Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa
File:                     3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa (raw, json)
Hash identifier:          fmzeLUX7bi91QUsYfaCJsIER46BjvaGN6xwQporI1Ek=
Subject key identifier:   C0:E9:3B:F2:DD:F9:15:B8:5B:5F:3D:EA:5F:3D:F5:98:A5:C9:D4:4C
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F432858480EA516C4285821A193645480
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     11260
IP address blocks:        216.104.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:16:c4:28:58:21:a1:93:64:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=0d78ea39-bf4d-4b02-9487-3a54d8905d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:8c:24:f2:d4:b5:96:09:fd:75:7e:15:30:
                    3d:f2:9f:78:82:cf:4a:a3:bf:d0:dc:62:2b:db:2d:
                    3c:76:10:8c:be:c5:73:69:15:6d:3f:26:c8:e1:e1:
                    41:15:2a:cb:3b:99:96:d3:51:70:9d:f8:4e:2e:e8:
                    3e:0f:32:8e:2f:41:93:da:67:c0:5d:df:8d:b9:69:
                    bf:6e:4f:c4:54:80:a3:2b:d1:c8:8c:f8:23:08:51:
                    89:c8:cb:52:d2:9b:40:93:ae:1b:e3:b4:c8:bf:8e:
                    69:e7:2b:d5:8f:ca:ca:ad:8c:78:65:36:0e:ee:06:
                    32:a7:da:3d:01:ba:e1:53:69:eb:0b:10:24:58:95:
                    bf:ee:89:fc:fa:eb:d6:37:6a:ba:eb:86:5b:7c:6f:
                    d3:58:ae:9c:bc:d9:40:80:a9:2a:bc:d0:5f:32:4f:
                    3c:67:31:d6:e1:bb:b4:ea:0b:48:0d:a9:d1:ed:66:
                    9f:5a:a2:4e:e7:1c:38:fd:d1:6f:a9:41:16:2c:5b:
                    64:89:7b:60:27:a8:ab:91:59:25:e2:57:11:df:fa:
                    07:07:b8:2a:00:cd:36:30:f8:68:a9:d2:47:26:27:
                    d9:8f:72:90:d0:54:7b:85:28:b6:c7:2e:e0:4f:ae:
                    2a:45:1c:b2:9e:55:cd:9c:a7:70:0e:c8:7a:c9:32:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E9:3B:F2:DD:F9:15:B8:5B:5F:3D:EA:5F:3D:F5:98:A5:C9:D4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.104.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:20:91:de:b9:19:db:b5:a5:a9:5e:11:09:7c:b6:4f:87:f3:
         12:7b:aa:6d:93:39:63:c2:9e:28:db:d9:11:8c:d0:5d:ac:2b:
         5e:b7:c9:79:ce:92:4c:0a:f1:87:64:c1:6e:04:df:ac:a0:2d:
         04:38:f9:06:b7:53:59:56:be:85:a3:5f:90:bc:40:67:40:9f:
         8d:9d:5e:87:cd:f0:73:ca:41:dd:98:2d:6f:06:9e:f1:b1:43:
         06:b0:b2:f8:d9:5c:d7:55:86:74:0b:71:6e:f0:4c:b1:57:96:
         57:57:b3:51:d1:d7:61:63:bc:d0:1d:f4:5e:70:21:ae:8f:ba:
         0a:6e:90:fd:90:20:3c:e4:ea:dc:f4:f6:cf:72:45:52:97:b6:
         3d:6a:29:1a:0b:22:47:68:ce:7d:a7:b4:68:fe:a1:f9:6c:ff:
         5f:35:fd:6c:c0:67:a2:4b:f5:e2:70:fb:72:1e:29:a1:02:cf:
         00:59:cf:fd:5e:b1:99:f7:36:76:23:5a:d4:5a:3f:c1:76:75:
         72:42:ef:0a:ef:64:a8:ab:6d:92:17:7e:bf:14:2b:07:b0:61:
         2d:9b:60:33:30:d9:4f:b8:75:9d:fc:6a:fe:77:6f:f0:ac:ce:
         72:17:cb:84:df:dd:5a:23:7e:18:b8:9b:40:fb:c4:49:06:36:
         ca:fe:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:53:01 2025 by rpki-client