Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa
File:                     466f6df5-9580-3849-bf40-eeaab04c5e4f.roa (raw, json)
Hash identifier:          FEIbkklhttfAPeEYrAngUh7mnPdEGe2eFlX1Gm4L/lo=
Subject key identifier:   E2:2C:28:0C:27:FE:F1:5C:06:DF:5C:EE:B5:D8:93:7F:2F:D9:61:68
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848116FB80FB5B94263AA6BA500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     7029
IP address blocks:        98.16.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:b8:0f:b5:b9:42:63:aa:6b:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=7709982b-e455-4adf-ade4-a0274bd3ca21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:fd:72:47:4e:65:28:84:93:19:8e:1b:c9:
                    3b:b3:c4:a9:63:51:f0:a3:0c:04:cf:7f:47:1c:fc:
                    c2:8f:fb:da:2b:1e:bd:42:ef:10:f3:b3:b1:90:db:
                    49:8d:39:d5:96:32:03:52:f3:57:5a:61:72:b3:4d:
                    ab:86:e5:53:03:63:f6:f5:5b:cb:60:f9:cf:65:c5:
                    c6:20:53:c5:55:ed:14:aa:ad:d4:d2:31:2e:b0:cb:
                    df:ee:da:27:b7:52:3c:c7:31:30:ea:95:49:78:18:
                    8d:f3:3b:b7:37:ce:ad:1b:bd:a9:e6:e9:46:b2:62:
                    5f:22:b4:1c:91:1b:fd:88:65:3e:2e:c8:fc:f3:98:
                    86:91:2d:70:bb:80:f1:4e:87:67:af:8a:a3:16:61:
                    ef:d3:1c:af:b2:f0:d5:89:a0:96:72:f4:8c:4f:df:
                    9e:e8:36:88:74:50:2f:93:38:4d:1f:a8:86:17:e6:
                    a9:2b:2f:89:8a:db:62:78:92:b7:a5:f7:aa:b6:cd:
                    6f:55:ac:2a:7e:f9:05:ca:ee:44:16:d2:a0:04:4a:
                    c2:e9:7d:23:8d:b1:52:6b:f8:5a:1e:c3:21:8e:9d:
                    97:c9:3a:86:f1:cf:fb:59:f1:e3:56:1d:49:58:0a:
                    91:d3:31:74:80:72:25:4b:6d:d9:a4:1d:68:27:06:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2C:28:0C:27:FE:F1:5C:06:DF:5C:EE:B5:D8:93:7F:2F:D9:61:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.16.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:88:ce:d7:02:02:fe:5d:1f:d2:b0:9a:3e:c4:4b:79:c5:
         d9:58:6e:34:4e:e9:99:ef:29:2b:d8:de:a6:aa:50:5c:a3:ea:
         ea:36:df:0b:64:c2:3f:4f:87:70:98:6c:1e:a0:d9:0c:70:f8:
         39:a5:3d:fd:56:fe:f0:ca:c0:fd:f7:69:fd:75:84:7e:70:35:
         94:18:f6:77:c0:19:a2:26:9d:d6:b4:ca:21:bd:a4:bc:fe:49:
         f2:4f:47:bb:75:f0:cc:24:f0:80:fa:2b:bf:ef:e3:9c:1b:9e:
         3f:5e:9a:f8:1e:a5:bb:29:79:6d:cd:b7:b8:50:83:bf:a1:1e:
         6a:ec:a1:7a:14:82:ef:fd:6d:9e:4a:80:00:9c:df:26:38:c7:
         09:fe:06:0c:96:c8:94:93:07:a5:dc:0b:ba:46:3d:1b:a4:a1:
         57:d0:d5:df:89:f5:9a:7f:6f:58:52:12:57:d1:18:08:cf:e8:
         b1:82:45:0c:37:62:2f:0c:ff:96:05:bb:7a:eb:5c:f0:9c:b3:
         d6:ec:e3:21:78:cf:b3:29:52:47:23:2e:05:cb:a0:98:78:58:
         38:b7:7d:ab:83:d3:bf:7c:02:63:c5:37:c8:95:f3:43:4a:82:
         38:31:88:f9:4c:ac:e4:da:66:29:3d:b6:b3:8f:17:78:28:0d:
         da:f5:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:39:03 2025 by rpki-client