Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8649b369-c68e-3425-842a-125b5e1d9021.roa
File:                     8649b369-c68e-3425-842a-125b5e1d9021.roa (raw, json)
Hash identifier:          8gmzBMrCzY4THrYdZW1YhwcVmo6ehVIc7c4PXrVpuP8=
Subject key identifier:   3A:B3:3A:B8:03:7F:D1:FF:29:A4:FF:5D:41:9A:71:62:90:FA:87:49
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325CF6138015BF9E9620AC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8649b369-c68e-3425-842a-125b5e1d9021.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:cf:61:38:01:5b:f9:e9:62:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=02cc2545-5725-4c31-866a-874d97bc7ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:df:96:99:44:9c:00:02:d3:b1:bd:e9:a9:
                    ff:df:b7:2a:e6:08:d6:9b:3c:89:19:59:2d:6e:b7:
                    f8:98:5e:0c:e1:10:da:5a:2b:b4:15:23:a1:fa:bd:
                    13:bc:56:c8:f2:90:5b:34:1d:00:e3:9a:59:76:ce:
                    2b:6b:ae:92:a9:68:35:04:82:51:6d:6a:6b:ec:c8:
                    aa:e5:d2:10:cd:2a:7c:d1:48:38:1b:42:49:9d:b4:
                    25:83:d1:80:73:ba:c7:07:80:0f:75:63:df:e9:18:
                    f9:dc:95:11:e1:ef:d3:d3:f3:3e:23:64:76:7b:5e:
                    f0:4f:a3:8b:2e:83:1b:e5:4b:ea:03:76:44:96:06:
                    26:40:af:5e:24:26:33:ef:d6:e9:f8:2a:87:8a:dd:
                    09:aa:29:34:53:db:3c:b8:21:9a:f8:e3:90:ff:01:
                    de:9b:cb:f6:55:1a:49:8e:0a:07:bc:d7:92:9b:f9:
                    fa:65:1d:56:12:97:3e:c7:0a:7d:22:6d:c7:e8:a9:
                    5d:0e:91:a6:54:da:97:9b:0e:71:32:10:9d:f0:4d:
                    67:dc:6d:6e:20:8b:7e:f7:fe:d7:cf:db:64:c6:87:
                    eb:e2:67:0f:f2:72:67:7b:2a:91:4f:cd:1b:f1:c2:
                    e9:66:d8:fc:73:d4:34:ca:dd:8a:ec:2a:28:73:00:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B3:3A:B8:03:7F:D1:FF:29:A4:FF:5D:41:9A:71:62:90:FA:87:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8649b369-c68e-3425-842a-125b5e1d9021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:ab:b4:5b:48:4e:61:e9:dc:aa:d2:ee:a5:18:13:b5:89:
         c3:6b:94:de:d4:fe:ad:b2:61:55:e1:8a:10:99:c4:74:cb:be:
         be:73:f1:ae:d8:7e:27:0f:4f:3d:48:9b:93:59:5b:4a:4f:ac:
         7a:84:5e:d3:44:fb:76:2a:bd:f5:e3:e4:9e:c3:46:46:3d:f4:
         f0:d1:89:28:38:4d:f5:da:11:25:b9:26:69:94:b0:7d:55:b7:
         af:00:ea:e1:c4:1e:8a:56:4d:ae:b8:e3:2c:16:12:3a:2d:a8:
         26:77:f8:1f:73:85:81:db:74:dd:fa:24:6b:94:9c:62:f8:ed:
         2b:40:ae:87:73:7d:d5:11:5d:98:cb:f3:31:9a:dc:bb:43:06:
         3f:48:74:92:6b:3f:19:59:86:e3:10:92:f5:51:1b:86:c4:0e:
         6e:03:d0:f4:0f:1a:05:fd:0b:e5:7c:8d:99:66:d6:9d:a0:d1:
         c9:1b:b5:80:79:55:8f:ec:b7:84:37:fd:db:c2:65:02:ea:d2:
         f0:70:95:73:9a:6e:0f:60:33:8a:29:32:42:2b:3c:75:0d:f3:
         d7:5c:df:11:1a:93:e4:37:db:8c:0b:fd:80:42:0b:e0:ed:a3:
         cb:3e:22:63:3e:b4:f8:c2:8e:d6:84:ad:cf:c2:4f:cb:8b:06:
         78:06:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:01:16 2025 by rpki-client