Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e3490713-6195-3f91-82ce-9ace2cae31cb.roa
File:                     e3490713-6195-3f91-82ce-9ace2cae31cb.roa (raw, json)
Hash identifier:          qs81Ddp1iigrZpuWlDkaEwo6hL5ueS1Wj2sOJgNPPF4=
Subject key identifier:   1D:33:52:D0:3B:CC:07:87:3F:E8:A0:16:42:EE:15:98:46:81:8B:74
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482EBFFE954050F6C6864AA7B8
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e3490713-6195-3f91-82ce-9ace2cae31cb.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     20454
IP address blocks:        192.198.192.0/21 maxlen: 32
                          192.198.200.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:fe:95:40:50:f6:c6:86:4a:a7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=04aca3e3-cef7-48da-80cd-1275d2e47ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3b:9b:82:0f:ee:3d:ae:96:90:09:7e:1e:51:
                    ac:35:bb:9e:0f:f8:bb:6c:89:1a:2e:b8:dc:d5:cf:
                    3b:26:42:4a:5c:f9:7e:d9:88:db:b9:6c:83:19:dc:
                    73:96:37:0b:92:3b:ce:5a:66:d9:95:78:af:66:c7:
                    54:d8:c5:f8:36:b9:1e:74:45:c2:2f:a2:a8:90:19:
                    f2:1c:9b:2b:d7:87:38:0d:ee:93:98:ca:a8:3c:5c:
                    fb:f9:75:48:bc:d0:30:71:b3:d5:bc:6b:51:77:69:
                    ee:39:ce:c7:1f:86:1c:14:ba:0e:d3:00:54:8a:c5:
                    40:79:66:ff:8c:1b:bb:5f:79:76:57:16:a1:4c:32:
                    a7:89:26:fa:33:33:aa:ee:cf:75:25:22:a6:3a:e1:
                    74:29:fb:c8:a9:90:0c:b8:da:db:fc:cc:08:3d:12:
                    41:07:d1:5e:b1:95:17:5b:d2:47:ba:97:b2:f4:71:
                    94:81:17:df:9e:18:7d:05:31:28:df:a3:6f:cf:80:
                    fb:10:ac:7f:1a:a0:73:cb:10:9f:b4:74:95:d5:66:
                    f5:5b:d7:18:1a:6c:5d:a8:25:a1:04:34:cb:10:13:
                    65:31:1d:41:86:cb:1f:7a:94:11:eb:b7:d2:3d:76:
                    89:a9:08:85:76:3a:bf:cb:ad:b8:92:8e:ce:55:42:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:33:52:D0:3B:CC:07:87:3F:E8:A0:16:42:EE:15:98:46:81:8B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e3490713-6195-3f91-82ce-9ace2cae31cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.198.192.0-192.198.203.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:81:9d:7c:ef:1f:8d:21:a1:7b:6f:13:7a:ba:ca:38:b2:3c:
         1d:76:8e:2a:22:e7:99:3b:20:15:06:fc:1a:21:c7:97:73:7f:
         c7:52:e1:5e:60:6e:5d:ce:e0:71:04:11:c9:2a:ca:75:3a:38:
         99:aa:10:a6:6c:e2:8b:95:fc:dd:ba:de:2a:33:45:7a:22:49:
         54:cc:a6:6d:a4:bc:20:d3:64:34:ae:48:75:8e:ff:cf:ed:c5:
         5c:11:7d:82:d5:49:62:d2:30:c3:7b:e8:4b:b1:5e:0c:c1:b6:
         15:86:b2:21:1f:fa:ae:cf:2d:f3:76:5f:65:e7:9a:5e:0f:29:
         e0:b4:b7:2c:58:15:5b:17:5b:dd:c9:81:a3:03:6d:1d:25:26:
         89:b0:51:0c:21:e1:73:42:6a:72:db:f5:e8:05:41:6c:c4:02:
         c9:8a:51:e4:3a:4f:66:e1:40:45:57:ac:b9:f0:64:b1:f9:57:
         fb:83:59:31:e9:ac:b6:f4:03:74:d9:31:a3:1c:05:1b:41:5b:
         23:fa:d1:06:a0:ad:f7:0f:48:8a:57:46:82:b8:00:e9:f7:d5:
         10:a0:6e:06:3d:60:e2:cd:30:cd:ec:c1:2e:88:26:39:e1:7e:
         64:5c:2d:95:a1:68:39:86:ab:76:36:4e:fd:20:8b:6f:ba:43:
         79:85:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:18 2025 by rpki-client