Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94f3b131-f02e-3b67-95a8-7d21c7333ae4.roa
File:                     94f3b131-f02e-3b67-95a8-7d21c7333ae4.roa (raw, json)
Hash identifier:          cpQ2iTYgzDa3V6NnVCXrRbUEKubU7A8P9s9J7Zi9UPc=
Subject key identifier:   61:4C:CE:B1:4C:A3:38:EC:46:86:60:CA:A9:58:4F:B2:9C:F0:EC:BC
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325D9E6F06BCA270D97E780
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94f3b131-f02e-3b67-95a8-7d21c7333ae4.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        199.232.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:d9:e6:f0:6b:ca:27:0d:97:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=bd913031-2128-45ae-85d9-5b2c76197723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:62:0a:d6:c6:82:26:69:fe:7d:d4:56:7f:
                    5a:82:b6:41:2f:34:b7:cb:81:67:ec:a1:c0:39:9f:
                    3e:4d:c6:ac:50:66:81:82:13:03:51:88:a4:42:14:
                    59:6e:17:c0:4c:d1:a3:ac:4f:fe:13:b8:a4:ae:3c:
                    01:dc:b9:1d:6c:3d:ff:39:e8:1b:05:5c:32:20:4d:
                    bc:ed:b6:53:52:7f:be:1e:48:46:bf:76:16:7c:65:
                    ea:13:6e:6d:2c:7b:c2:1b:cd:73:ba:e5:eb:a3:4c:
                    97:1a:26:4b:01:d0:cc:1a:14:c4:07:e3:58:a7:54:
                    8f:63:90:68:40:1a:40:28:4f:ab:04:e0:bb:d7:d9:
                    db:97:a7:5c:15:4e:e9:8a:09:d9:40:f2:3d:ac:a5:
                    6b:77:07:19:d1:c6:8c:2c:0c:b5:70:6f:af:85:a5:
                    98:09:c4:13:fd:04:43:fa:25:3e:d9:e5:7b:fc:9e:
                    76:6c:a5:81:6f:0a:7e:ac:23:fa:30:48:ce:ba:2c:
                    71:e1:93:5a:95:52:04:ee:08:27:24:8a:f1:d9:22:
                    ec:b3:6b:68:87:a4:90:81:2f:c0:ae:e0:49:62:bc:
                    3a:20:18:42:29:21:c0:0a:92:82:ce:37:fe:a4:f3:
                    56:4a:a5:c0:f6:b9:5a:9e:30:7c:5d:e1:9e:9a:c8:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4C:CE:B1:4C:A3:38:EC:46:86:60:CA:A9:58:4F:B2:9C:F0:EC:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94f3b131-f02e-3b67-95a8-7d21c7333ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:05:df:72:66:48:14:19:95:fc:f4:3a:3e:10:6a:3a:ac:24:
         fb:4b:ee:80:a4:72:1b:1d:74:66:3a:e8:ab:67:a8:6a:56:46:
         37:85:bc:b4:5d:d8:72:75:a8:e9:44:06:bb:ba:dc:28:30:c1:
         4a:be:f4:0b:f6:f6:b5:f0:2f:02:98:c1:24:92:e5:9a:f8:73:
         6c:eb:ae:ea:86:8c:31:10:d5:cb:68:13:2f:1d:b0:11:44:81:
         b9:b5:76:59:e9:0e:6e:cc:9d:8c:c6:87:fb:e5:72:80:fa:da:
         4a:56:15:db:db:58:9e:d8:fa:d5:d8:8b:80:0c:26:a9:c5:84:
         02:c8:04:45:7c:fa:b6:94:2e:2a:4a:22:32:73:a2:5a:b5:b3:
         11:12:6f:b5:11:29:22:f3:e3:cd:2f:4e:11:91:88:b7:6a:4c:
         a9:d7:4c:78:04:d9:56:fc:29:22:ed:fa:4d:03:c7:51:83:9c:
         c2:bd:d5:68:34:c3:54:35:f9:9f:78:df:8e:4f:1f:f3:0c:43:
         61:3a:dd:bc:02:b7:04:13:2c:fe:c3:ae:6d:d8:85:de:45:38:
         5c:ec:c0:a7:ff:31:20:b9:eb:e7:24:e0:db:3e:11:60:6d:61:
         bf:0c:10:fe:a8:be:84:f1:c5:c0:68:4a:f8:76:2d:e1:dd:16:
         88:12:04:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:17 2025 by rpki-client