Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/25790c72-af90-3b8c-82f9-9bbe07357b46.roa
File:                     25790c72-af90-3b8c-82f9-9bbe07357b46.roa (raw, json)
Hash identifier:          A4+Xm/4kIHRIzl7JV1gqslyQrdGtv5rxteIaJ5TSA7k=
Subject key identifier:   7C:98:FD:4F:F2:51:33:68:36:28:19:8B:DB:1F:AE:A2:C3:0D:17:0D
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F432858481C9A94B795A98F6EF408B300
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/25790c72-af90-3b8c-82f9-9bbe07357b46.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        140.98.28.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:94:b7:95:a9:8f:6e:f4:08:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=3df73abc-a483-43de-87c4-58a1ffd19b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c0:0f:37:0f:3b:14:60:e1:3a:da:c4:59:94:
                    0a:50:44:fd:cf:eb:87:37:4c:65:c7:8b:e0:47:58:
                    94:38:b6:1d:30:16:f8:43:d1:98:c8:06:df:15:cf:
                    89:a9:9f:1c:31:71:da:05:9d:1c:ed:f4:26:32:a1:
                    ab:44:de:40:c2:75:d4:53:89:e0:fa:ff:aa:22:52:
                    21:b5:7f:56:b9:df:b9:74:3f:29:e0:25:ea:6a:c4:
                    db:3e:82:09:75:3a:e5:a0:40:74:b1:aa:42:f3:c5:
                    57:77:e5:5c:12:e7:20:df:11:f9:53:4b:58:74:16:
                    cf:b1:17:95:d7:25:ed:f8:99:a0:69:17:83:3d:f0:
                    85:61:11:c8:99:5a:90:bf:88:29:b4:82:a9:05:56:
                    b0:2e:96:95:1d:f0:0d:89:99:fe:b2:e2:23:f6:17:
                    d7:7c:bd:0c:7e:d4:25:27:71:81:a8:a8:59:79:c2:
                    54:95:71:42:2f:7d:16:34:36:6d:6b:23:cd:7c:4b:
                    03:69:cc:9e:a1:d3:50:8a:71:3a:cf:d8:45:1c:96:
                    94:57:d7:ff:d3:d4:73:87:1e:29:b8:40:81:6f:b8:
                    36:29:4e:a7:72:1f:34:38:c8:ad:fc:7c:88:4f:61:
                    c6:e9:66:7e:d1:ec:ac:b3:38:9b:4d:9a:e8:2f:55:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:FD:4F:F2:51:33:68:36:28:19:8B:DB:1F:AE:A2:C3:0D:17:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/25790c72-af90-3b8c-82f9-9bbe07357b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:c2:96:4c:5f:81:82:31:81:9e:d3:66:f5:87:b6:8a:39:39:
         a5:b2:70:5e:78:b8:1f:ed:a6:5d:7e:66:3f:e2:e9:57:ff:3b:
         c0:61:bb:bd:b1:62:4f:9d:ac:f3:69:5c:dd:0c:3a:7e:4c:f5:
         62:1b:15:8f:7b:5c:e0:2e:5d:05:8c:3d:e6:83:c5:78:2a:6e:
         4d:a5:d6:97:35:7d:54:ae:ae:7a:f9:80:98:de:5d:34:8d:1c:
         d9:9e:b7:6f:46:1c:15:ce:e3:3c:8c:38:48:c3:16:3f:44:03:
         82:ff:32:b1:07:51:91:a3:f1:e1:e6:06:b1:55:dd:20:40:c6:
         dc:c2:2f:34:e6:1f:55:bc:d1:46:c7:dc:6f:ab:8d:4e:45:20:
         b4:9a:3e:14:bf:e2:31:18:a3:2d:22:c2:54:33:6b:23:8c:37:
         62:75:11:d3:fa:e4:e3:43:0b:41:80:2b:2a:0d:ed:2a:ee:6b:
         92:0d:ab:9c:b2:6a:80:64:9f:2c:65:98:5a:bf:b5:45:b7:3a:
         4f:4a:8b:04:e5:16:ee:b9:a3:33:85:c6:14:87:39:11:77:33:
         18:f9:c3:56:b1:b3:54:07:c0:30:38:50:73:d3:fa:8b:e1:18:
         d0:cb:8d:24:d0:63:9b:c8:a4:a0:16:3c:b6:19:de:c6:f6:76:
         09:44:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:32 2025 by rpki-client