Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/2465ac62-46e8-3732-b8e4-3cec3a421957.roa
File:                     2465ac62-46e8-3732-b8e4-3cec3a421957.roa (raw, json)
Hash identifier:          HUvKFmQSJTkfQWxNno6rMsr7o9UC41Pr1MA9GWbRsRU=
Subject key identifier:   83:57:E3:32:5E:80:2C:DD:2F:8E:E0:FA:C5:8C:4E:E3:F2:42:52:30
Certificate issuer:       /CN=d04c21a5-fe55-4921-afcb-74705ac57d99
Certificate serial:       010D0C9F4328584804DFBD94375442077000D080
Authority key identifier: E1:58:58:2E:68:01:43:78:30:B4:56:09:0D:90:FD:07:66:F4:67:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/2465ac62-46e8-3732-b8e4-3cec3a421957.roa
Signing time:             Wed 27 Nov 2024 14:00:52 +0000
ROA not before:           Wed 27 Nov 2024 14:00:52 +0000
ROA not after:            Tue 25 Feb 2025 14:00:52 +0000
asID:                     611
IP address blocks:        139.103.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:04:df:bd:94:37:54:42:07:70:00:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04c21a5-fe55-4921-afcb-74705ac57d99
        Validity
            Not Before: Nov 27 14:00:52 2024 GMT
            Not After : Feb 25 14:00:52 2025 GMT
        Subject: CN=3e25b04f-ae3c-4501-acda-ab306dcd0294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:69:43:fc:4d:8a:d6:27:d2:8e:2e:9f:8a:
                    6d:c7:93:a9:bf:6e:69:76:3e:43:5e:c4:a7:51:f7:
                    e7:22:ec:47:b0:3d:35:81:7c:01:30:9a:d1:a7:2e:
                    0a:e5:1c:31:d1:6e:f6:2c:9b:a6:e9:6a:92:ce:08:
                    09:2a:34:9d:9a:a4:6f:ea:83:72:dd:07:da:33:5c:
                    64:15:72:67:dc:98:76:d3:01:6e:b2:fe:dd:a2:fd:
                    66:7a:3b:27:84:71:36:76:47:ac:3c:7c:ab:69:40:
                    5e:7c:ce:33:74:ae:81:14:a8:11:e7:5e:a5:61:6d:
                    46:e4:89:79:3b:ea:1c:a4:60:2c:90:5a:62:ce:e8:
                    d3:37:3d:78:11:70:60:89:d9:d5:ef:0f:18:11:13:
                    62:7f:c7:64:64:e3:63:b4:33:dc:a5:83:36:38:b7:
                    dd:d3:a3:b4:c3:42:de:56:e5:16:dd:0e:fa:59:57:
                    3e:fa:9e:ab:fb:74:c1:68:8b:e7:a0:0e:f2:a7:0c:
                    40:d9:4e:e6:f1:65:cb:f1:3f:0d:7f:8b:0a:d9:d3:
                    ae:f2:87:fe:be:3f:ca:8d:ca:f7:ec:1b:1e:c9:46:
                    ee:07:1f:68:18:8e:a6:36:6e:54:06:8c:d7:a0:91:
                    22:8a:ba:b8:6b:5a:a1:24:ca:fd:f9:45:82:36:c2:
                    22:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:57:E3:32:5E:80:2C:DD:2F:8E:E0:FA:C5:8C:4E:E3:F2:42:52:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/2465ac62-46e8-3732-b8e4-3cec3a421957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/d04c21a5-fe55-4921-afcb-74705ac57d99.crl

            X509v3 Authority Key Identifier:
                keyid:E1:58:58:2E:68:01:43:78:30:B4:56:09:0D:90:FD:07:66:F4:67:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.103.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:f9:ed:14:bf:ac:49:d4:0e:0d:b7:a5:65:46:8d:45:18:
         de:30:f7:67:38:0d:41:b9:02:bb:c8:52:07:d2:de:b8:3c:58:
         d4:f9:d0:8d:47:04:12:0a:99:d6:b9:45:0f:a1:bc:0a:44:b5:
         64:4d:9c:db:26:0f:ad:2a:79:24:5b:3e:b2:44:b8:db:6f:7d:
         20:69:b5:54:4a:fd:c8:83:2e:12:40:84:c2:9c:62:dc:00:77:
         ac:d3:27:ca:85:b0:47:6e:2b:10:fe:30:e2:2b:d2:f2:67:52:
         49:58:f4:ca:9c:3d:0f:ad:b6:28:26:ea:6c:23:61:2e:ef:06:
         c5:9e:83:b3:ec:d5:29:39:79:f7:a3:d4:26:f0:2d:f5:d7:e9:
         66:fb:16:b9:c3:e8:78:2c:4f:fe:bd:f9:3c:90:2e:3b:20:f1:
         2c:67:b1:8c:25:77:a6:d6:81:5f:82:23:db:a3:84:4c:94:d0:
         8f:63:83:53:87:7d:3b:dc:2d:8e:98:60:ab:99:cd:86:9b:85:
         4d:7c:57:fe:71:47:5e:57:ae:dc:50:43:0d:69:a4:42:cd:6d:
         c2:e1:b4:91:d9:d8:c3:0d:0b:3a:b8:83:79:83:db:7c:99:51:
         9b:88:f6:4d:98:05:fc:3f:ea:11:bd:b2:27:17:55:c2:48:b7:
         6d:2a:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:41 2025 by rpki-client