Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/f82c2ba8-8edc-3653-9b6a-8703abc3ee45.roa
File:                     f82c2ba8-8edc-3653-9b6a-8703abc3ee45.roa (raw, json)
Hash identifier:          UKpcaql9MEDHyqQlqyz3CWIVMDJgUi5ERpywx4eMu+w=
Subject key identifier:   AA:4D:B0:70:3B:98:48:40:EB:0D:E6:57:DA:85:AE:DA:00:3F:35:72
Certificate issuer:       /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Certificate serial:       010D0C9F432858489A3B42640C700D25DE6871FC
Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/f82c2ba8-8edc-3653-9b6a-8703abc3ee45.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     1002
IP address blocks:        165.140.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:42:64:0c:70:0d:25:de:68:71:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=7614cee1-fdc7-489b-acfb-ebfe2d497713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:75:35:7e:00:8f:34:b4:a1:f1:f5:e7:c6:
                    ae:80:7f:24:b0:07:29:2a:08:58:b1:b9:70:71:f7:
                    92:b3:da:e4:45:5f:16:df:4e:41:62:60:8f:88:e9:
                    8e:69:3d:34:b7:3d:e6:bf:7a:84:3f:59:95:7d:2e:
                    7a:b7:67:eb:08:05:70:99:e7:c2:53:9c:b7:94:e2:
                    bf:58:bd:31:22:0a:87:53:c0:78:df:10:96:fb:f5:
                    a7:ab:41:7a:d7:12:f2:86:ab:88:45:cd:e7:da:64:
                    10:de:0f:b0:ca:ac:18:9d:a7:86:80:59:16:fc:80:
                    94:05:c1:75:93:12:67:e1:78:be:9a:0f:dd:f6:b9:
                    45:b9:5c:15:7c:12:20:35:bc:f2:77:f1:17:33:7d:
                    6f:9e:1f:c5:78:39:dd:64:45:a1:55:b5:98:c9:96:
                    b8:b9:7c:bf:d7:fe:72:a2:2e:c7:47:b9:c3:bf:2e:
                    9d:6a:09:4e:be:fa:39:c4:40:61:58:82:42:a1:50:
                    aa:8d:45:2d:c2:15:16:bd:9a:43:80:71:03:2a:69:
                    43:a8:d6:42:61:fe:0d:b5:75:ca:e4:78:8e:99:bc:
                    57:ff:85:e4:94:15:30:03:fa:be:5b:05:92:92:a9:
                    64:47:43:53:8f:dc:eb:a2:36:df:12:ea:6c:60:ef:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4D:B0:70:3B:98:48:40:EB:0D:E6:57:DA:85:AE:DA:00:3F:35:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/f82c2ba8-8edc-3653-9b6a-8703abc3ee45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl

            X509v3 Authority Key Identifier:
                keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:54:2d:1a:9e:c6:55:8b:02:f2:50:cc:f9:62:64:07:53:
         66:c4:a9:05:e4:d4:ad:c6:5c:5b:0e:64:04:90:22:4f:d2:cf:
         87:92:0c:97:c0:af:60:b3:fb:5d:77:9e:1e:ee:cf:55:eb:6e:
         36:e6:7c:35:38:12:69:e8:f1:bf:6d:dc:93:63:35:e3:22:21:
         d2:5b:16:b9:a1:1d:4c:7f:7d:8b:e0:9a:90:ea:0c:53:5d:cb:
         ec:bc:8a:64:f2:27:4c:03:2a:15:c5:c2:c8:42:06:f2:6f:bc:
         90:e1:4b:8c:bc:9e:cf:f0:9b:82:69:7e:65:3e:75:ec:45:eb:
         37:b0:1b:d2:49:9f:49:46:e6:23:89:3e:af:93:25:1d:2f:07:
         1d:7e:68:52:1a:b1:df:b0:91:6e:32:35:d3:9f:ff:f9:98:f8:
         9c:f6:73:6b:e6:19:5b:5e:df:71:1b:9b:c1:66:3d:7b:00:5c:
         ff:cc:2d:bd:59:f5:49:1e:f3:d2:14:8e:1f:f3:d3:53:e5:cb:
         7c:14:b5:5d:a3:eb:34:33:a6:1c:e1:a2:92:98:54:24:2b:e4:
         d6:51:e8:aa:23:c4:71:86:76:ae:c3:2c:1a:1c:11:9d:89:9c:
         60:59:7a:f5:8c:67:2b:e4:89:86:7d:7a:a3:00:89:66:c5:6e:
         5e:f5:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:54:06 2025 by rpki-client