Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/625bb429-e840-3ba8-9751-4866bd730d8c.roa
File:                     625bb429-e840-3ba8-9751-4866bd730d8c.roa (raw, json)
Hash identifier:          4GIP1v2Px/3CvGIrwbtvp50dXED1PSK61A/XIfsu7FM=
Subject key identifier:   30:3A:32:8C:98:CA:2C:88:83:9B:7D:B8:0D:A6:CD:86:DD:9B:96:9B
Certificate issuer:       /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial:       010D0C9F432858499436FA3F254538FA56E35680
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/625bb429-e840-3ba8-9751-4866bd730d8c.roa
Signing time:             Sat 19 Apr 2025 15:04:14 +0000
ROA not before:           Sat 19 Apr 2025 15:04:14 +0000
ROA not after:            Fri 18 Jul 2025 15:04:14 +0000
asID:                     20473
IP address blocks:        212.115.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:94:36:fa:3f:25:45:38:fa:56:e3:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
        Validity
            Not Before: Apr 19 15:04:14 2025 GMT
            Not After : Jul 18 15:04:14 2025 GMT
        Subject: CN=d5432449-adda-471d-8259-a06fc5759f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:01:00:fa:34:47:ca:d2:0e:af:76:5f:89:
                    a5:68:ce:66:4e:44:9d:5b:28:62:ea:75:06:b7:f9:
                    80:d0:a2:65:46:f5:04:97:d9:81:eb:08:b0:b9:20:
                    d5:1e:c8:b2:a9:ba:38:95:f8:89:5c:4a:27:74:22:
                    a8:c5:73:0e:16:12:1b:fa:ae:d3:15:58:b3:b2:7d:
                    34:76:50:23:94:1b:4c:ab:95:e9:99:a4:dd:33:e5:
                    37:9e:ff:03:e4:18:39:0c:6b:63:71:e7:7a:72:84:
                    30:10:2b:e8:a2:1d:fd:52:4e:65:dc:ed:3b:ea:7d:
                    a7:93:af:55:6f:98:11:88:fc:f7:42:12:1c:8d:4b:
                    e6:6f:3f:81:6d:83:43:8e:84:c4:3e:a1:ab:2b:56:
                    48:5e:7b:0c:9c:97:48:64:57:62:7e:5c:94:1b:f0:
                    3b:00:01:f3:aa:b6:5e:4e:d0:98:bb:b3:6a:cc:a5:
                    ca:c2:81:ba:67:5e:e1:20:d7:98:60:21:aa:f1:53:
                    e1:28:ee:f2:f4:58:50:e0:cb:6e:86:bd:1b:d0:b0:
                    6f:f7:a0:3f:84:26:d3:99:99:55:9f:ad:5f:71:39:
                    32:1b:73:20:e1:cf:81:42:d6:f0:b0:b6:41:b4:d5:
                    84:3d:04:fa:91:bb:c2:3b:4b:8a:5c:86:d0:92:3f:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3A:32:8C:98:CA:2C:88:83:9B:7D:B8:0D:A6:CD:86:DD:9B:96:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/625bb429-e840-3ba8-9751-4866bd730d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl

            X509v3 Authority Key Identifier:
                keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:80:cc:c9:c5:9a:8c:81:bd:5d:6f:db:19:2b:d0:bb:5f:
         93:a2:6f:5c:36:41:14:50:16:94:c2:17:c4:ef:f3:da:7c:79:
         f9:54:84:c7:7a:d2:4b:52:0d:d5:4b:20:d2:27:7d:97:79:57:
         a5:16:d4:f8:dc:ee:25:3a:1f:62:b0:52:5e:4b:87:2a:fc:48:
         f9:a8:11:84:63:b7:49:7f:20:c5:17:05:74:0f:44:44:77:6b:
         ad:66:a0:45:d4:8d:76:3e:67:b2:1f:2b:d1:a6:ca:48:ff:54:
         ab:eb:35:4d:2c:91:f2:83:51:d7:93:88:ea:07:47:4c:a7:aa:
         b8:79:7a:a9:88:74:08:fc:be:ab:d0:b4:74:63:f4:bd:66:10:
         e0:7b:8c:78:15:8c:de:bb:b6:fa:d0:22:4c:1e:2c:43:8e:10:
         54:09:79:2a:dd:8f:50:8b:ee:2d:85:da:37:70:1d:eb:0a:91:
         14:b4:a6:eb:aa:8b:94:f1:d6:1a:98:2e:1a:db:f1:84:fc:ec:
         4c:13:88:93:5e:3b:95:25:cf:5d:11:fa:72:e9:fe:f0:61:10:
         96:6b:4f:de:16:a2:5f:07:da:3f:cc:9a:09:d8:57:2b:59:28:
         ac:ad:1a:74:df:dc:28:30:e3:c2:f5:68:53:25:c5:3f:00:f9:
         1a:63:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:06:11 2025 by rpki-client