Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c55ba4de-2213-39fd-9a5f-f0ecee34e16e.roa
File:                     c55ba4de-2213-39fd-9a5f-f0ecee34e16e.roa (raw, json)
Hash identifier:          Feb2HsBslQaNKHw/L70ZS1mkT8Y7K7UYoFj/eXTe8tE=
Subject key identifier:   49:51:AC:4B:7F:BE:E4:A6:F3:28:8C:5E:CA:03:AC:34:C3:37:29:63
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F432858480BDA7501DA5EAA6CCECA9680
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c55ba4de-2213-39fd-9a5f-f0ecee34e16e.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     400737
IP address blocks:        16.172.64.0/21 maxlen: 21
                          16.172.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:75:01:da:5e:aa:6c:ce:ca:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=d6c014f9-769a-455f-acf8-dbef73c80698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:c8:34:0f:5c:85:f5:d6:e7:66:74:a6:df:
                    3b:9c:0c:a9:a5:6b:0b:29:f7:97:a5:87:96:65:39:
                    68:49:6f:51:bf:c3:61:cc:16:d9:b1:3c:69:60:ba:
                    3a:4f:45:45:0e:e4:88:bd:5b:82:89:18:4a:16:63:
                    96:0b:bb:86:a9:89:fd:08:19:9a:a0:52:82:62:0f:
                    bb:ac:d3:a9:dc:82:75:ed:02:10:f3:54:ed:6d:6a:
                    d5:c1:f8:15:cb:40:90:84:90:81:b1:90:ec:ff:2b:
                    fe:59:7d:fb:68:ac:eb:52:f4:21:62:73:a5:07:69:
                    6c:0d:8f:d9:7b:35:f4:cc:da:e5:9e:9e:f3:58:32:
                    67:04:c9:9b:a8:11:90:0b:62:24:f2:65:84:56:5e:
                    f3:ea:55:76:bd:82:e9:66:f5:0b:da:1e:52:88:34:
                    a4:18:2e:44:b6:96:6c:78:04:fd:43:fd:68:ef:6b:
                    e5:d7:c4:2d:78:38:76:24:9f:17:8a:95:72:8b:68:
                    44:1e:2a:5f:53:69:32:19:58:c3:fb:cd:9a:87:4d:
                    f7:7a:d7:34:ca:96:4d:7f:11:b2:a9:ba:6e:44:94:
                    8d:92:f2:cd:65:77:c2:47:0a:01:28:30:90:01:15:
                    30:18:49:69:c6:51:69:7f:3e:f4:22:cf:6b:fa:25:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:51:AC:4B:7F:BE:E4:A6:F3:28:8C:5E:CA:03:AC:34:C3:37:29:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c55ba4de-2213-39fd-9a5f-f0ecee34e16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.172.64.0-16.172.75.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:76:11:32:b5:17:ff:2c:6c:09:96:5e:35:2c:d5:95:43:93:
         aa:1c:43:d3:99:6b:44:d4:29:88:8d:6a:92:e2:b0:2c:6b:bd:
         f2:ba:1f:59:d3:ff:e1:bc:3f:49:dc:ec:aa:d0:87:54:2f:a6:
         5d:65:b4:b5:45:31:9e:49:5d:90:29:ef:59:65:b1:ab:59:76:
         61:28:9c:d1:1a:05:7c:15:87:e2:b9:03:28:52:5b:0a:07:11:
         22:15:1a:ff:07:b1:be:98:c0:1f:9a:52:a8:21:9f:cf:1c:6c:
         03:49:d4:dc:c5:8a:12:12:4b:04:e2:a0:19:d3:bd:2d:c6:4b:
         bb:77:56:24:25:20:3c:6a:d5:66:72:de:26:db:d3:e9:23:00:
         d3:ac:44:3d:96:8c:cb:b4:5c:2e:c0:37:17:48:e4:ec:67:35:
         1c:53:86:09:1b:c4:6f:db:09:b7:6c:36:a9:ad:2f:ed:fb:1b:
         6c:89:21:e0:11:df:29:06:cf:e4:dc:92:54:ec:7f:c2:2b:3e:
         22:15:73:9e:17:87:11:db:cd:d6:51:92:70:80:f2:05:c3:8f:
         0c:2a:2e:58:c2:de:1b:b4:f6:ac:e2:d2:31:9f:53:93:bb:bc:
         bc:e6:17:ff:d0:ab:d0:bb:07:65:c8:a9:b2:3b:b3:f2:c2:88:
         19:53:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:29:58 2025 by rpki-client