Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/5454a83d-f111-373a-8288-07d2c32c1bff.roa
File:                     5454a83d-f111-373a-8288-07d2c32c1bff.roa (raw, json)
Hash identifier:          yAx88MjA78Zr/3cDp/YbTN8FVnCHm5DaJvYRCxfNGl0=
Subject key identifier:   3E:C7:5C:58:2C:3E:19:0F:C8:BB:6F:EC:C4:2A:DA:6F:6B:3F:09:27
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F432858480EA5170EF63F604A3C3F7880
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/5454a83d-f111-373a-8288-07d2c32c1bff.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     46632
IP address blocks:        199.68.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:17:0e:f6:3f:60:4a:3c:3f:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=e08a654e-5185-404d-95ce-9592e16712e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:1f:d8:b2:bd:61:b0:d3:38:b3:01:72:d4:
                    e8:a3:8f:f8:fa:92:a1:96:f2:23:0c:cd:20:0f:75:
                    f8:19:cd:3e:1e:6c:fe:86:02:c1:70:d3:92:4a:3f:
                    21:3c:02:4c:aa:c4:49:47:27:ec:2f:90:48:7e:2b:
                    00:3a:b5:c3:9d:ef:59:45:bf:f4:c2:da:3e:ff:9f:
                    f2:bc:87:6c:8e:c9:93:09:c5:39:1e:7d:73:34:0e:
                    a5:a8:fe:b1:26:b5:0c:11:3b:71:6e:23:1c:76:fb:
                    59:72:14:9a:25:b3:7a:65:7e:2a:b3:6e:0c:57:0b:
                    8e:8a:fa:01:c9:00:d4:5c:89:cc:cd:2b:20:c3:64:
                    b9:05:63:03:49:90:95:df:51:13:c1:1a:a9:67:71:
                    50:80:15:43:53:67:23:41:e6:9b:ab:32:0d:7e:14:
                    1f:47:88:df:52:20:ea:48:3b:18:a8:30:d8:0b:6f:
                    2e:bf:28:67:64:05:da:9c:9c:c9:12:5a:04:2f:9e:
                    71:45:e6:67:6f:b3:35:71:8b:97:70:26:19:74:17:
                    f0:94:20:af:be:2c:2d:61:5d:97:ae:57:4a:85:c3:
                    ab:25:04:be:70:99:36:3c:2a:75:97:fa:60:ea:11:
                    73:ec:3c:20:c6:6a:4b:3b:38:19:22:b9:41:9e:14:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:5C:58:2C:3E:19:0F:C8:BB:6F:EC:C4:2A:DA:6F:6B:3F:09:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/5454a83d-f111-373a-8288-07d2c32c1bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:5f:0e:d7:6b:32:3b:fd:c9:0c:13:02:6d:c8:3e:c1:bf:
         ba:26:81:6d:6b:f1:e9:f8:a3:fa:a9:46:33:90:1e:d6:98:ad:
         c4:e2:1f:d9:ff:2c:2a:01:ce:50:f6:76:26:2f:38:a5:4a:63:
         55:3a:ea:1a:93:2e:91:62:dc:01:7b:20:72:7b:68:79:c7:7a:
         cf:db:dd:39:db:17:38:e9:d2:40:a3:6f:ca:8d:74:9c:a1:82:
         28:75:68:ce:38:0b:62:d0:3f:7e:49:4c:9f:bc:6d:f0:44:cf:
         bc:7c:35:e8:fb:43:63:98:d3:8c:3b:3d:10:58:00:f9:2d:8e:
         e7:60:0d:04:8f:25:b6:bd:a9:b5:be:b9:9f:ee:56:19:00:c8:
         d8:2d:75:5d:32:34:08:42:18:01:00:41:51:73:e9:17:d5:b5:
         9a:b5:96:06:93:5b:4b:63:4a:42:a4:56:2f:31:67:79:7f:aa:
         d8:0a:00:e8:56:d0:82:49:ab:86:c9:21:61:fb:2a:dd:20:07:
         2e:cb:d8:17:ea:10:3a:d9:b9:53:41:98:af:b7:f1:47:a8:51:
         e5:fb:78:a0:31:f0:b2:b6:65:58:22:8d:db:28:9c:ff:91:f1:
         ce:02:3b:18:3a:88:aa:db:9a:17:e3:e1:dc:67:d9:8a:e5:a1:
         b6:ee:c5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:25 2025 by rpki-client