Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/12875a52-35c3-3708-ba26-fcd580857baa.roa
File:                     12875a52-35c3-3708-ba26-fcd580857baa.roa (raw, json)
Hash identifier:          oNkhZobBpaEEEZpSnhg0tvvT3+L8ZlGTByvhzJD9lmc=
Subject key identifier:   79:95:6B:E3:15:9D:40:A2:B7:5E:7B:4B:64:EE:23:10:8E:12:60:9C
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858487755D9879917692481312A80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/12875a52-35c3-3708-ba26-fcd580857baa.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        208.85.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d9:87:99:17:69:24:81:31:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=f2e0f97c-a317-49c6-846b-b9d933a1e971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:99:f5:0d:c7:43:5c:a9:86:b0:80:78:b2:
                    28:39:e4:e0:f3:bd:de:bf:c7:f2:46:9c:40:b4:45:
                    91:75:68:d8:ca:9e:22:e1:ec:30:52:bc:3d:3b:7e:
                    df:23:58:eb:23:bd:75:cb:5a:c5:9c:a7:10:3c:00:
                    45:fd:90:21:db:70:d0:84:47:6a:13:05:24:33:16:
                    f3:5b:dc:03:4c:44:d4:2a:67:c0:82:45:f4:74:93:
                    fe:82:ec:96:73:ee:8a:c4:b4:b5:55:c1:5c:c8:f6:
                    92:ca:5c:73:6c:c3:76:bb:19:f9:68:43:15:b5:30:
                    06:44:3f:2f:63:3a:8b:4e:24:f6:4f:81:75:22:51:
                    d9:f0:b1:d8:ae:33:f4:ec:8b:a8:e0:4e:fb:c8:62:
                    c7:8a:2a:69:fc:82:16:21:d5:aa:06:0f:8f:2e:e2:
                    d3:0b:fb:62:ab:fc:57:6d:cf:7e:47:74:c8:3e:78:
                    1d:84:12:50:55:65:0f:49:00:c1:b3:97:55:36:48:
                    c5:bf:af:f7:1f:e4:40:78:d7:2c:da:92:a5:6f:9e:
                    4a:98:dd:ed:76:0e:33:02:62:c8:fb:d5:a4:59:d0:
                    3e:ed:7b:6f:ba:01:22:37:24:20:29:df:cd:54:a6:
                    0d:f2:14:ad:cb:a7:1e:7c:0f:7f:c8:d9:0c:45:ae:
                    07:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:95:6B:E3:15:9D:40:A2:B7:5E:7B:4B:64:EE:23:10:8E:12:60:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/12875a52-35c3-3708-ba26-fcd580857baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:fa:af:50:39:d1:fa:ef:36:87:c7:01:29:fe:9a:73:3a:
         04:3c:d4:da:5c:08:d4:b5:ec:e6:d7:52:58:ea:e1:9f:8a:f8:
         f1:08:e1:02:2f:34:28:09:41:84:a0:fc:4d:cf:3a:01:2b:a3:
         b4:3f:d7:5c:08:db:51:a4:5a:36:7f:40:58:d8:4a:e4:23:37:
         49:2c:37:d8:d0:d7:20:bc:e4:89:67:39:49:8e:ba:0a:9d:19:
         a5:9d:2f:80:b3:7b:ab:b9:f9:88:ce:b0:d2:93:ce:b5:21:a9:
         47:73:4e:f8:aa:8a:d6:eb:b7:f7:0c:3c:d3:a4:11:d9:d0:14:
         17:03:2d:89:5e:2c:95:1e:a6:da:14:5f:c2:0d:53:17:a3:44:
         4d:1f:fe:6f:b1:43:e4:b9:25:c7:c0:4a:09:4c:15:71:5b:e6:
         fe:2b:1a:34:a3:29:a7:46:26:3c:bd:4c:51:25:30:e7:25:3f:
         d5:ae:0b:3f:0b:ce:fb:22:b3:6c:dc:c8:96:2e:a5:f1:8f:0d:
         71:ed:85:b1:fd:b3:48:23:4a:ff:bc:1c:b2:2a:c3:44:13:d5:
         60:80:2c:c0:03:c9:d5:ac:59:cf:0d:1a:28:95:ae:9c:99:fd:
         37:90:ba:45:b2:0c:d0:29:f8:0f:e5:b7:aa:23:6c:2e:bd:27:
         be:3c:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:21 2025 by rpki-client