Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f895068e-d322-333e-934e-3790f126ae8c.roa
File:                     f895068e-d322-333e-934e-3790f126ae8c.roa (raw, json)
Hash identifier:          /hq+nh/IVzX74lCT87dvEMZ0qoJ/7DC3sDU5n1X7sr0=
Subject key identifier:   53:9B:8F:61:A2:96:F1:6D:2D:A1:24:31:38:76:38:E7:48:AD:EB:7E
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285848424AC7B468A4B41B7D6B0880
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f895068e-d322-333e-934e-3790f126ae8c.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        202.165.72.0/21 maxlen: 24
                          202.182.64.0/20 maxlen: 24
                          216.185.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:c7:b4:68:a4:b4:1b:7d:6b:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=41400afd-ce1b-4d93-b4e1-bb8f63ce9366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:51:29:a0:e0:b1:bf:b1:ae:56:7b:d6:fe:
                    bc:1b:65:3d:b9:6f:12:b9:74:11:21:24:3d:24:7c:
                    99:a4:a2:3b:c8:07:24:8c:0b:62:b1:1e:f1:b0:45:
                    48:76:27:f2:4f:9f:55:04:16:e4:c6:99:ea:e7:f4:
                    dd:fb:a5:62:0e:cb:fb:31:56:fe:a4:34:f1:e1:e6:
                    0d:43:32:15:ee:9a:36:6c:f7:88:24:b7:00:5c:81:
                    4d:6a:af:6c:68:3a:3c:59:f3:05:0b:8a:59:56:5b:
                    4a:42:a9:ac:40:6b:44:0f:27:4e:5d:8e:6f:73:e2:
                    68:4c:50:59:e3:b0:85:14:49:93:74:1a:6c:61:63:
                    b6:b4:e7:a8:99:4f:98:77:9e:02:bd:3e:cc:d3:f3:
                    9d:9e:f3:04:4d:7b:e0:7f:7e:a3:df:d4:78:4d:bd:
                    73:4b:2c:09:ff:aa:47:8c:9f:6d:42:77:28:1e:e0:
                    34:86:7f:6c:9c:30:f6:9c:ee:11:07:82:7c:b4:5f:
                    bc:75:3e:61:db:d3:bf:f0:a0:69:7e:31:a9:48:5e:
                    3d:e4:0f:bc:47:e0:65:3c:84:27:2b:bd:ef:98:b4:
                    aa:4a:a6:6f:a1:79:aa:02:a9:de:6f:9c:c9:dd:36:
                    6a:ab:c9:c0:4c:8a:65:03:05:54:ff:d1:e1:df:62:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9B:8F:61:A2:96:F1:6D:2D:A1:24:31:38:76:38:E7:48:AD:EB:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f895068e-d322-333e-934e-3790f126ae8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.72.0/21
                  202.182.64.0/20
                  216.185.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:58:f3:95:bc:a9:9b:9c:69:9d:86:c9:80:b4:59:30:15:71:
         fc:ef:c9:64:d6:71:d3:2b:cb:73:9e:5a:4e:ba:cc:d2:15:e0:
         6e:63:d5:96:b7:dd:bc:d8:6d:c2:2f:76:ca:4b:15:d2:44:76:
         8a:86:9f:ba:ea:04:bb:57:c3:2d:cf:6f:64:81:bc:4b:68:91:
         95:2a:1f:90:fa:00:09:90:b1:ec:28:00:f0:89:65:bc:5d:19:
         37:7c:ab:58:df:65:69:cb:da:a9:57:97:33:1c:6e:7c:ba:3e:
         bd:13:11:16:22:3b:b6:66:e1:aa:85:9a:cb:f4:a6:a4:a1:e6:
         45:77:62:a8:df:58:d3:2b:ed:e2:ce:37:4c:64:e2:a3:fb:b3:
         5b:10:33:4e:2f:9f:bc:3d:db:74:08:88:55:4f:cb:d0:f6:c3:
         e9:ed:8a:2e:47:9f:7e:3f:58:2f:f2:fc:ab:93:70:58:11:6a:
         cc:98:af:30:59:72:d7:a9:40:5d:dd:3d:1f:71:a8:bf:e5:27:
         f4:eb:44:81:ef:78:a9:e3:d7:37:cb:76:eb:95:24:23:d3:af:
         ef:9b:05:85:57:4d:1f:24:0a:f7:eb:2c:a1:b4:7c:92:9e:43:
         8e:34:a6:ba:65:ef:d5:0e:0c:bd:ef:e2:95:64:a3:83:91:ea:
         c1:b9:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:15:17 2025 by rpki-client