Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c25cc5f-991c-3dd0-8b6e-2134d9fb875f.roa
File:                     2c25cc5f-991c-3dd0-8b6e-2134d9fb875f.roa (raw, json)
Hash identifier:          Rjh6hysaGg7Ozr40Jv0m4W+G72npWWf5prHZqPBLdy0=
Subject key identifier:   88:22:40:96:34:8C:FE:78:3B:57:7B:09:42:09:3C:3E:0A:F3:FC:14
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F5337D12C6B20B80FE4180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c25cc5f-991c-3dd0-8b6e-2134d9fb875f.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.225.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:33:7d:12:c6:b2:0b:80:fe:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=a4a2b9b3-8d7c-4a17-b4ea-c5e61e44e726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:b1:a9:16:1d:9f:5d:ec:95:ba:99:92:76:
                    88:ec:04:1e:d1:05:c3:63:9c:2f:5b:a1:14:2a:b1:
                    cd:86:06:55:fc:a5:53:1f:88:49:c0:f8:14:b4:57:
                    b4:a4:19:9a:9e:de:05:e8:17:9a:0b:22:79:4d:98:
                    c2:ed:4c:b2:d1:22:bb:95:0d:48:77:ca:6a:88:f2:
                    f6:65:26:38:38:07:ff:be:b6:09:7f:ee:f1:d9:94:
                    e1:3b:21:a2:7d:6e:2e:64:ff:c2:55:33:7a:4b:67:
                    bd:8b:1e:94:1e:fe:f4:66:63:3e:9e:2b:e2:34:2c:
                    27:2f:11:6c:2f:76:81:e1:47:91:f4:0a:f6:25:99:
                    ac:8d:5a:4f:8a:d9:bd:74:05:87:d1:5e:13:0f:30:
                    78:b0:ba:db:c5:44:01:09:d6:d4:90:7f:dd:49:28:
                    6e:66:0a:7b:81:06:fc:8b:80:57:80:16:f3:fb:8a:
                    c4:78:af:6e:f0:cf:c2:dc:c1:77:a7:39:ec:46:f1:
                    3c:39:23:d2:23:92:0b:54:e4:b2:00:1c:b9:e1:c2:
                    1a:da:97:7d:75:da:b4:5c:0a:97:25:8e:fa:bc:84:
                    a9:7d:ef:de:f4:88:3b:9a:4d:1e:9d:9f:78:06:33:
                    7a:e7:31:ba:bc:a5:21:7f:7d:58:b9:92:48:dc:c4:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:22:40:96:34:8C:FE:78:3B:57:7B:09:42:09:3C:3E:0A:F3:FC:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c25cc5f-991c-3dd0-8b6e-2134d9fb875f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.225.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:85:4d:b2:9c:28:cf:87:4f:9c:e6:89:1d:a2:3f:97:a4:
         be:6f:0f:94:5f:40:b3:12:3d:c2:dc:f0:8d:2f:57:a6:a3:b5:
         88:e1:58:a9:d6:14:c2:64:2d:bb:1a:82:98:55:9d:29:cc:87:
         75:76:40:24:27:2e:fb:fa:f4:02:3c:8b:59:55:01:14:cb:89:
         a7:86:9f:2c:9f:c4:e8:9b:85:ad:84:ec:48:a7:e7:cf:be:a5:
         cf:b8:ed:f4:9f:1c:72:a7:ec:27:3b:8a:fe:a6:3f:a6:ba:25:
         84:00:4f:a5:89:11:61:40:20:ff:e0:a4:ad:1b:19:d5:d9:1b:
         98:5b:7f:fb:15:2a:df:02:f4:1f:5d:1b:f3:01:65:ea:d2:1a:
         b4:76:83:3a:7b:13:e0:c2:44:c7:72:74:90:aa:87:95:a5:80:
         56:ec:dd:e5:30:8f:bd:3c:67:50:ad:06:a8:ee:47:17:4c:19:
         74:9e:f3:93:c7:85:f6:3b:13:42:30:3e:c3:29:88:6b:11:e5:
         fa:31:c5:bf:47:17:22:73:f4:56:31:a0:24:f0:fb:68:97:3a:
         60:2b:3b:21:c4:b3:08:fc:36:4d:d9:4e:98:60:0a:5d:9f:8e:
         d4:07:e5:ca:83:61:d7:9f:31:49:fe:46:6c:a9:fd:f1:ed:4d:
         a1:c1:27:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:35 2025 by rpki-client