Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/fa30a889-abf9-322d-8e03-0076a19d3556.roa
File:                     fa30a889-abf9-322d-8e03-0076a19d3556.roa (raw, json)
Hash identifier:          melvBu3ZWwQfNFenJyLkHuywxvo7a+DYwqcGV8Xwu/U=
Subject key identifier:   EC:64:09:3A:61:0A:3C:D6:5E:C9:AA:5E:AB:64:25:57:4E:46:33:25
Certificate issuer:       /CN=c235459b-705a-42fb-9059-b6a9bf0c853f
Certificate serial:       010D0C9F432858482EC008E0F96C81FD8B948EC0
Authority key identifier: 15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/fa30a889-abf9-322d-8e03-0076a19d3556.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     393905
IP address blocks:        216.245.176.0/24 maxlen: 24
                          216.245.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:08:e0:f9:6c:81:fd:8b:94:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=5126cddd-fc53-4cd2-b8dd-a79b1f22b7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:cf:49:07:8e:b0:1a:e8:50:69:a6:49:a5:
                    24:c4:5b:6d:5f:a4:de:1a:6a:c5:0e:8d:18:8d:a8:
                    26:59:bf:96:6b:40:6e:49:5f:9a:f5:52:92:f8:71:
                    07:8c:74:08:50:49:08:5a:9e:5b:cb:11:4c:c4:62:
                    0c:dd:9c:c4:50:2b:31:94:bf:71:3b:5f:fd:1c:33:
                    41:f0:c8:b3:ba:e6:8b:c3:32:37:ff:f4:17:c0:e1:
                    5d:e6:14:4f:b3:b4:92:28:64:5f:c8:96:44:65:30:
                    f0:7c:2d:7b:fb:1c:7f:24:c1:9c:f4:fd:51:75:81:
                    f4:72:2f:26:1c:c7:cc:20:85:85:e1:b0:74:1b:97:
                    1b:52:0e:54:9b:af:39:2d:86:00:a1:e1:3b:f9:aa:
                    62:73:1c:9c:9f:83:eb:20:bb:6b:10:53:da:2f:7f:
                    dc:b4:6a:fa:39:31:5d:60:f6:c7:a1:bf:6c:d5:49:
                    db:a1:64:46:24:e5:6b:75:e6:73:49:01:a6:2b:9c:
                    5c:41:bf:9c:45:54:f5:50:d2:a2:b2:35:e9:2c:69:
                    a5:54:98:23:ad:eb:01:3a:57:7a:e2:43:4b:04:f9:
                    0f:9d:05:c2:1a:28:6b:90:7d:1d:c3:0f:36:db:d3:
                    3c:44:bf:66:8c:9c:60:61:17:38:11:8d:07:29:ad:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:64:09:3A:61:0A:3C:D6:5E:C9:AA:5E:AB:64:25:57:4E:46:33:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/fa30a889-abf9-322d-8e03-0076a19d3556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl

            X509v3 Authority Key Identifier:
                keyid:15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:63:40:c9:90:a1:a8:6c:86:0a:a7:b7:b4:dc:7c:3a:94:fe:
         ac:12:28:10:91:38:06:99:eb:cf:f7:0d:e4:19:4a:02:77:3c:
         a8:17:c5:07:f2:0e:9d:3e:24:71:e0:ce:5c:5f:84:4c:0f:67:
         c3:eb:08:4f:d5:d3:0e:25:a2:84:f4:84:d4:2a:0f:61:c7:56:
         65:20:a8:d7:ac:0b:c4:d9:03:02:c6:a1:2d:c6:5a:e1:e2:62:
         94:e6:b3:d1:d4:9f:66:1c:3e:7b:4c:c0:49:8e:05:72:fc:cc:
         6f:4d:7e:7a:c3:db:f3:68:50:2a:9f:9c:dd:78:30:89:7f:af:
         f4:d7:b6:b7:41:c5:4b:56:16:1f:e9:28:99:eb:e6:7f:43:51:
         c4:5f:73:9c:27:09:66:ea:6e:b6:23:c1:95:d0:ff:62:85:6b:
         93:d7:fe:86:1d:24:06:06:50:7d:ad:f2:54:85:0f:83:82:29:
         87:35:0c:34:1a:90:ef:98:2a:cb:5f:3d:dc:37:ff:e3:b6:7c:
         e5:51:8c:ec:ed:58:e4:9c:72:a1:ae:c6:97:66:98:95:8c:40:
         7a:c3:8f:de:55:60:1f:a2:4d:23:c2:34:6a:59:a0:d7:e6:4d:
         84:cb:fd:6a:1c:f6:8f:4a:44:b7:21:c2:5c:98:56:82:23:9e:
         6f:18:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:47:25 2025 by rpki-client