Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ceb897f-4086-3fad-b89c-57b3826b40a2.roa
File:                     9ceb897f-4086-3fad-b89c-57b3826b40a2.roa (raw, json)
Hash identifier:          p0ab7sR2KnyAayHNc3qKn/gdfyP/8UfOJEaLPQaIQo0=
Subject key identifier:   E6:2B:D0:3D:FE:EF:67:2D:8D:34:E3:C8:2F:E2:75:B9:63:81:D7:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F0541B2FE625FD635D01C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ceb897f-4086-3fad-b89c-57b3826b40a2.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        141.149.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:54:1b:2f:e6:25:fd:63:5d:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=3d3ec072-21f0-4d29-80be-0c0c538420dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:2d:15:64:24:85:57:3d:34:d6:8e:14:1b:
                    12:57:88:d0:90:2a:08:22:af:a9:3f:22:67:d8:06:
                    cc:0e:05:9e:b2:d7:61:bc:7c:39:5c:c4:f9:53:9e:
                    40:7e:b0:c2:bb:39:f6:18:ed:9c:90:2f:a2:f0:f7:
                    d0:df:ca:f8:ac:d0:3c:de:3b:6f:38:5d:54:37:82:
                    65:f5:83:94:fe:35:c0:83:8c:f7:01:bb:c2:c0:93:
                    be:e1:9f:35:6a:30:76:49:ff:f9:26:d2:2c:b5:77:
                    6f:3d:80:0e:ee:ba:e4:95:08:e5:1b:1b:9d:37:2e:
                    c0:79:d7:52:7f:19:c5:21:bd:de:52:eb:06:8f:8d:
                    6f:a2:3c:f3:d5:6f:56:ce:3f:2f:44:8e:1b:67:0f:
                    3b:11:3b:a3:82:70:7a:ce:32:ae:5f:f7:89:69:ce:
                    98:47:93:10:2f:6e:4e:dd:f4:45:4e:0c:33:6b:d3:
                    7f:4b:a3:6e:b6:b0:de:15:99:c7:60:86:99:4a:92:
                    1e:65:09:07:bd:5b:ea:a0:eb:66:eb:4e:a1:80:a8:
                    7e:af:59:b5:f0:da:4a:b1:67:13:b0:95:58:7d:21:
                    0b:76:22:61:7d:12:64:8d:84:55:ec:80:f2:5f:13:
                    c9:36:7f:e2:6f:f1:d1:f8:db:69:a9:c9:a7:b0:a5:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:D0:3D:FE:EF:67:2D:8D:34:E3:C8:2F:E2:75:B9:63:81:D7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ceb897f-4086-3fad-b89c-57b3826b40a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.149.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:0c:7f:ac:ef:ac:a2:6e:4c:f5:5d:ad:9b:5e:39:33:90:
         18:f0:1d:48:bd:14:ae:a5:0b:e2:f6:37:40:0a:13:9a:89:c9:
         12:e4:fe:b7:6a:5c:e2:0c:73:31:6d:b3:c8:4a:f8:00:b6:c5:
         80:8c:dd:bb:25:2c:53:0d:3c:a1:78:86:e3:a9:46:f5:73:60:
         5a:1a:0e:46:56:0d:fa:14:0a:b5:01:de:95:e3:1c:31:b4:dd:
         3d:18:a6:c0:3d:7b:c3:4a:e9:75:36:6e:a4:08:1c:48:b0:6c:
         26:4d:9e:ea:17:db:9c:3c:cc:de:5e:f3:07:b8:80:5c:b3:20:
         bd:2e:0f:55:b2:52:23:3f:21:c0:3d:e5:6e:15:a1:2b:67:f5:
         fd:9a:20:74:44:c9:3d:4b:a3:57:73:da:10:a9:cc:8e:87:ad:
         32:55:d0:e4:38:c9:93:77:69:fa:48:47:0f:10:46:e5:ae:bc:
         86:56:aa:a1:b6:23:61:25:58:e7:7e:94:57:86:78:66:a5:62:
         94:bd:14:17:3e:67:71:74:e4:72:de:4f:dd:e5:f0:04:51:3b:
         20:e0:a3:3f:c6:94:09:de:74:12:53:92:da:52:05:cf:e5:ff:
         47:ea:a8:da:be:a0:ed:38:14:29:71:80:1d:1c:4c:d8:ec:d8:
         e6:0e:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:10 2025 by rpki-client