Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e2891981-1f43-3d06-af0c-d6c2773b6277.roa
File:                     e2891981-1f43-3d06-af0c-d6c2773b6277.roa (raw, json)
Hash identifier:          6keRtvatT2+dH03L9I0kceaNj0axMJEwrxA3F+cWM2k=
Subject key identifier:   7C:F9:87:1E:B7:53:B2:41:51:BC:0C:5A:53:CD:A5:BD:C0:A2:4D:28
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F432858488DAB4A3A2C504ADE95DC1500
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e2891981-1f43-3d06-af0c-d6c2773b6277.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     63023
IP address blocks:        162.248.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:4a:3a:2c:50:4a:de:95:dc:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=470dcc59-b356-45a0-81d5-96b395b532dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:1f:e3:f5:57:f7:77:08:48:e5:21:27:18:
                    9c:9f:08:80:d5:62:ae:d8:c5:3b:33:e7:86:c2:49:
                    8a:f9:cf:6f:14:f5:5d:cf:4e:c1:eb:b6:30:31:a2:
                    4d:64:f3:38:35:d5:71:5e:04:29:de:fe:92:50:73:
                    50:48:71:bf:2b:0a:32:62:d8:cd:2f:f3:10:2a:61:
                    a9:0a:63:76:99:9b:98:ac:15:f6:90:74:22:e3:74:
                    4e:54:4e:b8:70:16:d0:2e:a8:9b:cc:45:e8:77:d5:
                    10:e6:6c:f2:5d:23:16:76:cd:8e:f9:60:cc:91:4c:
                    59:20:d5:be:9b:26:8d:db:62:a6:76:b6:43:36:0b:
                    b5:de:8e:63:79:3d:50:37:08:6e:d5:8b:e7:5e:b0:
                    3e:5c:dd:67:82:d1:5b:f7:d3:6f:f1:a6:4f:a0:50:
                    35:f5:2d:0e:1d:0d:4f:42:0a:70:3e:aa:bd:dc:9e:
                    63:ff:47:00:fa:58:61:ef:0b:a9:67:f2:b5:c9:9e:
                    62:b4:14:41:b1:b2:fb:31:a3:a4:36:33:32:9b:ae:
                    cd:0c:87:be:30:f3:5d:c0:bf:ac:f7:cb:40:7b:64:
                    7a:3b:2e:30:52:1e:fa:94:b2:06:a5:a8:f6:f7:ef:
                    91:8d:1e:dd:8f:50:77:81:50:c9:d3:53:8a:1d:4b:
                    6a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F9:87:1E:B7:53:B2:41:51:BC:0C:5A:53:CD:A5:BD:C0:A2:4D:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e2891981-1f43-3d06-af0c-d6c2773b6277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:03:bc:5d:28:7d:3f:0e:7b:b0:bb:2c:3b:6a:c1:29:22:
         d5:50:68:40:b4:b7:97:b2:d8:49:27:24:1a:f2:94:34:26:1a:
         1f:f1:3b:d8:e0:27:ec:ff:c5:31:43:7b:df:aa:27:c7:e9:50:
         3c:67:74:33:27:f2:f9:3a:b4:07:30:56:52:90:c0:39:11:46:
         51:fc:91:8a:c1:79:d1:05:4e:86:1d:97:13:16:47:78:80:49:
         21:b4:ff:89:9e:97:8e:4e:bd:fc:fc:fb:b8:cd:af:a8:fa:72:
         19:6f:3e:da:16:e4:dd:d9:93:76:ae:fb:72:3d:4a:61:c1:9a:
         0d:6c:b9:80:04:a5:50:6d:5c:8e:6f:71:5a:82:43:75:2b:1f:
         8f:f6:2b:a5:f2:23:22:25:7c:d9:28:4b:39:29:de:9b:05:e1:
         76:a3:87:f6:79:85:43:c1:f5:fc:8a:6e:54:13:8f:1f:e5:81:
         db:2b:ab:4a:fd:3f:b7:6a:3c:7c:c5:a3:e7:c2:79:56:8b:01:
         12:70:a1:58:c2:d5:6d:68:a5:0c:86:7b:e1:3f:ec:e2:95:b0:
         d8:e1:27:7f:9a:7f:31:dc:6f:33:ab:db:2b:da:e6:59:64:fc:
         a8:82:51:d7:5b:25:15:1c:6a:3e:f0:18:f4:a0:aa:ac:e1:34:
         86:b3:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:23 2025 by rpki-client