Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a89b8be7-09cf-3e38-8113-f25a3da0f800.roa
File:                     a89b8be7-09cf-3e38-8113-f25a3da0f800.roa (raw, json)
Hash identifier:          oOdilMkKP4qxuQgkRtX2IZEubm7lXOukeVA+v79Ocy4=
Subject key identifier:   7F:7C:9C:DD:9B:6F:2E:B4:1B:EE:0D:62:B6:67:A9:5D:ED:8D:F7:43
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C86E922A60002781AC00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a89b8be7-09cf-3e38-8113-f25a3da0f800.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.218.128/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c8:6e:92:2a:60:00:27:81:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=86aff64e-8c9b-4a3e-a7bf-79c11cefd0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:64:fa:d8:f9:46:c7:d5:92:a9:e8:cd:07:
                    1c:bc:3c:66:c5:7a:8a:c8:6c:34:cb:6a:39:25:a1:
                    9b:66:77:5b:3f:6e:75:78:00:f0:13:66:8f:8c:09:
                    76:2d:ed:1c:82:0d:e7:0b:d0:0b:13:29:a3:35:00:
                    de:22:4d:b6:85:78:4a:d0:df:d2:4e:e9:49:a7:51:
                    82:1d:d0:b0:04:39:1b:b8:42:f7:38:ff:d1:40:60:
                    74:4d:fb:64:10:12:c8:f5:86:39:db:2e:35:c2:29:
                    f2:05:ea:78:ad:ee:d2:38:2a:25:12:ca:f4:05:2e:
                    c4:2b:1b:cf:88:6f:21:90:80:aa:6e:32:29:29:f3:
                    b3:f1:76:ea:d5:54:6d:90:2a:16:5e:03:32:d6:21:
                    04:ed:65:4e:e6:ea:19:07:15:34:db:c3:71:98:95:
                    34:02:3c:7a:3f:1b:8a:d1:bd:5a:60:bb:b1:b1:1b:
                    8c:56:ed:57:06:29:20:34:05:58:7b:5b:2e:ae:33:
                    54:9c:7b:43:f0:bd:a9:bd:33:ed:3d:f4:1c:b2:22:
                    bd:5d:92:50:b0:6b:80:63:04:df:70:82:58:e4:a4:
                    09:81:1c:ad:53:fd:31:ff:8f:49:38:77:6c:af:ea:
                    fd:e8:bf:6a:8d:dd:32:7c:4f:90:59:ff:76:66:54:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7C:9C:DD:9B:6F:2E:B4:1B:EE:0D:62:B6:67:A9:5D:ED:8D:F7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a89b8be7-09cf-3e38-8113-f25a3da0f800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.218.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:05:fb:d5:2f:e7:40:35:9b:13:d2:b7:e3:93:a3:7b:ca:ac:
         15:e0:78:db:dd:a1:a8:19:00:14:b4:fe:47:ec:d8:cc:a0:8d:
         8b:27:be:a1:35:8e:9b:9f:9c:a4:23:4f:46:b9:fc:b5:b0:2b:
         8e:9a:9b:2f:90:64:0f:a9:27:bd:f7:19:71:71:0b:bb:b5:d2:
         a4:95:f9:dc:ac:55:1c:1e:72:23:cf:95:64:d5:de:23:10:82:
         2c:71:87:a5:6a:26:9a:44:b7:72:4f:ee:1d:3c:44:83:ba:75:
         b7:37:27:06:cc:cd:af:93:d3:23:68:07:e1:cb:1f:85:73:8c:
         3f:93:2a:4e:b7:53:bd:4e:79:5d:10:41:06:80:73:f8:f9:ea:
         93:44:1d:6c:b7:18:b7:b0:b4:1f:03:22:9a:df:41:a3:8f:c3:
         50:4a:13:83:f3:2a:9d:4a:5a:23:68:e9:77:c6:9f:f4:0a:a3:
         9a:ce:86:23:ee:6c:7d:3a:2b:e9:92:54:99:2a:97:7b:d3:66:
         3a:c5:a6:f5:b9:70:da:c6:18:be:e7:ff:d9:5c:d9:6d:6f:bd:
         ad:bd:3f:5d:5f:78:96:6e:d5:97:0e:bc:53:62:f2:42:c6:73:
         9a:7a:99:c7:83:cf:1d:c9:a5:c9:18:c4:27:02:47:2a:d3:88:
         7e:ef:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:36:40 2025 by rpki-client