Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa
File:                     5c1ac775-846b-34c5-befd-aa1852377b7f.roa (raw, json)
Hash identifier:          LeR6U/IwQmvMfmwTZ/8fbilfPksquf1825stosy94bY=
Subject key identifier:   A3:02:4D:87:7A:09:D1:C4:3A:B7:1E:6C:E3:E8:04:99:C7:C0:80:F3
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285847EF035C6332F6E95D40C8B9C0
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa
Signing time:             Tue 19 Nov 2024 18:04:55 +0000
ROA not before:           Tue 19 Nov 2024 18:04:55 +0000
ROA not after:            Mon 17 Feb 2025 18:04:55 +0000
asID:                     174
IP address blocks:        162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:03:5c:63:32:f6:e9:5d:40:c8:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Nov 19 18:04:55 2024 GMT
            Not After : Feb 17 18:04:55 2025 GMT
        Subject: CN=7f6ce174-3318-4323-9ac8-4396b02415c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:f9:6f:d2:7e:25:e1:1b:68:54:9e:8b:fe:
                    87:46:cd:1a:59:13:78:4f:7a:22:75:29:69:ce:ae:
                    3a:ac:a2:db:8d:29:39:75:90:74:2d:da:87:9a:e1:
                    50:98:61:29:02:71:c4:ba:41:4b:e3:14:35:24:02:
                    e7:13:5b:05:9d:9a:2f:ab:f0:58:96:78:17:c9:e2:
                    ae:02:4a:8f:9c:31:26:a8:20:1a:8b:bd:dc:13:1c:
                    62:7a:ec:2c:22:1f:4e:27:3e:94:2c:c4:6c:14:c8:
                    e2:14:52:32:52:5b:f8:b6:d0:d1:65:5d:4b:6f:0e:
                    f5:fb:b8:73:3c:7e:ec:f5:c3:f7:c7:35:8b:58:ec:
                    e4:bb:56:5a:c7:e3:de:e8:da:ab:a7:9b:16:d0:d9:
                    b7:fc:eb:95:c5:6c:91:37:50:05:97:53:05:3d:71:
                    56:5b:ba:00:d2:84:fd:41:44:a1:df:65:b9:5c:b5:
                    8e:e0:8e:05:04:c7:41:f0:53:55:a6:ba:28:fb:24:
                    b7:e4:be:81:f3:e2:36:15:5d:e6:0a:81:98:01:cb:
                    44:89:bf:8c:7a:86:07:fc:9f:6c:bc:35:23:cc:63:
                    2e:52:bc:19:a3:7c:c9:26:44:b4:fe:de:6a:a4:7a:
                    1d:38:70:89:0c:d4:12:67:9f:47:8c:34:35:5a:dd:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:02:4D:87:7A:09:D1:C4:3A:B7:1E:6C:E3:E8:04:99:C7:C0:80:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:6c:6c:9f:84:e0:da:51:e6:00:0e:d7:d3:1e:48:98:5e:
         75:5b:34:5d:3b:59:52:a8:40:3b:6e:eb:e3:93:1e:be:bb:b0:
         43:57:a8:dd:bc:f4:13:78:39:c7:08:7a:91:19:72:25:ee:ee:
         71:1e:92:16:7b:6f:90:82:d7:88:cc:1b:f8:2e:a6:00:6f:93:
         b9:7d:58:7c:a5:db:2c:2b:d3:dd:41:f7:51:78:c1:09:7a:e1:
         70:7c:86:68:d4:31:f6:c8:4e:47:e5:53:a3:ca:60:c6:77:f0:
         8b:1a:f0:b9:89:27:f3:c0:3f:5e:66:84:ab:ea:20:58:9e:3f:
         52:53:d3:71:eb:29:25:72:52:3a:3a:ee:3b:7b:81:5e:72:0c:
         44:fb:de:d5:6c:ec:c0:0f:1c:cd:60:c0:23:14:c6:3b:52:47:
         01:95:e9:5a:e7:e3:3e:da:f3:ac:e7:ff:24:87:4c:0c:94:33:
         98:6f:ae:c9:03:e1:91:9c:40:ea:e1:ab:e2:37:d0:98:cf:1e:
         ec:14:04:cf:71:82:8f:25:97:da:6c:9b:1a:bc:26:47:36:9a:
         d2:93:3a:02:79:bb:4c:67:4f:1d:17:af:4e:5d:5a:d2:40:a0:
         8a:4d:5d:71:de:16:f7:37:cf:f4:a1:0b:24:18:ed:5b:fe:bd:
         37:65:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:16:57 2025 by rpki-client