Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/245167d6-1c78-3ef6-8e3c-1308b8c03e82.roa
File:                     245167d6-1c78-3ef6-8e3c-1308b8c03e82.roa (raw, json)
Hash identifier:          OZkdg88MDCCzneh5pPYEcKefKqE6k471/t66vaK3jPU=
Subject key identifier:   F6:46:01:FA:1D:C8:C9:79:E5:0E:45:0D:44:A5:73:38:F4:CD:B6:CE
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325D58F1981D22B0293FE00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/245167d6-1c78-3ef6-8e3c-1308b8c03e82.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:d5:8f:19:81:d2:2b:02:93:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=24e89668-d892-4d29-bcbd-944d1c566854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:db:ca:a9:d3:ec:8b:ab:c4:d0:a1:2a:41:
                    bd:3b:6c:af:b2:3e:f8:f0:da:b6:f7:66:44:73:f1:
                    dd:4e:24:e6:9f:1e:ce:35:cf:86:b0:24:6e:03:ab:
                    8b:0f:54:46:fa:90:59:ce:48:fc:cc:17:37:f5:86:
                    02:20:5d:9d:09:83:4d:60:21:89:31:5f:36:00:49:
                    96:23:cf:4d:ce:d8:bb:0f:b2:47:aa:2b:cc:35:c2:
                    7d:08:78:c7:57:9d:48:a4:1d:03:04:a0:72:ce:ac:
                    39:f2:ac:c1:ad:a6:ce:05:6c:2b:5e:6d:22:71:ad:
                    68:52:ce:e3:e7:58:09:5b:6d:09:25:bd:84:5a:5b:
                    0d:d7:da:16:bd:f0:56:c1:21:75:b5:01:ec:2c:71:
                    ff:d6:02:d1:40:2f:ca:43:e8:9a:f5:ba:4a:75:3f:
                    1b:f1:ed:a6:fd:8d:9b:7f:ed:75:74:dd:66:d4:9e:
                    25:3d:b8:ba:fa:1d:eb:b1:6a:24:56:59:5c:ca:57:
                    e6:ed:f4:58:99:47:cf:ef:00:ec:f9:5a:75:15:2b:
                    a9:3c:e0:10:e8:7e:36:02:9c:fd:35:44:91:df:f6:
                    7f:a9:e3:d3:b1:28:94:0b:eb:4c:51:8b:e0:f1:a2:
                    c4:a8:41:a0:09:25:ac:81:8d:a5:31:be:21:68:36:
                    91:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:46:01:FA:1D:C8:C9:79:E5:0E:45:0D:44:A5:73:38:F4:CD:B6:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/245167d6-1c78-3ef6-8e3c-1308b8c03e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:f7:38:f9:90:8e:39:62:d4:45:59:83:49:21:30:a3:cf:
         37:d6:93:86:57:f0:9b:b3:a8:ab:2e:4b:55:c3:1b:06:f3:a2:
         8f:01:ab:62:e5:39:ec:7a:14:25:1d:57:e8:8f:c3:a1:4e:b7:
         cf:95:f2:40:1a:c0:0b:5c:d0:77:fa:24:f3:2a:df:9c:25:be:
         a0:c6:51:8f:00:41:54:00:0e:07:67:a1:84:3a:5c:fb:3c:25:
         8f:bc:e4:47:6d:d0:45:ba:9b:cc:b7:a7:7f:17:d0:26:da:55:
         94:7e:c7:1e:c7:c1:1d:0e:f3:ae:85:bb:12:09:b4:ff:02:11:
         6b:06:2a:da:80:0a:4d:7f:e8:c4:dc:f9:8e:ed:69:94:59:a7:
         99:e6:5c:cf:92:f1:1b:32:b8:1e:57:f1:6b:be:77:32:21:73:
         9b:c8:b9:97:76:67:49:49:5d:c1:2a:b8:25:95:8c:a6:99:eb:
         96:0b:15:c5:3b:ff:2b:31:32:1d:7a:f1:a9:b6:98:b2:27:8b:
         4c:ea:8f:89:bf:d8:2d:fd:bb:37:d1:df:d7:40:45:21:30:65:
         45:ba:96:51:3a:3b:1c:d9:b6:db:ea:db:61:2a:ef:a6:fc:e3:
         ed:d2:53:6d:54:6c:4d:22:79:a9:01:05:3a:d0:ac:d0:cb:04:
         61:e5:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:54 2025 by rpki-client