Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
File:                     aefaffa5-f3e0-3cff-b520-95718774c4ca.roa (raw, json)
Hash identifier:          GFKeOuzXRq2gotv9L183/1/h62VSJzisme3vIj9OZDU=
Subject key identifier:   96:CC:0B:D6:86:03:D9:0F:2D:F9:B5:FD:11:A8:45:82:40:F0:39:04
Certificate issuer:       /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial:       010D0C9F432858487325B65E707AA7A8AA52896C
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     397745
IP address blocks:        167.100.16.0/22 maxlen: 22
                          216.47.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:b6:5e:70:7a:a7:a8:aa:52:89:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=8ec41c93-3ac8-42b7-9dae-2d2ce301bfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:23:7a:53:58:a0:18:d3:bb:7f:be:b0:ad:75:
                    66:f3:38:45:03:50:44:e9:03:0c:91:59:ea:8a:d9:
                    62:38:57:0c:ca:be:27:e4:a3:1e:6e:31:14:0e:7a:
                    12:46:8b:18:64:42:42:cc:a2:cf:0a:a2:e2:07:48:
                    c7:4f:24:28:4a:52:ac:2d:14:94:59:e4:74:d0:d5:
                    06:6b:c8:2f:f2:eb:ae:9e:42:78:fa:13:c2:49:2e:
                    83:4e:ab:2f:b9:28:ab:30:ca:ea:64:b6:82:87:7f:
                    c4:32:43:c6:32:aa:48:6c:d7:d9:84:b8:34:ad:36:
                    dc:7f:f7:a3:a3:55:3a:51:4a:22:8c:50:72:ad:e5:
                    46:2f:b9:ae:99:d3:06:92:f7:88:1b:c0:88:c5:dd:
                    ea:17:c1:79:ae:48:c8:b0:23:8c:c8:e7:39:90:1e:
                    d7:af:d6:d2:c3:7c:a8:2a:c6:19:3c:d2:54:f6:a1:
                    a6:63:47:bf:5d:a1:af:07:af:9f:8c:4a:df:3d:8a:
                    8f:cf:fc:90:f0:11:7f:cb:3d:80:4e:a3:93:31:7f:
                    d7:98:74:47:dc:75:f1:8a:60:ed:65:f6:87:7e:84:
                    6f:85:a0:26:fa:71:f5:bb:c5:fc:e2:ee:32:49:04:
                    6b:48:e7:cc:22:b1:74:51:4e:f3:db:c6:16:7b:58:
                    6d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CC:0B:D6:86:03:D9:0F:2D:F9:B5:FD:11:A8:45:82:40:F0:39:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.100.16.0/22
                  216.47.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:24:a6:18:0e:06:cc:d8:08:5a:2a:fc:af:7c:10:c8:86:90:
         3a:aa:05:37:d5:4f:df:fe:e8:34:2c:d2:9a:0b:96:36:1a:d9:
         08:d8:5f:dd:ac:60:d8:c4:f4:f0:ae:13:d1:ec:3d:6a:ab:2e:
         2a:3b:e0:73:3d:0f:e4:f9:ba:05:64:74:96:4f:78:a5:5f:fc:
         96:9a:f3:0d:6e:14:67:a4:b2:e7:41:55:3f:03:59:d8:ef:20:
         99:19:b3:ce:29:16:7a:af:06:16:b3:0c:d9:ff:e1:0b:92:3b:
         d3:68:94:82:15:66:c8:2c:2a:4c:82:10:a6:55:a0:63:3b:f4:
         92:d4:4c:9d:ca:53:4f:7b:f4:f5:88:58:48:e7:58:77:1b:50:
         79:c7:51:36:cb:37:29:9c:8a:6d:34:d2:57:1a:4f:54:ad:fc:
         46:64:1e:7a:ee:76:3e:7a:4a:be:82:94:60:a9:3a:39:58:d7:
         3d:b3:b1:2b:b2:16:ef:15:59:e5:16:c5:78:de:9d:33:a1:3d:
         04:c2:85:71:1b:a2:cf:2b:ef:a0:5d:51:93:07:37:75:a5:89:
         75:ab:87:f9:4a:ae:d5:35:8e:62:40:21:17:59:a3:3b:85:ab:
         7f:18:d6:54:5b:06:ee:e6:17:11:dc:87:29:f6:4d:03:6d:c8:
         fc:29:e8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:20:33 2025 by rpki-client