Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd0d438a-73fb-383e-b0e9-2825b99d031c.roa
File:                     bd0d438a-73fb-383e-b0e9-2825b99d031c.roa (raw, json)
Hash identifier:          5pF4x6KqcoRq7vh5/b7pqCbbvc7+jzofsdN3cVq422w=
Subject key identifier:   74:77:A8:4A:EF:51:AD:0B:ED:D3:81:BF:CC:89:11:69:00:6E:8A:15
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C205A76B968BE3513800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd0d438a-73fb-383e-b0e9-2825b99d031c.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        172.111.117.32/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c2:05:a7:6b:96:8b:e3:51:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=a9f485a7-9875-4d4d-8b96-1b026f31f6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:14:c4:97:ee:dd:6f:cb:2f:17:34:6a:b1:
                    d7:b9:54:da:0d:b0:45:d1:df:c7:a2:2c:56:f0:ac:
                    08:e8:4d:eb:c2:70:73:c7:d4:05:12:f0:95:68:78:
                    59:64:97:35:f8:05:86:d5:a8:6d:96:10:a9:5b:e2:
                    66:5d:4d:1c:a8:a0:36:29:89:c0:68:69:16:0d:45:
                    37:9e:12:30:07:a7:bf:31:5e:ee:6b:07:34:40:4d:
                    d2:fb:ce:f8:53:29:24:b5:9b:86:fe:59:be:34:ee:
                    e6:ba:24:d0:e9:3c:cc:3e:9f:d3:76:ae:31:08:4b:
                    81:12:c9:19:fe:0f:78:45:44:f7:77:40:5d:e9:28:
                    ee:5e:9c:b5:43:08:dc:f3:51:8f:00:b1:f5:7a:5a:
                    22:cd:5a:c9:75:3f:ba:31:b6:b8:0d:44:73:89:9d:
                    e5:73:f0:30:e4:f9:bb:5f:de:00:2f:fb:fa:34:aa:
                    b9:ac:32:c3:ce:96:b0:5f:65:0b:a1:cc:99:d7:8a:
                    33:9a:2a:ad:68:51:5b:03:29:c2:ac:fa:3c:7c:43:
                    6b:c0:fe:f6:d2:41:b5:ce:7e:32:f4:ef:8f:9d:3f:
                    85:4a:7e:4e:25:8c:25:cd:09:74:2f:6e:75:b2:f0:
                    9c:15:f2:ae:e3:48:ba:60:66:17:c4:03:8a:c1:75:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:77:A8:4A:EF:51:AD:0B:ED:D3:81:BF:CC:89:11:69:00:6E:8A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd0d438a-73fb-383e-b0e9-2825b99d031c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.117.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:03:53:ba:d7:2b:b6:40:af:c9:6b:f4:80:5e:6a:cf:ab:29:
         c7:43:af:f8:b0:20:3f:41:23:34:77:41:fd:d8:4d:2a:8c:2b:
         73:ca:1f:1f:f1:84:db:f0:9f:e5:4f:2a:41:64:1f:3e:d0:3b:
         dd:5a:d8:4a:d5:3c:c7:0d:b6:2e:b6:73:17:5e:ac:db:e3:78:
         e2:54:5e:74:c3:25:42:1d:82:f1:23:c5:2a:c2:80:dc:7a:01:
         e5:77:f6:c1:81:de:6a:78:83:9c:be:9c:18:43:1f:23:24:7f:
         ba:86:ca:64:d5:ad:7b:5b:34:7b:53:f6:2d:07:6e:3e:13:ac:
         42:9b:6c:04:26:1d:31:fb:7c:c6:64:63:17:44:2f:99:bf:cf:
         2f:05:53:e5:c2:4a:ba:05:62:fa:37:7a:3f:75:57:42:23:62:
         4f:ca:63:59:fc:dc:ef:cc:01:41:01:7f:aa:b6:6e:7e:73:f1:
         86:2a:ee:4c:39:7f:6a:6c:3f:36:99:4f:82:fd:3a:4f:69:4d:
         e1:27:c5:81:b2:d5:10:37:ba:88:13:0c:0d:e9:10:7e:dc:e9:
         10:cb:95:6e:83:b0:31:82:27:2e:29:b8:3f:7a:48:c4:68:d3:
         d2:ad:f9:4b:b0:d2:9c:38:4c:38:8a:12:2a:1e:a2:83:96:33:
         e2:fc:71:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:07:03 2025 by rpki-client