Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ce2c4d-ed61-33fc-8be1-f196a52f23df.roa
File:                     d8ce2c4d-ed61-33fc-8be1-f196a52f23df.roa (raw, json)
Hash identifier:          aLwv0RPK51AOU5HGKFAU3G7a/lL13SVFk8fcYs4nifk=
Subject key identifier:   D6:BE:E4:1D:33:99:EC:E0:ED:75:47:C6:51:E5:01:97:DB:58:AE:BB
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285848143A7FEE2AD887AD3C69B300
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ce2c4d-ed61-33fc-8be1-f196a52f23df.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     26100
IP address blocks:        205.156.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7f:ee:2a:d8:87:ad:3c:69:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=b03079e2-9561-4a55-b918-24d4ecdcc49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:bf:55:40:25:42:f0:37:39:f0:11:ee:57:
                    6a:c0:53:90:56:85:af:cc:01:19:cc:fa:61:34:94:
                    99:39:2d:e5:1b:b0:1e:bc:3b:6a:60:1c:9b:e0:33:
                    d0:e8:ce:79:c7:22:4d:7a:5f:9f:7b:10:21:d2:82:
                    52:52:6e:1e:d2:e7:5d:58:50:8c:f1:99:b2:88:86:
                    55:ba:95:87:6e:0c:2f:4c:bc:d0:0e:39:82:88:1d:
                    2c:41:32:3c:aa:16:95:6f:02:d6:4b:81:38:34:7b:
                    07:c0:03:f2:1c:85:91:73:cd:47:07:c4:25:64:a5:
                    a0:2c:54:fc:1d:49:35:10:48:29:90:12:8e:c4:ce:
                    36:8f:b9:d8:bc:56:f0:0d:51:96:79:d7:36:ee:66:
                    38:f3:0f:62:04:9d:56:ea:9b:85:0a:73:27:6f:cc:
                    51:f2:7d:b4:f6:66:be:48:76:e2:96:3c:3a:4c:e9:
                    0e:ab:5c:9e:ec:72:a7:6a:99:3b:6a:77:c9:bc:da:
                    f6:5e:67:2c:73:f1:d0:23:42:cb:c9:ac:5b:81:f9:
                    63:96:6b:0d:17:4c:8c:f8:8a:91:82:09:c2:fd:37:
                    72:34:0e:7f:8a:3f:33:e9:2c:56:52:4f:19:87:e0:
                    cb:8b:ed:fb:c5:e5:28:2d:85:52:90:c6:99:b3:d7:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BE:E4:1D:33:99:EC:E0:ED:75:47:C6:51:E5:01:97:DB:58:AE:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ce2c4d-ed61-33fc-8be1-f196a52f23df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:6b:4b:b8:83:60:f8:cb:05:52:89:86:db:d4:a8:5d:2b:
         9a:74:f5:42:56:76:3c:c5:d5:be:35:95:aa:8b:ab:0f:28:e8:
         4a:13:da:19:2b:4e:6f:6c:3f:73:d7:53:58:ca:7c:a2:e4:21:
         be:b4:6a:b4:05:06:3b:ca:fe:cd:c7:e3:0f:21:fb:10:5e:6b:
         1b:12:43:51:4e:a6:64:bd:ea:83:92:97:39:2a:7e:a6:fe:89:
         bb:8d:08:50:63:b2:9e:cc:87:5e:11:af:20:44:bb:0f:61:61:
         ed:0e:db:e5:19:66:69:62:5f:a0:bc:ad:d9:5c:ca:46:04:5e:
         d4:d0:ef:53:05:51:a3:34:d8:c6:46:3c:ea:14:4f:78:7c:b1:
         bc:e2:81:c6:44:02:54:6d:ff:9d:46:ab:19:77:8f:11:ae:5a:
         b1:53:4b:f9:9d:1d:17:4e:04:8c:8d:c6:21:3c:83:15:fb:0b:
         52:c1:0f:f6:00:cf:a3:1b:70:d7:0c:91:f9:b0:21:75:33:74:
         5f:db:8f:65:76:49:ff:40:80:84:45:3e:ab:30:aa:d2:03:45:
         c2:2d:6d:9f:80:c4:84:aa:6d:f9:4b:2a:7b:c0:60:97:1a:30:
         e9:00:b3:b5:f0:62:ac:66:d5:cf:9d:12:41:e5:d2:5b:b3:38:
         b0:4c:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:23:17 2025 by rpki-client