Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa
File:                     4de85870-1812-37c2-b185-f215614574da.roa (raw, json)
Hash identifier:          GPMxLBWc91mMLqTwf0YvDGnlk8obge7s/E1EE/fcW9U=
Subject key identifier:   94:8C:E5:4C:70:A4:C8:9E:44:2A:C1:A8:55:ED:C1:47:F6:C6:4E:56
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F432858483B4FFF39BAAE17F37D65D52F
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        199.65.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:ff:39:ba:ae:17:f3:7d:65:d5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=ac590418-e7e5-45e3-a6b2-f56c90d80e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:53:ee:45:ee:e6:fa:54:1d:fc:62:3a:80:
                    f4:2c:e7:74:0d:16:80:78:54:33:a6:a6:ed:92:db:
                    6f:1f:d5:e0:c0:e5:f0:f9:fd:12:b8:68:e9:4a:2e:
                    72:b9:f6:79:f9:12:95:6e:35:c1:25:25:86:eb:1b:
                    ee:1c:e7:f4:7a:ec:bf:30:3d:76:6e:8d:7e:b9:6e:
                    96:c2:a0:5f:37:2c:e8:17:da:39:e8:b2:40:9c:50:
                    ba:60:35:3e:f5:33:29:ce:ca:d3:9f:11:22:3e:12:
                    69:91:50:09:90:6e:83:5a:f3:95:3e:f1:78:ac:59:
                    27:90:c4:9e:87:08:e5:d2:18:53:18:31:98:de:e0:
                    5c:d3:53:db:03:4e:7c:63:75:8a:38:05:e2:de:42:
                    a4:77:5d:b8:8b:04:f1:5b:06:7e:af:4d:07:2f:ec:
                    00:a1:f7:f2:68:43:e0:39:88:07:8b:9c:47:b7:27:
                    cc:9e:e6:48:d5:1d:13:c6:f3:ae:55:6a:d4:dd:53:
                    c1:c6:40:6a:2d:13:56:ba:6b:fa:1c:46:8b:00:7f:
                    ce:db:25:a3:8c:66:a2:b6:d5:8f:8c:bd:48:91:55:
                    e0:a0:d7:bb:78:5d:e6:5b:fa:b4:02:7a:bc:dc:af:
                    ff:f6:89:99:c5:d4:f2:ae:6f:1e:29:df:f4:c2:a2:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8C:E5:4C:70:A4:C8:9E:44:2A:C1:A8:55:ED:C1:47:F6:C6:4E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:bd:e1:8c:c8:5e:cd:c1:32:2e:d2:e3:da:1f:5a:13:72:4e:
         eb:63:0b:5c:21:e8:a6:49:0c:b7:52:3c:d5:be:eb:e5:ef:12:
         c7:b1:e4:f2:27:60:ba:34:33:9e:d4:3c:de:7c:79:77:d5:16:
         69:75:67:6f:bf:2b:d8:f6:bc:03:45:26:68:d5:2c:a1:51:67:
         13:40:79:1c:ec:58:d0:bf:5d:8c:b4:16:10:3d:a1:15:93:c5:
         57:d3:02:53:58:be:af:78:bb:45:39:13:20:db:f2:b5:d3:cf:
         16:8e:66:a4:17:01:b3:e5:6b:92:35:bf:fe:cf:9c:20:7b:a7:
         f2:7d:e9:c6:3f:a4:a7:50:1b:af:3e:fc:72:f9:56:18:b3:c3:
         6a:04:79:48:91:a8:3d:cf:dc:bd:11:4d:de:d9:36:49:0e:c0:
         95:31:50:2d:2e:aa:16:32:b9:27:cb:15:9d:c5:40:84:98:cd:
         76:2b:74:ef:d5:8e:ae:93:4b:31:17:ed:70:79:7d:59:7b:e3:
         68:71:36:74:39:2a:26:11:d9:2c:27:d7:9c:01:7a:a9:88:ce:
         b9:60:85:4b:19:f9:70:20:e4:c1:d6:3a:12:09:6d:bd:13:4d:
         d6:99:87:5d:9a:53:a2:2f:7c:83:30:6c:15:8b:45:6b:1a:e1:
         1a:81:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:03 2025 by rpki-client