Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/e111717e-344d-3f51-afeb-fb6b7bd363f2.roa
File:                     e111717e-344d-3f51-afeb-fb6b7bd363f2.roa (raw, json)
Hash identifier:          GjZKKMFr2kljdCOz8eWKUMtVPY29U3VbXPzUxCCL+Jw=
Subject key identifier:   0C:F6:F9:C4:C6:D5:33:1F:2D:92:F4:73:6D:52:8B:6B:FA:05:BD:41
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F432858485CD02ADD6DD0D8F720A1ED80
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/e111717e-344d-3f51-afeb-fb6b7bd363f2.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     63440
IP address blocks:        134.202.48.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:2a:dd:6d:d0:d8:f7:20:a1:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=9481277e-7ffe-4b77-9e9b-1fc35f4f8df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:f4:68:58:ef:ff:f1:99:c7:2a:4a:45:47:
                    5b:ff:d3:e3:03:6b:06:d2:0e:df:c5:7f:28:a3:a5:
                    a3:27:3a:3c:d9:3b:ad:a4:f5:a8:21:32:7e:67:6f:
                    bf:03:fb:e5:b3:b8:7b:28:ba:8c:8c:37:e6:36:c9:
                    eb:51:a2:a0:6c:a6:54:16:d9:6f:ed:8c:11:1e:cc:
                    59:85:24:d6:c1:27:61:6c:21:f8:7a:a0:8a:38:cc:
                    bc:c4:e0:bb:de:ca:c3:31:67:db:53:63:3d:03:ea:
                    8c:d5:89:ae:f2:1d:f3:e6:43:33:51:ea:f0:bb:5c:
                    dc:db:bc:64:72:7f:fe:0e:bd:d7:8d:8c:99:d5:0c:
                    62:1c:f7:57:4a:71:7a:55:e2:ae:db:75:6c:ac:8c:
                    a1:3e:c8:76:12:a4:d2:bb:d3:6d:5b:cf:72:9a:b2:
                    05:da:fd:92:ec:7d:9d:23:0a:d2:17:f7:7b:9c:ef:
                    be:8e:93:cc:a3:bd:89:29:6e:d9:16:b4:45:1e:43:
                    70:10:58:c7:b3:3d:e5:1a:9c:b8:ba:48:d9:13:45:
                    9f:f8:38:2a:0d:41:b6:0d:8a:ae:c8:c5:48:65:fc:
                    b3:c4:17:c1:cd:05:b0:ce:f5:9a:b3:37:e6:53:56:
                    5e:3d:07:10:d7:0c:a1:ae:99:54:41:6e:85:23:ab:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F6:F9:C4:C6:D5:33:1F:2D:92:F4:73:6D:52:8B:6B:FA:05:BD:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/e111717e-344d-3f51-afeb-fb6b7bd363f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:43:04:90:03:ca:b2:2f:da:26:3d:b9:87:28:6a:f8:7d:4a:
         59:f8:1d:38:b7:c8:32:1b:7d:5f:09:8f:65:aa:2e:d8:5f:3e:
         0b:a7:ed:17:da:49:df:74:9f:e1:d0:b7:4e:ab:30:4c:10:64:
         7e:6c:00:c2:26:ee:33:f1:4c:cc:66:f8:74:7f:dd:25:4a:e4:
         10:8f:5f:0b:8f:0d:98:d1:cf:9d:bc:15:00:86:4b:89:ad:cb:
         95:bb:9b:95:1c:7b:cb:f0:24:24:30:37:60:d4:e7:00:f7:a8:
         66:9a:78:ea:63:14:ee:9c:48:74:18:b7:27:8a:23:21:c3:c0:
         e1:68:5b:f4:a3:0c:0f:48:ac:62:9f:18:fb:29:56:b9:cc:d9:
         d6:da:d3:6b:07:de:45:62:92:ee:3b:2f:60:3b:7a:60:c9:fc:
         21:da:0d:82:9f:9b:11:7d:2a:cb:85:ac:15:e7:9a:48:23:ca:
         b2:72:ff:01:25:d6:82:1d:76:f1:ac:9c:a4:04:3d:16:34:c8:
         04:d7:e1:cf:28:62:58:3f:df:6f:a8:3b:2a:e1:dd:96:96:27:
         9d:a0:2f:0c:58:59:be:86:37:c9:79:b1:5c:2b:d3:42:1c:29:
         92:fc:65:a3:9e:fd:12:2b:e7:73:10:36:89:42:20:25:c0:cd:
         92:ad:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:34 2025 by rpki-client