Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa
File:                     1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa (raw, json)
Hash identifier:          ShBu//q/EKOZ95D+jovxSrbGpSJA0f4+J/09RCabE58=
Subject key identifier:   DE:BF:06:5B:E9:91:E1:58:24:06:52:78:B1:5C:7E:C4:45:FD:08:88
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285848854B424E90D7800AC7526900
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     3756
IP address blocks:        199.109.32.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:42:4e:90:d7:80:0a:c7:52:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=b514d15e-7a24-41e9-8237-fd309a3a5128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:36:0b:8d:fc:0c:5a:13:80:e3:15:ce:85:60:
                    8d:c3:f4:11:59:8a:c9:c9:29:7c:72:f4:3f:12:8d:
                    cc:3c:8e:bd:24:57:a0:01:e3:80:2b:21:25:e4:8b:
                    c8:00:42:06:a2:ad:82:47:b8:e7:6e:95:dc:bb:fa:
                    d2:2f:d0:e6:bd:03:66:dd:d7:2d:b6:f3:9b:30:dd:
                    8d:3c:36:81:5c:a4:ef:02:68:9e:d8:58:92:f2:b4:
                    50:41:7c:ea:7a:cb:3b:7d:8d:7d:90:75:dd:94:fc:
                    b6:f0:75:a6:9f:6a:bf:79:9f:50:ba:f7:0e:f9:35:
                    fb:d2:12:6c:30:0f:b2:95:ca:eb:ff:80:6f:6a:4c:
                    93:c6:47:a4:d1:18:b6:ca:77:91:aa:40:4e:c6:0e:
                    66:f5:50:c3:4f:25:59:63:f0:95:32:63:88:cf:33:
                    01:8f:78:5d:98:12:61:17:0c:56:aa:e8:82:d8:15:
                    65:cf:97:76:0d:f7:f1:35:78:e4:90:13:91:d8:ce:
                    3f:5d:fc:9e:61:6a:e9:e3:94:a7:35:ed:69:1e:c4:
                    e2:99:04:cc:56:81:43:ac:f5:50:65:8f:65:82:4d:
                    ce:60:75:16:25:97:f6:10:07:14:96:8f:d8:73:4f:
                    57:c4:e9:b5:af:26:0b:45:d2:6d:61:59:fa:99:89:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BF:06:5B:E9:91:E1:58:24:06:52:78:B1:5C:7E:C4:45:FD:08:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:63:22:57:a6:92:31:d3:d0:dc:ce:f2:a1:08:bb:7d:47:
         ce:9e:fc:af:4e:3b:14:bb:09:f5:91:75:df:bc:90:8b:e5:19:
         52:18:f3:b1:c4:9f:f4:57:04:23:3f:05:ba:1a:1d:b4:8f:90:
         af:cf:c5:27:30:b1:eb:e9:56:c6:b6:05:a4:88:e6:ee:9e:df:
         c0:4c:78:ec:8f:ab:51:0e:21:ec:9c:9c:0b:99:f5:e7:f7:a0:
         25:f6:bf:e9:2a:e9:55:9f:5c:60:61:0e:af:08:2c:17:34:52:
         80:b7:07:b7:66:b0:de:dd:f6:17:44:7e:8e:3a:72:3e:0f:83:
         ed:46:61:18:e8:20:38:ce:a2:98:05:58:c0:b1:dd:ed:54:ec:
         b6:85:64:da:70:f1:29:6c:79:17:55:90:25:18:ff:8e:9f:13:
         fa:e1:76:de:23:12:ab:64:79:ef:61:ce:05:d8:32:a5:05:21:
         39:a3:7b:49:b8:1c:d5:27:c5:71:35:86:fa:f1:95:9a:48:ab:
         70:f1:1b:c2:36:3f:55:9f:4d:ea:bf:71:c7:c9:af:57:e6:78:
         49:cb:cf:3c:1f:47:67:eb:3e:ac:ac:2e:0a:43:d4:6d:94:eb:
         e1:09:79:73:21:fb:89:77:f4:5f:86:67:80:35:17:d2:9c:37:
         54:af:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:44:05 2025 by rpki-client