Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ce255dd8-890f-3e50-8fba-a3ab336e3636.roa
File:                     ce255dd8-890f-3e50-8fba-a3ab336e3636.roa (raw, json)
Hash identifier:          ckB3KZRQcW/DSUy3832fzaxT8JtT0cz6pZ2nGascsCY=
Subject key identifier:   81:F7:7E:89:B8:CE:79:B2:94:69:08:B1:A6:48:5C:14:BB:92:40:86
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325D37210A81A4AF83D6800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ce255dd8-890f-3e50-8fba-a3ab336e3636.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        167.82.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:d3:72:10:a8:1a:4a:f8:3d:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=bd1f5478-917b-457b-a928-df163703d284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:d4:db:fe:ee:11:2d:40:a9:d2:93:a9:ee:
                    db:81:15:ed:fe:87:1a:0c:da:fb:fb:31:71:df:e5:
                    7e:00:53:1b:71:45:fa:e3:8b:b2:9a:2d:97:4e:21:
                    d7:6c:bc:f2:11:1c:ee:75:a8:30:5b:09:21:1f:bc:
                    2f:b4:db:47:9e:e4:f8:aa:18:0e:dd:f7:90:e1:9d:
                    59:ae:63:78:6e:e6:d7:95:80:e0:67:a0:cc:31:79:
                    30:64:dc:72:95:54:56:18:1d:76:c8:2d:10:ac:8e:
                    15:57:65:a8:44:bd:ea:6d:79:cb:ba:ba:0f:04:81:
                    8a:f0:49:91:f9:cc:30:85:41:47:ba:96:1d:b3:60:
                    f9:d8:39:7f:26:fe:aa:b2:0c:a2:c4:31:0d:95:5d:
                    bb:ce:d3:37:10:6b:6c:4d:ed:60:4f:63:c3:8a:40:
                    70:25:9a:33:cf:7c:07:85:43:f2:4d:c6:ac:22:c0:
                    8d:3c:38:a8:f9:bd:f4:9e:52:b5:c3:ca:f4:bc:d1:
                    d2:e1:24:66:e2:09:a1:00:d3:f2:de:86:3b:14:d4:
                    cb:4d:9b:4a:4f:56:42:b3:0a:31:5c:62:7e:3f:ce:
                    66:0c:a0:e8:f1:97:33:26:3a:1e:b8:c2:3c:b5:39:
                    08:1f:74:78:a1:8f:b0:48:19:b6:dd:3c:46:56:79:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:7E:89:B8:CE:79:B2:94:69:08:B1:A6:48:5C:14:BB:92:40:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ce255dd8-890f-3e50-8fba-a3ab336e3636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.82.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:a3:b4:85:c8:a5:66:6d:73:96:aa:b2:e0:75:51:f2:52:40:
         cc:68:11:ae:a5:a2:bf:2b:26:23:bf:b3:2a:ab:3a:f6:aa:b0:
         5c:b3:52:06:7e:19:66:0f:0d:00:08:8d:09:55:46:13:5c:c9:
         f9:3e:dd:02:99:1e:e5:a1:ad:46:20:72:b0:57:64:78:6f:e4:
         2b:d2:6b:e0:fb:01:40:34:a9:8c:9d:d8:04:52:4f:3d:0a:f2:
         6f:4f:3a:51:a9:bc:52:57:ee:e6:e4:56:ba:b0:92:56:bc:24:
         94:0a:e8:5e:7f:e5:46:07:98:b9:81:79:e8:c2:94:dd:14:e4:
         e2:f3:0d:42:e0:ac:e7:d6:20:ac:0f:88:fb:38:3a:5c:88:1a:
         9e:ad:1b:48:5f:1d:70:6e:53:3d:f8:e8:11:44:a6:03:c6:ae:
         da:50:3c:6e:fb:91:00:56:b1:6c:76:49:dd:06:ba:36:d0:07:
         13:2f:7c:1b:2d:41:80:1c:77:a6:db:d6:d4:09:c3:36:f3:17:
         f9:d3:b4:a6:09:c7:82:4b:67:92:9c:a1:99:30:8d:00:ba:4c:
         54:50:83:2f:9b:a7:33:54:b7:f5:85:42:a5:17:56:4a:39:2e:
         a5:75:23:1c:e4:6a:cc:1f:4f:a4:57:4c:ee:21:ed:7b:11:6e:
         85:61:f3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:16 2025 by rpki-client