Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa
File:                     905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa (raw, json)
Hash identifier:          7f9t1+IGkvmX8k4o73mMUSTeZwRWlWdrv7IrunjzWWk=
Subject key identifier:   21:8F:33:D2:2C:AB:06:B0:05:CF:0A:68:9B:FB:B6:CA:4F:96:A2:0C
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F43285848662B3D8EA5066F77FE753D90
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa
Signing time:             Wed 01 Jan 2025 10:26:28 +0000
ROA not before:           Wed 01 Jan 2025 10:26:28 +0000
ROA not after:            Tue 01 Apr 2025 09:26:28 +0000
asID:                     7018
IP address blocks:        199.188.196.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:2b:3d:8e:a5:06:6f:77:fe:75:3d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: Jan  1 10:26:28 2025 GMT
            Not After : Apr  1 09:26:28 2025 GMT
        Subject: CN=9005b2d5-f5b0-43ec-bb43-2d62941f285b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:d9:07:23:27:e0:11:a7:f0:ad:0e:fe:cf:
                    05:66:ec:f4:55:40:ad:74:b7:bf:19:e7:93:59:73:
                    34:6e:ca:0a:bc:d6:ce:99:17:91:6b:b0:1c:08:c9:
                    c0:a5:2a:b3:d9:8d:3f:fe:c4:85:b0:ea:a5:86:f2:
                    e6:0f:ca:dc:ea:26:bf:ac:f7:f6:0e:34:0b:d6:04:
                    16:38:50:0d:a8:c6:02:bf:27:c4:a6:ff:e5:e5:12:
                    90:67:bb:8a:08:4a:31:c4:92:89:11:4b:42:f7:21:
                    ae:d5:d0:c0:be:85:e3:47:71:91:8a:9e:43:b9:d9:
                    9d:bb:02:98:3f:02:c4:89:b8:59:7e:60:6a:ee:39:
                    aa:22:17:ae:73:ac:16:3b:39:08:67:a8:e4:6d:22:
                    12:42:14:cf:59:01:1c:4b:5c:d2:46:3e:9e:de:10:
                    e9:0b:ae:f1:df:21:d4:a8:55:b0:21:af:6b:0e:0e:
                    81:0c:25:6c:6d:5b:da:eb:48:07:9e:c9:48:d5:78:
                    d1:c0:a5:09:ff:51:17:6e:e1:3c:f2:f8:8c:15:b5:
                    c4:31:de:d7:bf:c9:d1:bc:59:65:d0:d8:37:b7:1f:
                    93:2b:cd:b6:b0:dc:6e:46:c5:9e:ed:38:db:dc:02:
                    79:5a:37:15:e5:9a:88:19:48:7b:bd:d9:71:81:07:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8F:33:D2:2C:AB:06:B0:05:CF:0A:68:9B:FB:B6:CA:4F:96:A2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:9f:e3:3d:c0:f8:29:19:c5:b4:4c:ad:29:c1:ff:c2:b2:4e:
         b9:13:98:77:dd:fd:f2:ae:8e:33:b7:19:a1:46:3a:85:90:a1:
         e6:03:bb:cc:7a:92:8d:92:ba:22:81:b0:ec:3e:67:d2:35:57:
         0b:72:69:d7:ec:3f:67:8f:9f:cd:12:04:0c:07:6a:1e:b2:72:
         c4:9e:ff:52:4e:22:6c:98:02:0f:3b:e0:cd:21:e0:ea:af:59:
         22:58:6b:16:1b:5a:e3:f5:4b:c9:65:dc:9e:25:b2:f5:d9:a7:
         fb:2a:3d:fe:94:7d:41:08:5b:dd:af:37:54:c4:70:7a:96:34:
         53:4c:99:7b:8c:f0:f0:af:64:46:a0:34:8c:54:f0:2d:1c:e3:
         e7:48:d3:2f:96:1f:e2:2a:d3:2d:27:34:18:d9:7d:23:77:f0:
         f7:c6:d3:96:87:9e:1d:01:f4:83:02:0f:af:02:fd:dc:f9:3d:
         6d:28:d5:b5:76:49:ca:0e:a4:72:d0:a3:6a:55:1f:3b:7d:8d:
         a9:b4:d9:1c:56:e0:67:4a:d7:0a:b8:3f:6f:77:b8:7a:1c:a0:
         39:09:6d:32:01:4d:35:8d:95:45:23:5b:07:5d:c8:c0:63:ec:
         46:a0:52:6b:88:4b:2d:77:27:b1:df:5c:10:0e:45:df:79:23:
         c0:54:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:55:05 2025 by rpki-client