rpki-client