Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/6d14574e-b5d2-3a05-b121-6afafcc71131.roa
File:                     6d14574e-b5d2-3a05-b121-6afafcc71131.roa (raw, json)
Hash identifier:          RgFvslSzh6qqo1mVk2Z+vuW9ZvAo82xtgRS3GaFv308=
Subject key identifier:   3B:2B:C5:CB:5F:38:7B:5B:27:08:A3:D0:C1:60:49:5B:A1:E9:53:F3
Certificate issuer:       /CN=221cdd91-10e9-41bb-8765-69edc6f1e631
Certificate serial:       010D0C9F43285848159FEB9F6588E17390379D80
Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/6d14574e-b5d2-3a05-b121-6afafcc71131.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     16509
IP address blocks:        130.50.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:eb:9f:65:88:e1:73:90:37:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=f3c3149e-01c9-4be2-913a-d414413589e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:34:1f:ec:ef:32:36:cc:c2:e5:66:b5:6d:
                    fb:c9:b3:88:52:89:c7:af:60:a3:10:1f:b6:3d:c7:
                    a5:84:a0:5b:47:93:78:00:76:03:40:1e:c2:45:5e:
                    ef:4b:6e:f1:39:23:1b:3b:6e:d0:aa:e1:d9:1a:76:
                    b0:f2:31:fc:d2:2b:69:d3:84:ca:18:54:7a:5f:1d:
                    4e:cd:d4:c2:d8:74:90:ee:23:ef:a2:22:c5:60:81:
                    2f:a9:f8:54:8f:e2:46:1d:09:37:18:28:fc:8d:61:
                    5e:e1:6e:e2:57:53:c2:47:72:ec:5a:df:e2:7f:7d:
                    47:a3:9b:77:94:19:03:1c:b4:72:19:07:2b:26:c2:
                    c4:fd:d4:b9:35:9b:06:70:a0:e2:e2:51:8d:f5:e2:
                    61:01:69:f3:b9:8a:18:35:64:cb:1b:16:a8:de:48:
                    7f:b8:5e:21:ed:51:4c:de:67:a1:b6:73:ff:3d:4e:
                    f2:d1:db:a2:02:c4:cc:93:70:e6:83:d3:94:a8:38:
                    ef:44:08:e3:f5:91:2e:60:72:a7:ff:e6:80:ae:55:
                    e6:26:65:db:43:58:b5:f5:11:84:21:7e:2c:b9:47:
                    39:c3:5e:f2:64:60:dc:73:c7:59:21:f6:60:87:32:
                    53:60:ff:d2:b1:8b:4b:3d:28:51:46:34:66:1a:79:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2B:C5:CB:5F:38:7B:5B:27:08:A3:D0:C1:60:49:5B:A1:E9:53:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/6d14574e-b5d2-3a05-b121-6afafcc71131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl

            X509v3 Authority Key Identifier:
                keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.50.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:17:e6:f3:9f:c5:f5:5b:fc:e5:df:39:13:e7:9e:89:12:
         df:7a:1f:59:fc:9c:1f:48:fb:ba:9d:e7:52:9b:ba:48:cf:e4:
         e5:a0:7d:46:76:40:9a:70:d1:88:b2:65:c0:9b:51:12:5b:b3:
         b3:c7:f0:a9:2e:f8:f7:73:0e:64:5c:b3:b9:13:73:3b:19:e9:
         d7:59:43:66:ca:8d:69:9b:87:e2:dd:97:ee:00:3b:75:fc:dc:
         bb:27:30:bb:e9:f8:ca:df:79:02:43:08:90:da:fc:db:fa:2e:
         66:24:17:8d:25:eb:68:ea:2e:5c:ad:cd:18:ee:f2:88:08:65:
         d2:65:99:73:a1:51:f5:b4:77:5d:dd:c4:a7:17:c3:6e:15:58:
         d4:98:a2:40:e2:f6:da:0b:15:f3:23:e6:8f:eb:50:02:fb:86:
         a2:0a:3f:d6:95:e7:a3:dd:30:98:90:c9:e9:a1:af:d8:13:9f:
         24:46:d3:b0:20:bd:11:ac:b6:bc:0e:81:e7:ff:f5:65:25:c0:
         7a:29:4f:55:91:ea:5f:40:f9:73:2e:4e:5b:56:9d:19:9d:ab:
         cf:72:f0:a2:d6:bc:5b:76:6b:fc:49:45:a8:6a:71:b8:fa:3d:
         b0:9e:3f:a7:cc:a8:85:1f:e0:73:b0:e1:01:aa:c5:db:04:66:
         57:08:2c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:45 2025 by rpki-client