Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/ce31831d-092c-3dc4-9afc-9b58bfbb092f.roa
File:                     ce31831d-092c-3dc4-9afc-9b58bfbb092f.roa (raw, json)
Hash identifier:          05SLA878uujcJF/DHrcUdQRnXjUCSDCLWKEhOl9JYEw=
Subject key identifier:   35:50:AF:C0:81:21:67:F0:97:3F:0F:85:E4:05:28:72:71:98:15:C8
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F432858487A2088375DEC6A98DD6B6FD0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/ce31831d-092c-3dc4-9afc-9b58bfbb092f.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     7992
IP address blocks:        205.196.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:88:37:5d:ec:6a:98:dd:6b:6f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=e8e5723e-418e-4910-91d3-903f388b3cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:43:95:70:78:36:57:ad:13:0e:67:ff:a0:d2:
                    31:cd:c8:c1:0d:42:e8:47:ac:8f:8e:79:c9:dc:21:
                    0d:08:b9:f4:da:39:8e:27:72:e6:44:26:7e:d0:2c:
                    90:42:7f:98:c1:ec:15:8f:fc:78:74:89:04:ff:11:
                    ab:ab:6a:9c:85:c7:cf:fb:be:a7:7d:4a:fb:4b:ae:
                    70:f3:df:71:43:5c:2e:bf:7b:08:70:30:67:2b:85:
                    55:7b:09:27:13:a0:31:b9:52:69:84:58:93:d0:f1:
                    0e:cb:53:64:c8:aa:5e:76:e4:1c:76:30:a7:b9:eb:
                    7c:da:47:2e:27:8c:61:ee:8d:dd:40:cc:b0:40:e2:
                    1a:73:8c:b6:f7:bd:fe:96:5a:3b:4e:cc:8c:76:f2:
                    51:97:80:ad:28:a2:d7:4c:0f:69:0b:9a:24:ea:18:
                    01:70:c6:66:26:62:61:a9:b5:03:6b:ba:ea:77:27:
                    80:e9:cf:8a:92:86:6a:73:a2:a6:bf:f3:94:ec:08:
                    fc:9f:e2:d8:d3:ed:8f:41:40:67:d4:f1:f7:33:2f:
                    18:75:a0:33:df:70:d8:d0:11:8e:cf:c5:3c:65:40:
                    44:d0:f1:1e:25:b0:cd:68:b8:27:8f:ce:2f:ad:ab:
                    af:a9:38:99:59:f0:0d:09:7a:b0:b4:fe:0a:b0:47:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:50:AF:C0:81:21:67:F0:97:3F:0F:85:E4:05:28:72:71:98:15:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/ce31831d-092c-3dc4-9afc-9b58bfbb092f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8b:6e:0d:70:cf:12:ea:c0:41:5b:92:98:a0:66:7d:b5:67:
         2b:a9:18:78:3f:fc:f0:ff:aa:f5:19:9d:2d:d0:4a:5f:58:b2:
         ff:1c:b8:e6:8c:90:57:45:b0:e8:d1:52:76:6a:5d:f4:78:c9:
         fd:84:b8:31:22:a8:7f:42:49:ff:d0:75:8f:74:7c:d2:24:3c:
         48:07:ac:a2:61:79:19:80:cd:0c:93:47:36:2a:7e:b8:95:ea:
         22:31:e7:ee:bb:00:9d:e2:e1:ab:52:4a:93:a5:df:32:d8:f7:
         88:1e:03:e6:b8:84:e6:2a:52:0e:1b:6b:51:4c:b7:21:f8:05:
         85:ed:09:73:da:e9:12:ea:ff:87:0f:bb:d2:22:a8:a4:53:81:
         45:18:b5:37:ba:43:12:7c:23:06:ba:f9:ee:06:52:0a:87:03:
         5f:e3:ff:48:48:6f:1a:aa:6c:66:bb:e6:88:22:86:ef:5f:ec:
         3e:4d:0e:1c:f6:0a:61:92:4f:f2:e2:8d:63:d8:49:c3:f6:22:
         3b:e2:78:95:d9:35:96:86:e4:8f:83:67:0e:b7:7e:15:66:8c:
         91:19:0e:16:6a:61:89:0a:e4:31:28:64:00:7b:82:64:1a:cb:
         ed:70:d7:08:35:f2:51:c3:63:b6:3f:c8:38:62:fd:5f:41:e6:
         e9:17:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:16 2025 by rpki-client