Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa
File:                     0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa (raw, json)
Hash identifier:          GBUx293Qsl2iT2RRW/7N/outDay1DQ0L0K9K/8ny6nM=
Subject key identifier:   45:07:E9:FE:DB:61:BD:78:94:79:67:62:EC:67:EE:ED:E3:5B:E0:D8
Certificate issuer:       /CN=afb3511b-f1b6-44ad-9c36-f6576a5400df
Certificate serial:       010D0C9F43285847E3AE3F57E2F4FEC962AD3DC0
Authority key identifier: 9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa
Signing time:             Fri 15 Nov 2024 16:39:32 +0000
ROA not before:           Fri 15 Nov 2024 16:39:32 +0000
ROA not after:            Thu 13 Feb 2025 16:39:32 +0000
asID:                     395839
IP address blocks:        199.5.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:ae:3f:57:e2:f4:fe:c9:62:ad:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df
        Validity
            Not Before: Nov 15 16:39:32 2024 GMT
            Not After : Feb 13 16:39:32 2025 GMT
        Subject: CN=010442ae-bbb3-49d5-985a-0b79c48c2070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:22:bf:ab:8c:73:37:56:5a:7f:54:46:63:da:
                    fc:70:7e:59:48:52:6a:c5:62:7a:77:2b:08:85:d3:
                    29:67:1f:fe:b2:6b:77:a5:45:20:7d:c4:67:79:71:
                    79:db:b6:8b:bf:b3:d2:54:46:82:68:a9:8f:9e:f8:
                    bf:5d:33:ed:d8:63:e0:81:2d:c7:b4:5a:69:ff:cf:
                    74:ce:9a:61:04:b0:41:8f:45:19:30:fa:1e:af:96:
                    65:36:52:40:a1:7f:cc:74:3b:7e:83:31:d8:46:f3:
                    2d:90:65:98:5a:b2:0b:8b:85:91:65:46:d3:f2:28:
                    61:97:78:9d:47:37:9d:f9:ba:b9:93:ee:84:dc:4b:
                    2d:18:d3:b0:d3:ab:9a:a7:a6:14:ff:d0:9b:94:6d:
                    3c:5d:e0:fb:75:7a:a4:b9:a2:26:03:23:d7:6f:85:
                    4f:6f:0d:9b:9e:79:27:6d:11:07:3f:51:3a:42:d2:
                    40:06:c2:7a:6d:51:06:0a:f4:6e:90:68:25:63:52:
                    e6:e1:b8:22:85:a0:3c:71:a7:4e:c0:02:3e:56:56:
                    2d:39:89:c4:7c:40:50:e9:08:bb:27:90:f3:85:bd:
                    43:85:62:ea:f5:97:8a:83:45:60:b6:12:6d:85:06:
                    9a:0d:b2:d6:e7:22:c7:b0:9b:ce:b6:cf:cd:5f:40:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:07:E9:FE:DB:61:BD:78:94:79:67:62:EC:67:EE:ED:E3:5B:E0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl

            X509v3 Authority Key Identifier:
                keyid:9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:69:80:87:f5:dd:68:92:01:6f:17:f7:ae:dd:e2:ef:35:39:
         0a:a4:65:79:d7:57:66:2a:d9:1d:c5:65:04:56:00:27:be:27:
         80:dc:76:57:a2:cb:e1:20:a3:78:6d:d1:59:bb:b6:8c:83:86:
         80:f1:21:b9:e9:3a:fe:18:37:d1:45:1a:73:da:4a:dd:75:24:
         0b:b8:44:ed:0e:d5:e1:64:c7:02:33:1e:41:0a:3f:4b:cb:f3:
         85:96:bc:c7:27:73:c7:12:1c:24:6f:99:9d:78:6c:c7:02:ed:
         8f:c7:ed:37:94:9b:9e:41:4d:40:32:7b:10:de:ea:61:32:4d:
         5b:e0:6c:15:ce:94:b0:b9:fe:44:c7:60:29:ff:e7:82:93:ff:
         3e:70:ef:86:f2:ea:99:f1:b4:ba:c0:7d:26:74:56:51:8f:94:
         1c:7e:14:80:88:90:c4:f4:9b:29:e8:5e:b8:a2:4f:68:90:78:
         a3:42:7d:67:77:35:60:ee:66:90:f1:f9:6f:11:bc:49:c3:44:
         45:db:03:07:d3:dd:0a:f0:85:ef:9f:ed:20:4f:73:b5:c6:41:
         b3:5c:c1:1e:9f:bd:0b:93:d1:b4:ea:d9:af:72:00:51:c5:5d:
         a2:7b:93:42:a1:69:2c:b9:cc:99:47:4a:5c:ea:c7:2e:90:19:
         5d:87:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:12:53 2025 by rpki-client