Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/11b7e78a-cab0-37c5-9cf0-d793bc572880.roa
File:                     11b7e78a-cab0-37c5-9cf0-d793bc572880.roa (raw, json)
Hash identifier:          ed2cpFrL3IqGgJ5bPsuvk1ncZUv981KGtGqwWgF4rHY=
Subject key identifier:   1E:D0:EE:3A:27:63:15:1F:B7:E2:08:56:3D:02:25:64:BA:5A:80:1F
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584819CFBE699BFE99D38F903200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/11b7e78a-cab0-37c5-9cf0-d793bc572880.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     54113
IP address blocks:        140.248.67.224/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:be:69:9b:fe:99:d3:8f:90:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=d65ae2f9-30ee-46d6-b07b-ed5f65a96620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:2f:ff:aa:b0:e5:88:52:7b:0a:c3:3a:2e:
                    80:5c:d9:aa:e6:37:fa:49:3b:ba:17:80:c6:02:2e:
                    cf:86:84:2e:12:43:3d:a6:e3:5e:b3:38:a1:c8:31:
                    da:1d:6d:18:c2:42:5c:b0:da:f6:e8:27:5c:d1:06:
                    27:33:9c:de:31:0e:84:1d:05:2e:3c:34:53:b5:49:
                    a6:6e:e3:24:af:64:9e:3a:97:a3:d8:b1:ae:df:5e:
                    3a:09:ff:ac:49:65:7a:d8:85:1d:5a:e3:a8:6f:67:
                    22:c6:44:8b:d6:70:c0:e1:a0:8a:9a:43:5c:f0:84:
                    e3:17:82:37:50:41:35:5d:65:45:a9:5b:f5:6d:ab:
                    eb:f2:1c:47:e7:9f:1b:b2:87:8d:e9:4d:f8:0c:23:
                    63:39:53:c4:23:aa:84:4c:13:20:26:52:81:5c:eb:
                    30:ec:8c:46:cb:7b:58:f7:7b:d5:7c:cd:5f:8b:76:
                    8c:9e:cb:6d:af:8a:74:e5:0b:ff:78:15:c6:95:63:
                    cd:42:d9:44:51:18:45:58:a6:7e:8a:0a:97:b1:e7:
                    bb:41:62:a9:ba:01:90:8b:78:17:90:c8:f7:41:0d:
                    7c:67:a9:22:8b:5c:05:c8:6a:3d:43:27:42:0e:f7:
                    26:20:4e:9c:50:f6:14:e1:8a:b2:a8:81:f1:ac:b7:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D0:EE:3A:27:63:15:1F:B7:E2:08:56:3D:02:25:64:BA:5A:80:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/11b7e78a-cab0-37c5-9cf0-d793bc572880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.67.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:42:68:af:be:ce:ca:0a:d6:aa:8f:c0:a0:ed:41:96:cc:
         35:6c:4d:9f:b0:bf:49:2c:02:0e:a7:ad:e9:77:fb:60:ed:d5:
         2a:76:a4:f7:db:d1:73:5c:f6:9a:0a:d2:cc:47:d0:19:dc:fe:
         b9:c1:bd:c8:2d:1f:e7:0f:52:88:cd:1d:0c:2e:0d:23:9a:ab:
         c2:eb:aa:5f:c7:88:98:db:e9:86:37:56:76:bf:93:5c:69:6a:
         62:e6:f6:f9:10:af:a6:99:ec:6e:35:f2:8a:c3:26:a8:3d:5f:
         a4:e5:a7:c5:68:4b:47:4f:3a:96:3a:ec:75:72:e8:c6:78:21:
         09:68:5a:d5:90:e2:af:77:02:62:83:4c:58:9d:ca:cc:a5:fb:
         75:9d:bb:49:01:0e:fc:6d:50:67:44:14:63:1a:8c:bc:6b:88:
         0b:08:1e:75:e0:65:3d:03:a6:65:f3:e9:e0:3d:ce:4f:ea:10:
         4e:99:e5:cd:50:8a:bd:55:dc:db:3f:a6:da:b3:9e:fb:da:00:
         2b:dd:08:2c:72:c1:e7:a2:cd:55:1c:a8:ef:7d:4b:2e:53:e4:
         e3:88:a1:8e:f6:e4:64:f7:94:dd:c2:19:85:6b:41:f0:24:7e:
         82:9a:d4:66:27:b2:1c:1a:67:c7:65:57:4c:da:26:5c:cd:fa:
         7d:eb:a9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:33:05 2025 by rpki-client