Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c2b6bec1-70b7-3f6c-9e46-4cd312587aef.roa
File:                     c2b6bec1-70b7-3f6c-9e46-4cd312587aef.roa (raw, json)
Hash identifier:          Je29gdJdygy65BtTq6cd6HmjkxWqHcDKKHZTEcdp7MQ=
Subject key identifier:   41:4C:F3:33:14:D4:62:E1:1D:7E:AA:BD:C8:35:4A:EE:98:39:80:F3
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325CF43662EA88072547980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c2b6bec1-70b7-3f6c-9e46-4cd312587aef.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        140.248.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:cf:43:66:2e:a8:80:72:54:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=da32d613-a254-4727-be5c-95f7dfcd9a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:2e:1f:05:ff:c2:08:13:77:df:06:35:2d:
                    77:62:c7:1e:d2:ed:aa:07:55:63:69:50:46:65:7a:
                    c0:61:bf:e6:91:87:7d:26:cb:30:c1:7f:cb:cf:61:
                    52:64:50:13:36:04:0d:17:2a:34:56:f8:e0:32:b9:
                    f6:cb:ea:bc:92:74:f9:d5:0f:69:3f:e0:db:1d:87:
                    d9:64:3f:01:e8:7d:b7:ce:86:53:eb:e8:ec:f6:99:
                    aa:f5:53:c7:8e:a1:29:66:a7:63:d5:d6:21:e2:0f:
                    df:78:2c:69:e2:14:0b:75:9c:6d:db:df:f0:d1:b8:
                    38:3d:c2:5f:82:e3:73:2b:e9:53:6d:da:d1:42:16:
                    f1:60:ca:5c:8d:d5:04:3f:2a:d5:cf:0c:d9:b7:0f:
                    c5:49:4a:cf:d3:43:6a:c3:9b:30:ea:e3:76:ab:1c:
                    6c:35:55:67:87:da:60:05:4e:e4:54:f0:39:01:ab:
                    e9:4e:5d:8c:46:aa:25:5e:4d:04:69:70:79:21:7d:
                    5d:36:f0:57:60:56:7d:eb:67:24:42:f0:d2:b4:87:
                    24:6d:c5:c0:12:5a:1b:7e:d0:cf:a1:4e:74:98:2f:
                    ad:90:00:c5:da:ff:9e:f2:7a:fb:0a:94:cb:da:70:
                    a1:af:66:53:57:3f:94:ff:2e:12:69:af:65:7c:eb:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4C:F3:33:14:D4:62:E1:1D:7E:AA:BD:C8:35:4A:EE:98:39:80:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c2b6bec1-70b7-3f6c-9e46-4cd312587aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e0:49:4f:d9:b3:55:50:c0:73:66:6b:d6:99:9f:08:a5:35:
         0e:fa:42:77:34:01:6f:df:54:14:2b:c5:04:1a:02:7f:c5:81:
         b8:7a:7e:a3:af:89:1e:bf:6e:58:03:a6:a2:0d:98:91:c0:70:
         81:a7:76:58:98:3a:0a:5d:e8:6e:d8:44:43:8e:52:ce:2e:ea:
         14:0a:a2:98:31:79:e4:c2:0d:9b:3e:d3:25:a3:d6:0d:46:8f:
         63:b5:7b:74:fb:46:37:6d:84:68:1e:6a:19:67:0d:37:e0:12:
         ac:2f:e5:e3:a9:cf:52:00:b0:ad:40:72:40:8b:86:4f:81:18:
         1f:41:4a:d8:da:fb:0c:79:ad:9d:a7:4e:c9:e1:4d:55:b6:92:
         cb:7d:b7:bb:fe:d7:b1:9f:3d:01:28:c1:ee:07:f6:07:61:7b:
         02:43:28:4b:b5:98:c8:03:8c:4c:6c:91:f3:c0:b0:fc:1a:27:
         cf:09:84:4c:8c:09:a0:5a:97:d7:f3:0f:5b:ef:e6:70:fc:6e:
         67:af:cd:e5:2e:22:34:9d:01:52:1d:71:43:58:4f:57:b9:bf:
         0c:93:16:94:fa:58:8c:8a:58:37:28:85:c5:5d:da:24:89:b9:
         ef:a2:35:10:e8:ac:dc:7c:cd:d7:c0:f2:0c:64:ff:ba:c2:74:
         e2:d3:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:11:37 2025 by rpki-client