Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8548b407-be60-3815-ad3f-2a6c01accdd7.roa
File:                     8548b407-be60-3815-ad3f-2a6c01accdd7.roa (raw, json)
Hash identifier:          KY6BR4VNDEqlclXXvk+9sJz1gvCpBzI9S2SevLR3k2Q=
Subject key identifier:   4D:3A:F6:85:A2:1F:B2:DF:FA:6E:D5:04:6C:CB:E4:35:58:35:4A:B3
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858481C9A89A7206808C7B8848780
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8548b407-be60-3815-ad3f-2a6c01accdd7.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     198148
IP address blocks:        63.216.56.0/21 maxlen: 24
                          63.216.82.0/23 maxlen: 24
                          63.216.142.0/23 maxlen: 24
                          63.216.144.0/22 maxlen: 24
                          63.216.152.0/22 maxlen: 24
                          63.216.156.0/24 maxlen: 24
                          63.216.168.0/21 maxlen: 24
                          63.216.176.0/24 maxlen: 24
                          63.217.16.0/23 maxlen: 24
                          63.217.24.0/23 maxlen: 24
                          63.217.40.0/21 maxlen: 24
                          63.217.59.0/24 maxlen: 24
                          63.217.66.0/24 maxlen: 24
                          63.217.72.0/22 maxlen: 24
                          63.217.80.0/21 maxlen: 24
                          63.217.120.0/22 maxlen: 24
                          63.217.237.0/24 maxlen: 24
                          63.217.254.0/24 maxlen: 24
                          63.218.0.0/22 maxlen: 24
                          63.218.10.0/23 maxlen: 24
                          63.218.18.0/23 maxlen: 24
                          63.218.43.0/24 maxlen: 24
                          63.218.56.0/23 maxlen: 24
                          63.218.60.0/22 maxlen: 24
                          63.218.76.0/23 maxlen: 24
                          63.218.107.0/24 maxlen: 24
                          63.218.114.0/23 maxlen: 24
                          63.218.116.0/23 maxlen: 24
                          63.218.144.0/23 maxlen: 24
                          63.218.156.0/23 maxlen: 24
                          63.218.158.0/23 maxlen: 24
                          63.218.162.0/23 maxlen: 24
                          63.218.164.0/23 maxlen: 24
                          63.218.174.0/23 maxlen: 24
                          63.218.204.0/23 maxlen: 24
                          63.218.210.0/23 maxlen: 24
                          63.218.213.0/24 maxlen: 24
                          63.218.214.0/23 maxlen: 24
                          63.218.228.0/23 maxlen: 24
                          63.218.240.0/23 maxlen: 24
                          63.218.248.0/23 maxlen: 24
                          63.218.252.0/23 maxlen: 24
                          63.218.254.0/23 maxlen: 24
                          63.219.16.0/22 maxlen: 24
                          63.220.0.0/21 maxlen: 24
                          63.221.136.0/21 maxlen: 24
                          63.221.152.0/21 maxlen: 24
                          63.221.200.0/21 maxlen: 24
                          63.222.7.0/24 maxlen: 24
                          63.222.16.0/21 maxlen: 24
                          63.222.45.0/24 maxlen: 24
                          63.223.17.0/24 maxlen: 24
                          63.223.20.0/24 maxlen: 24
                          63.223.31.0/24 maxlen: 24
                          63.223.34.0/24 maxlen: 24
                          63.223.44.0/24 maxlen: 24
                          63.223.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:89:a7:20:68:08:c7:b8:84:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=84d23897-f90c-4840-bfca-1fecd40a8bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:49:6a:19:05:6e:50:de:d6:70:26:f5:be:b5:
                    e9:a4:88:40:f7:44:60:fc:86:9c:c6:18:1d:f3:6f:
                    8b:39:ad:66:51:ff:df:b0:9a:97:77:17:46:6e:e1:
                    67:38:66:16:48:8c:bb:01:56:d8:e5:7d:03:db:d6:
                    84:17:93:8b:ef:e7:36:75:6c:50:82:a6:97:ba:c0:
                    8d:96:87:2e:2d:1e:cb:2d:0b:f8:5e:8b:84:4e:22:
                    ab:e7:ef:ba:20:55:94:3b:67:03:2a:01:bd:32:c6:
                    fc:b0:cd:2f:e2:e5:d6:6b:4f:91:67:49:ee:31:5a:
                    23:fe:bc:13:2c:29:55:b5:79:95:ae:c1:c6:e8:f1:
                    f6:19:38:3c:87:ac:bc:71:8e:93:a6:ca:4f:0c:39:
                    8e:13:e7:83:b3:01:25:91:52:b3:7a:c2:7f:43:8b:
                    e3:f1:95:fd:47:1b:b0:15:b5:69:11:4f:38:97:94:
                    fc:0d:28:a3:e0:19:a6:bc:84:c5:d7:86:30:1f:fa:
                    d1:ce:ea:1e:c0:72:52:aa:97:10:ba:f3:98:a9:01:
                    61:28:cc:82:12:02:08:86:61:17:c1:55:d6:14:b8:
                    be:92:9e:bc:4a:df:fe:0d:15:c5:d3:ea:00:3b:d1:
                    67:ea:e1:d1:26:88:42:02:f7:4b:83:cf:53:47:1e:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3A:F6:85:A2:1F:B2:DF:FA:6E:D5:04:6C:CB:E4:35:58:35:4A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8548b407-be60-3815-ad3f-2a6c01accdd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.56.0/21
                  63.216.82.0/23
                  63.216.142.0-63.216.147.255
                  63.216.152.0-63.216.156.255
                  63.216.168.0-63.216.176.255
                  63.217.16.0/23
                  63.217.24.0/23
                  63.217.40.0/21
                  63.217.59.0/24
                  63.217.66.0/24
                  63.217.72.0/22
                  63.217.80.0/21
                  63.217.120.0/22
                  63.217.237.0/24
                  63.217.254.0/24
                  63.218.0.0/22
                  63.218.10.0/23
                  63.218.18.0/23
                  63.218.43.0/24
                  63.218.56.0/23
                  63.218.60.0/22
                  63.218.76.0/23
                  63.218.107.0/24
                  63.218.114.0-63.218.117.255
                  63.218.144.0/23
                  63.218.156.0/22
                  63.218.162.0-63.218.165.255
                  63.218.174.0/23
                  63.218.204.0/23
                  63.218.210.0/23
                  63.218.213.0-63.218.215.255
                  63.218.228.0/23
                  63.218.240.0/23
                  63.218.248.0/23
                  63.218.252.0/22
                  63.219.16.0/22
                  63.220.0.0/21
                  63.221.136.0/21
                  63.221.152.0/21
                  63.221.200.0/21
                  63.222.7.0/24
                  63.222.16.0/21
                  63.222.45.0/24
                  63.223.17.0/24
                  63.223.20.0/24
                  63.223.31.0/24
                  63.223.34.0/24
                  63.223.44.0/24
                  63.223.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fa:4d:b4:d7:e2:54:d4:ac:b0:90:1b:02:71:a2:7f:f9:e1:
         d5:10:63:53:68:f7:53:f7:19:a9:b3:75:7a:6e:bd:a2:27:17:
         2e:ef:34:da:77:4a:6d:ad:51:99:ef:c7:06:d5:47:25:9c:36:
         bf:cc:68:8c:8b:fa:c6:d2:47:62:49:ca:73:c6:e0:4e:82:fe:
         29:52:5b:be:7c:bf:8a:dc:a5:d4:2a:cc:09:68:16:c9:95:09:
         b9:28:c9:ae:5d:cf:ef:ad:22:88:95:d8:de:05:88:55:c2:a5:
         7a:ad:2b:5b:49:17:e6:9c:37:6b:17:ed:df:a8:3e:09:f0:0e:
         48:ac:2d:cc:71:2d:8d:c6:37:36:a4:00:e5:0c:c6:e5:6f:8f:
         47:8c:81:3a:b3:12:f3:49:98:35:46:6d:b5:90:cd:3a:8c:fe:
         8e:db:82:b3:33:c5:cf:f5:c5:11:1f:8f:25:46:7d:c6:9a:e5:
         09:56:5d:75:86:63:03:65:eb:d7:ac:0b:67:bc:1f:61:7e:ab:
         32:48:75:8d:36:fd:b2:dd:f4:7f:d7:94:40:24:fa:c9:cb:a2:
         b6:c0:06:fc:7e:65:24:81:7b:f1:59:1c:6f:50:3c:a8:2e:07:
         23:cf:3f:31:23:f2:3a:26:39:52:0c:a3:05:f5:27:6c:42:ce:
         42:b3:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:31 2025 by rpki-client