Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa
File:                     8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa (raw, json)
Hash identifier:          LgoICCDR8BAgHbMxCo+NLx5h4kSBgm/kjEBCYhPb05w=
Subject key identifier:   F3:24:45:BD:72:9E:95:04:9B:5B:C3:40:97:E0:19:1F:1C:DD:2E:76
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F43285848159FF4C17F4A57D1274F5C00
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     13335
IP address blocks:        169.196.18.0/24 maxlen: 24
                          169.196.19.0/24 maxlen: 24
                          169.196.96.0/24 maxlen: 24
                          169.196.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f4:c1:7f:4a:57:d1:27:4f:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=07dc4712-c7fb-4388-8f09-b0aea16ada85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f2:d1:b0:9c:26:a7:d7:31:98:38:b6:42:c5:
                    7f:7a:fe:d3:f0:49:82:f9:6c:54:03:60:e9:f7:c9:
                    38:e6:cd:29:e4:8f:70:ae:e6:46:9b:57:c5:e2:cf:
                    0e:eb:44:15:54:a0:5d:45:c8:57:c5:c7:46:00:01:
                    3b:fc:81:b2:2e:2d:44:e2:5a:b7:c1:ff:67:dd:69:
                    9f:f5:c8:e4:7f:c3:af:4e:cd:70:a4:a4:de:29:a9:
                    b7:20:d3:fb:4d:ef:94:f1:73:08:4c:31:2b:35:99:
                    5c:25:6c:a0:24:39:9b:9d:c6:d6:e8:15:23:f8:7f:
                    6b:d1:21:d3:7f:72:11:16:27:a9:3f:0d:1f:f1:a5:
                    09:c1:02:3b:ac:00:92:b2:76:f9:a4:b0:70:cf:fe:
                    55:c1:4e:4e:ba:92:fd:b1:7d:86:b2:b0:7e:f3:8c:
                    2e:60:1d:cf:da:aa:a1:ea:13:09:93:55:ef:b8:49:
                    1a:e6:3e:29:23:28:55:e3:22:63:5b:02:53:3c:cb:
                    57:e3:c7:b4:5e:6a:0d:15:ea:33:c6:83:fc:31:d8:
                    b6:24:42:68:59:e9:88:e1:bc:15:ba:8c:d0:5e:cb:
                    33:a7:30:d7:d1:34:06:27:e7:c7:37:cc:9f:14:06:
                    b2:04:1a:43:b4:c3:5f:8a:c9:8c:2c:80:19:d2:59:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:45:BD:72:9E:95:04:9B:5B:C3:40:97:E0:19:1F:1C:DD:2E:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.18.0/23
                  169.196.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6e:ab:24:46:e3:42:32:18:b7:5e:9e:ee:21:74:35:57:c9:
         23:45:39:af:7b:96:d4:c5:a1:8f:7f:dd:81:40:4e:57:d0:58:
         a9:ca:3e:93:8d:7a:bf:c6:d1:18:b6:84:7a:a8:e3:3e:e1:41:
         57:10:d0:ec:cf:8a:70:c8:3c:f6:db:78:7d:da:14:1a:e5:44:
         36:b1:a7:e3:9d:ca:29:30:d7:11:08:5a:79:85:fd:6a:49:09:
         bb:9a:4d:33:c0:56:38:60:54:5e:cb:51:11:57:63:86:a5:83:
         b5:ea:6c:5b:5c:3f:7c:18:4a:c4:fb:ff:e4:eb:21:fc:75:6a:
         ad:63:0b:0e:0e:d4:61:0f:60:db:3a:a4:56:83:f2:84:81:75:
         dd:7f:16:82:49:64:38:49:c2:f9:ff:12:ee:89:77:82:57:3c:
         73:45:64:47:cd:96:a4:98:fc:11:ba:06:bc:d7:76:5f:6b:60:
         51:4e:e7:a0:c4:7e:8a:f4:b5:c9:99:7f:c7:08:de:b8:c4:0e:
         a2:31:a9:a7:c8:30:22:db:c8:de:59:bd:d6:5b:9e:b3:94:ee:
         aa:f7:77:38:23:02:43:40:63:29:c0:44:49:7a:7f:ad:27:6d:
         30:b6:94:57:e3:92:0d:10:33:cc:6c:ac:c8:10:d5:5d:f0:66:
         cc:00:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:57 2025 by rpki-client