Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/835543c4-8372-33f5-b68f-71c1b89cb54c.roa
File:                     835543c4-8372-33f5-b68f-71c1b89cb54c.roa (raw, json)
Hash identifier:          EPTNSTPf2+mjSaYLonFxj+Ffo+IKvUd2tpxIpGg0SIc=
Subject key identifier:   41:62:73:7A:58:78:1A:01:BB:AB:26:C7:30:94:48:D9:E1:A4:E7:56
Certificate issuer:       /CN=da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87
Certificate serial:       010D0C9F432858486C2B1F9C5569F692D36B1800
Authority key identifier: 96:1D:16:6F:94:C7:F0:16:F0:03:C8:56:35:8D:D4:E1:67:F2:BC:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/835543c4-8372-33f5-b68f-71c1b89cb54c.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     8075
IP address blocks:        199.233.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:1f:9c:55:69:f6:92:d3:6b:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=60f7c67e-be8b-44f8-bff3-1254e7268212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:cd:89:c6:b9:c8:9c:18:78:ac:6c:5c:15:
                    fa:8c:6b:cd:3b:91:4d:ed:41:f5:30:4e:d0:5b:d8:
                    e4:e7:9b:91:33:5a:22:7d:cb:6d:80:d0:68:7d:b2:
                    62:2d:40:22:bc:2f:46:93:b7:f1:50:6f:16:56:f6:
                    3d:38:b1:b9:d7:6f:65:57:f4:9c:6d:a6:89:f2:c8:
                    f0:d8:0c:72:76:ee:b5:f2:e5:d0:59:a1:59:57:80:
                    a6:b9:45:6d:1f:64:aa:ef:ed:56:21:0d:2b:f7:65:
                    62:44:ea:91:85:5a:03:56:8a:61:48:4c:10:45:88:
                    6e:1e:96:36:04:33:b6:4f:42:73:7b:04:6e:cb:26:
                    84:c5:ad:ef:ad:68:af:6a:43:57:ef:29:86:83:c1:
                    4d:0f:69:1a:9e:12:11:cc:c7:52:ba:b7:12:8c:91:
                    89:fb:00:15:55:fb:2f:c6:53:76:01:16:ff:c5:93:
                    5e:a1:56:7e:c4:d9:b1:4a:c2:92:d4:fc:c0:b3:68:
                    ee:bc:63:0e:bb:a8:54:68:0d:6b:1d:69:96:ab:72:
                    ab:d8:cc:16:2f:22:4d:98:46:7c:89:bd:ca:8c:9e:
                    c9:e2:dc:a2:ff:38:f3:47:60:7f:83:c4:1b:77:cd:
                    31:4a:9b:77:7d:05:28:d9:6f:90:68:48:e6:48:25:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:62:73:7A:58:78:1A:01:BB:AB:26:C7:30:94:48:D9:E1:A4:E7:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/835543c4-8372-33f5-b68f-71c1b89cb54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.crl

            X509v3 Authority Key Identifier:
                keyid:96:1D:16:6F:94:C7:F0:16:F0:03:C8:56:35:8D:D4:E1:67:F2:BC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8d:a2:71:a6:3e:0e:fd:22:3a:fe:43:d7:1e:4d:7a:a3:77:
         76:76:bb:53:ad:d0:97:77:2f:6b:09:c0:8a:97:0e:50:e7:0a:
         f1:ad:6a:7c:9e:d3:23:cc:d1:6d:56:21:75:9c:e2:bf:cc:dd:
         a5:95:a0:d8:d6:80:db:cc:4b:9e:08:76:2c:83:05:8e:b6:37:
         58:f6:ea:d5:cc:b7:a7:e9:cc:61:d2:d1:57:78:4e:67:ec:82:
         ae:cc:08:05:3d:61:08:24:6c:04:bb:b1:d6:3a:a5:92:1f:72:
         18:03:27:cc:40:95:1e:2e:04:05:a4:38:ff:e7:5e:1f:31:a1:
         87:bf:0b:bc:b8:8b:72:56:64:c5:a5:44:03:b1:0e:70:f5:b2:
         b5:1e:5f:cb:2f:df:1c:d0:f0:b6:86:1b:07:1a:5e:28:cd:4d:
         b0:37:9e:3c:b7:86:9b:e0:9e:93:35:18:d5:6b:09:69:21:1a:
         f6:29:fb:76:c8:08:a4:10:e7:a3:57:52:f4:6f:ec:6e:6e:53:
         2f:0b:e0:4d:2c:b1:70:f6:79:ed:09:79:18:35:1d:db:fe:16:
         b7:32:96:91:88:d0:7a:6d:6d:9a:eb:2f:7b:b9:6e:ac:d4:05:
         e2:6c:72:43:0e:2f:9f:48:9e:52:77:b8:f4:26:33:f6:7f:74:
         77:21:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:39 2025 by rpki-client