Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f03c0d69-3553-3ca5-8d4c-0604e861337d.roa
File:                     f03c0d69-3553-3ca5-8d4c-0604e861337d.roa (raw, json)
Hash identifier:          /TuheGWmumRwP1SCsgwZuD5ZSNtEZluCGRLOKYOUErg=
Subject key identifier:   78:E8:17:00:18:2A:7D:94:E6:C3:98:FB:00:A0:3C:8C:B4:9F:1E:51
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325C1C2F9ADEBC5DC2A4600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f03c0d69-3553-3ca5-8d4c-0604e861337d.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        172.111.115.32/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:c1:c2:f9:ad:eb:c5:dc:2a:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=84347625-9b7c-401d-82ce-b4e33d332ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:48:a6:4c:13:20:b6:e5:bb:22:cf:aa:fd:
                    92:38:56:bf:25:69:f2:f1:6a:49:3c:39:0a:04:01:
                    9b:80:03:f6:fe:c6:77:c9:5f:35:5e:16:ae:0c:32:
                    47:f4:52:9d:04:0e:0d:6b:09:74:02:e8:2e:a0:8c:
                    30:87:8f:2d:d4:34:9e:c2:bf:81:aa:e7:c7:ab:9b:
                    5a:f7:dd:9e:99:fb:d2:45:9f:06:3f:db:a5:d2:d3:
                    6f:b5:f5:fc:99:f1:84:8d:b5:9c:c4:e4:74:6e:58:
                    59:7c:6f:26:ff:a6:e9:46:a1:48:09:95:ae:26:f5:
                    1f:ed:31:fb:0e:06:9f:ae:f9:5c:bf:52:d0:20:ae:
                    ce:b2:28:8d:99:08:45:7c:97:b0:a9:fb:1f:66:38:
                    5b:cd:ec:10:ce:d8:53:0b:bf:4f:55:4b:28:dc:c3:
                    27:31:7b:34:a6:8c:8e:e2:f7:95:15:d9:e0:fd:b2:
                    a6:5f:27:1b:6f:d5:e1:97:0b:71:55:2c:7b:38:d0:
                    1a:cb:cf:84:16:b3:17:e3:f4:6c:5e:88:a9:d6:52:
                    52:dc:77:cf:b3:44:e8:cf:ed:e2:6a:69:ec:d9:9a:
                    52:3f:3b:72:c1:70:cd:ac:36:f7:a3:43:c8:a1:1f:
                    58:c5:3f:3b:fb:dd:b0:85:1f:33:7e:1d:3c:b9:ea:
                    c7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E8:17:00:18:2A:7D:94:E6:C3:98:FB:00:A0:3C:8C:B4:9F:1E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f03c0d69-3553-3ca5-8d4c-0604e861337d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.115.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:32:88:c5:6e:a3:21:bd:a0:f3:33:cf:7d:46:30:14:7f:a5:
         58:c6:a1:ba:f9:39:91:70:37:3b:be:34:38:d1:0d:ad:71:bb:
         d1:84:b5:eb:4e:d3:07:08:a9:e7:de:b5:1e:ca:8f:1b:de:60:
         9e:fb:eb:f1:3e:b2:14:0a:f9:71:fa:68:93:a1:39:40:a4:db:
         40:16:ac:f3:44:30:54:10:df:36:d9:9e:35:94:90:88:68:ca:
         b8:9a:7e:bc:4f:1f:6e:d0:0a:ae:64:6a:18:af:03:df:cf:07:
         a7:5c:46:36:c9:09:98:8c:fa:3b:d0:80:ff:56:c9:d2:9b:a9:
         11:f7:4b:08:6c:73:f1:a0:ab:01:92:85:c6:6c:11:5e:3b:54:
         88:39:ab:b3:45:e0:47:f0:1d:8e:6b:45:8d:ab:ed:96:08:04:
         d1:79:82:25:46:19:59:09:86:8f:2d:85:0c:22:32:03:75:41:
         00:5d:72:c1:01:a7:36:bc:55:30:90:8a:11:12:f4:0a:bd:17:
         98:40:77:40:09:ce:0f:83:c7:1b:f0:8e:3b:c7:a3:2b:de:ee:
         dc:f8:71:13:1d:d8:80:26:56:6e:41:47:81:9f:d8:25:14:3f:
         52:3a:64:9a:60:f0:e4:da:ad:d7:01:f9:0a:ca:a9:8b:cd:34:
         e4:ba:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:40:53 2025 by rpki-client