Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa
File:                     f6064a69-8e2a-30ff-a4e0-a91669f30752.roa (raw, json)
Hash identifier:          L5RJkUiW/DiY39Buewp+/wI8oIQERsa/644Q2Vbcy5o=
Subject key identifier:   B5:03:B0:6D:D1:B4:6F:43:CA:B9:7A:EE:AC:ED:0D:51:6C:3A:B9:56
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285848467ABCB0786C76032D939B00
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa
Signing time:             Sat 21 Dec 2024 02:00:39 +0000
ROA not before:           Sat 21 Dec 2024 02:00:39 +0000
ROA not after:            Fri 21 Mar 2025 01:00:39 +0000
asID:                     398156
IP address blocks:        158.120.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:7a:bc:b0:78:6c:76:03:2d:93:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Dec 21 02:00:39 2024 GMT
            Not After : Mar 21 01:00:39 2025 GMT
        Subject: CN=b117763c-82e7-4a32-831e-855717a44349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1e:5c:d6:19:c9:7b:71:a4:e9:37:44:b1:71:
                    e9:b4:49:99:2a:ec:d7:fe:e9:67:6b:0a:04:f2:a3:
                    82:8a:86:a6:d5:d3:b6:e2:f0:72:db:69:e7:be:5e:
                    a6:74:42:c8:5e:8f:d3:c3:18:71:15:35:47:cd:bb:
                    12:db:93:65:de:36:3e:9a:d9:9e:7e:f6:27:53:bc:
                    d7:2a:2a:d2:ab:e5:0e:45:98:38:80:c3:17:04:7d:
                    cd:a2:f7:c1:bb:90:de:5c:95:66:46:fb:48:15:a2:
                    bd:c2:aa:3e:30:71:eb:2e:1d:4f:71:44:6b:3f:3a:
                    12:1a:89:34:9f:7d:8e:fe:25:c2:14:ca:ee:b2:8f:
                    37:03:6a:ad:74:2a:51:95:d4:ed:6f:f0:78:44:1b:
                    ec:2f:91:59:9b:b8:55:e9:38:fa:89:dd:b5:db:24:
                    b3:fb:8a:55:15:33:72:fd:09:8c:8e:85:7d:f3:3d:
                    03:19:0d:ce:a7:22:c8:b4:85:05:b5:b0:de:74:92:
                    30:77:b8:4a:c3:8c:b4:03:57:0b:4c:40:67:17:34:
                    bb:7d:70:f0:df:ff:24:cb:4f:2e:07:61:d5:1e:b4:
                    91:17:76:fc:1f:f4:fe:33:a0:0a:f0:1a:06:9e:b0:
                    50:e1:d5:40:96:27:45:ce:cb:27:f7:8f:d4:51:9c:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:03:B0:6D:D1:B4:6F:43:CA:B9:7A:EE:AC:ED:0D:51:6C:3A:B9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:bd:dc:0d:48:48:9c:6e:cb:a4:b5:8e:08:3b:41:6d:8c:99:
         53:8f:64:cb:2a:7e:45:c5:be:5a:04:b8:b9:c5:46:d4:f8:52:
         34:2e:66:00:60:74:86:6a:df:c4:39:e6:6f:6a:3b:87:39:a3:
         e4:1b:91:3f:ea:61:76:d4:92:b0:8a:67:86:53:84:a1:76:77:
         1b:af:63:aa:20:f6:64:ab:c8:53:b8:fc:81:1a:c9:43:07:b5:
         7d:49:e5:c2:5c:74:dc:6f:19:c3:0f:a0:c1:33:eb:dc:12:82:
         f9:cc:2f:7f:94:ea:4f:c1:f0:b8:6f:85:a9:cf:31:1f:4f:03:
         77:17:ae:b1:2a:fc:97:be:b2:12:cd:10:e4:39:52:e8:a4:6a:
         43:f7:c7:4e:d3:56:3b:7b:25:49:4a:e2:b7:1a:2d:a1:9d:f9:
         1b:d3:90:88:7c:48:53:a7:48:e0:b9:4a:19:3b:70:62:90:7f:
         cf:29:24:3f:47:45:75:8c:b7:05:2b:cd:c9:fa:23:77:81:60:
         08:07:40:81:f3:a7:dd:85:00:85:af:ee:eb:99:eb:6c:93:6a:
         ca:eb:94:ad:ea:1a:00:1b:8a:7f:42:d4:ca:2e:a5:50:52:f1:
         25:cf:e5:f9:a9:c1:e6:9d:10:84:b6:f5:73:f3:1a:d2:93:a9:
         57:11:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:07 2025 by rpki-client