Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa
File:                     308f5d06-7ebf-3daf-b45c-37864122c3d4.roa (raw, json)
Hash identifier:          dK8eTrpzmUzOG2slga5l+X/2uFIymnSQk1XzruDUCpw=
Subject key identifier:   0A:75:16:1B:04:4F:3B:0E:47:D8:21:46:61:42:5E:2B:20:34:E5:C2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F6292ED7449A1EB4E2E42CC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     15169
IP address blocks:        142.251.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:ed:74:49:a1:eb:4e:2e:42:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=bd48f946-91a3-40ed-936b-d1d763214bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:37:ee:df:69:34:af:ee:af:43:41:7e:7c:8b:
                    9e:8e:f9:3a:a9:69:af:3f:a3:ed:a9:83:ed:98:00:
                    1c:7b:6c:3d:d9:10:c1:ac:a2:90:74:ca:8f:7e:50:
                    62:da:7f:03:92:ec:b0:87:ee:00:15:f0:95:cb:40:
                    a3:29:59:c2:39:3c:b6:6c:35:e6:ed:6f:2e:7b:6a:
                    83:3e:05:fc:bf:3f:71:22:d8:27:50:18:45:0d:b6:
                    79:e4:8d:ff:cb:73:a3:36:42:40:58:a1:79:ba:54:
                    3d:2f:40:65:58:8b:cc:0b:b4:26:5f:90:0b:ce:5d:
                    81:0f:d9:f0:4f:fe:52:ba:3f:d4:0e:11:0b:48:cf:
                    7f:c2:d8:94:2b:93:79:e4:06:cc:94:62:f6:e5:5b:
                    6c:1e:de:53:f7:07:06:79:cb:f0:0f:7e:e4:78:55:
                    5a:0d:f4:fe:fd:09:9d:6c:a5:cb:79:6f:39:55:93:
                    89:b6:a0:6c:66:51:53:af:1c:66:78:c3:fc:d7:22:
                    b2:5f:50:bd:a1:8c:2d:e3:db:4b:20:cb:32:a0:17:
                    e9:68:6b:8e:92:db:80:05:66:de:35:8c:58:02:06:
                    f7:fa:2e:65:ab:09:52:ba:02:ee:dd:9e:fd:cc:43:
                    e2:18:a7:27:29:60:39:f7:39:0b:16:9e:8f:d5:a4:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:16:1B:04:4F:3B:0E:47:D8:21:46:61:42:5E:2B:20:34:E5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:1f:b6:14:e9:01:b4:7f:7c:c4:4d:6f:ff:c1:92:ac:48:a7:
         be:32:0e:dc:a8:3a:f8:50:5c:1e:0b:2f:43:e9:29:51:ff:76:
         44:66:7e:bc:70:37:73:05:5c:73:e7:9f:00:65:90:50:0a:bc:
         51:ed:c4:78:5f:e8:e3:ae:ad:b9:52:dd:27:f2:a6:d7:4f:76:
         1b:da:85:83:0d:a9:f7:35:63:85:4d:cf:42:4f:bd:17:00:de:
         53:85:ef:0d:da:b7:c8:4d:a5:45:ce:44:7b:d1:9e:23:df:57:
         60:f3:9a:ec:92:f1:8a:79:bb:93:e7:ce:bf:34:67:67:fc:dc:
         d2:6e:c0:db:62:1e:f9:b9:a4:ab:80:13:4a:f4:37:5f:11:5e:
         39:34:46:6e:1e:32:8d:ce:8f:6d:51:40:c7:47:6e:7e:bc:5c:
         75:22:ab:8f:fe:a8:93:89:42:2f:a5:28:56:eb:56:af:03:41:
         e6:8e:86:c4:b6:12:38:47:01:dd:b7:cd:f2:50:86:83:53:61:
         b0:7a:b2:e9:04:7f:c5:ee:78:94:87:92:04:d1:cc:43:76:0c:
         6e:8e:b3:fa:6a:7c:74:44:95:38:04:c2:a1:4d:ec:ae:de:25:
         3f:9e:55:bc:ec:92:65:5c:26:2f:04:b0:e4:6e:df:81:45:fc:
         98:45:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----