Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa
File:                     e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa (raw, json)
Hash identifier:          gfOSm7BSqlQP9zaixddLkdDkhxNX2cB8oum5B/6Bp5Y=
Subject key identifier:   10:75:01:EF:55:FB:E3:D9:6A:42:A9:F4:FD:81:CE:CC:00:C5:B6:96
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F43285848090FB6FC290C378A6C565E80
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     22742
IP address blocks:        162.221.8.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b6:fc:29:0c:37:8a:6c:56:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=abbd26db-5de5-4bf3-8723-a4de39139116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:54:73:a3:f3:25:7b:6c:58:f1:89:9b:6c:
                    48:b6:02:da:b0:db:11:5d:b0:2f:81:63:f6:a4:ed:
                    40:a8:a9:e3:f9:f6:62:38:58:0e:d9:c7:a0:1c:a5:
                    1c:e9:49:f0:37:a2:71:b8:99:84:fd:af:4e:8b:a2:
                    5e:81:6a:b4:2a:16:52:4c:1e:f0:23:1d:fe:d7:de:
                    70:a6:f7:13:93:ac:81:01:ee:f4:35:30:7c:7e:be:
                    01:50:6b:39:ee:20:ac:ff:98:3d:53:e8:cb:9c:ac:
                    3e:a4:a9:54:9e:82:1e:00:b5:4d:0b:99:f6:c6:73:
                    35:5d:9b:c5:0b:64:51:3a:6b:30:31:ad:9a:b5:eb:
                    63:bd:05:0d:24:97:d6:20:f9:1f:c0:87:bd:22:19:
                    98:0f:17:08:e6:2f:95:a2:77:33:b2:26:4d:ab:28:
                    20:a8:12:f8:a9:13:dd:d1:ee:6b:5c:0d:bc:00:34:
                    ed:b6:3a:0c:7e:09:16:07:0a:a3:50:6a:77:43:87:
                    5a:99:20:89:9b:ce:aa:dd:8d:78:d9:7a:b3:a2:6a:
                    f3:ec:cb:06:90:23:e6:a2:74:c8:5b:a5:c1:30:0c:
                    1e:94:6a:d6:b3:38:1f:56:5c:a3:10:1a:6a:f9:92:
                    76:c6:34:94:1f:65:aa:f3:b8:99:af:2e:f6:0f:eb:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:75:01:EF:55:FB:E3:D9:6A:42:A9:F4:FD:81:CE:CC:00:C5:B6:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:55:a1:0a:eb:cc:fc:8c:59:6e:3f:39:a4:6c:ed:54:1b:35:
         ba:b9:c1:4a:cb:70:a2:0c:52:0f:64:2c:19:2f:be:71:20:23:
         12:c3:68:f0:b7:0a:ec:3d:06:0a:94:e8:01:3f:49:af:99:6c:
         10:00:b1:3e:ab:ef:bc:3c:85:22:77:67:08:65:1c:4b:12:15:
         76:88:20:d2:40:b2:18:f0:93:e4:cb:d0:94:91:fd:28:f0:3c:
         d0:34:8b:41:44:ff:2e:a4:1f:d1:11:56:d3:7a:c3:3c:a3:5d:
         b1:82:af:ea:48:e8:4f:4b:f7:11:7b:47:f5:29:89:78:c4:71:
         22:22:74:8b:e9:bc:e0:0f:e7:0b:d6:c1:f0:78:98:21:25:24:
         d0:df:96:a2:40:a7:cb:25:ed:a8:7d:d1:6c:71:33:ff:66:44:
         7f:54:63:ec:c8:52:e8:47:10:34:7f:24:93:86:a5:b4:19:17:
         17:15:68:bd:e8:27:ea:30:06:78:84:7c:1e:e1:b9:04:ad:f2:
         0b:98:a8:10:c6:15:74:7a:5c:81:a0:4c:51:38:97:fe:cf:a8:
         fa:a3:d5:ae:32:6b:ed:bf:cf:69:96:3a:09:ea:dd:e1:ae:c9:
         de:60:4d:35:20:e0:47:1b:fd:0d:ce:c5:e7:c9:98:40:49:43:
         b4:9e:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:38 2025 by rpki-client