Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa
File:                     7972f1ff-9f54-3af8-9eff-7da8a92874af.roa (raw, json)
Hash identifier:          IS39VS0ffBtNRnAXaI4ZA/YCN0DIwzxON8fnBhTUTX8=
Subject key identifier:   19:33:5B:52:41:79:E2:13:85:27:C1:98:C3:0F:65:73:0F:76:3E:2F
Certificate issuer:       /CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
Certificate serial:       010D0C9F432858480214FCE9F6A102B55AE54F00
Authority key identifier: C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     48252
IP address blocks:        104.245.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:fc:e9:f6:a1:02:b5:5a:e5:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=3ccbd0a3-699f-4422-ab17-ea7a38b27600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:c4:32:78:5d:23:60:69:85:f3:e4:7f:c1:
                    f7:4b:6f:d0:9e:8b:4f:e5:c2:26:6a:7f:96:98:c9:
                    51:c4:ba:5d:ba:f7:82:16:24:95:1b:86:7a:8c:a5:
                    36:8f:54:df:5d:d9:cc:41:88:eb:df:df:b6:90:87:
                    24:3b:fc:98:34:98:3e:00:76:3a:62:16:b6:f3:c5:
                    9b:67:7d:69:75:d9:4e:26:4b:49:34:c7:b4:f4:7b:
                    e2:e3:4e:43:ee:d5:42:98:8c:a5:ad:92:61:64:e2:
                    e7:d9:ac:4f:9f:68:34:18:65:82:31:bc:9a:4e:a8:
                    c0:80:4d:37:55:38:b3:15:90:64:c4:0b:ad:4f:35:
                    04:87:9f:f2:4b:27:2f:22:19:ac:d0:8a:bb:88:b0:
                    38:69:1a:9b:0f:70:ce:01:11:40:dc:ab:59:9a:a6:
                    e2:68:7f:9d:cb:95:1a:97:9d:b2:6e:3c:cb:92:39:
                    d6:ba:ee:5f:75:89:36:7a:37:2c:44:8f:09:bf:34:
                    42:b4:24:2d:76:f9:47:fa:21:08:38:be:bd:b3:5e:
                    d7:9e:73:00:d9:cb:a6:16:1d:8b:23:e0:56:22:d5:
                    ef:3f:9f:d3:73:ef:f4:ef:2a:20:88:53:7f:33:36:
                    6c:95:ac:b4:78:6e:90:9b:66:57:4d:f6:8f:05:b3:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:5B:52:41:79:E2:13:85:27:C1:98:C3:0F:65:73:0F:76:3E:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:26:1d:4a:c7:ad:d0:62:9e:08:71:db:6c:59:2e:7b:1a:
         86:0f:84:ee:b4:44:d3:0e:7e:95:27:9f:32:09:de:e0:26:20:
         a7:69:01:88:bd:84:82:15:be:50:68:a1:79:56:18:c6:d3:37:
         a5:49:bb:a8:84:1d:be:96:03:ab:cb:84:e8:43:97:14:a7:4d:
         ea:33:f8:ac:53:88:b4:d6:bb:fb:9b:70:86:1a:e3:43:d4:5d:
         3c:3c:eb:fd:db:38:67:4b:5e:5c:c7:aa:f0:aa:94:c7:31:69:
         d1:d4:df:41:89:45:6e:d5:a0:d2:b2:fa:d7:8e:ba:78:52:3f:
         7f:27:c3:28:a8:c7:bb:36:f0:87:a3:4f:74:5b:7e:07:11:5e:
         63:be:ec:dd:54:f3:59:f8:71:13:c1:96:a6:1e:b9:3d:07:67:
         dd:18:8f:27:4a:2c:b3:2b:64:85:2f:78:13:86:1e:03:83:88:
         5c:fa:6a:d1:4f:fa:e6:ec:b1:f8:ef:1c:b8:d3:e1:71:27:26:
         e1:82:b9:d2:b7:b8:43:d8:e8:ec:60:ef:3e:28:42:a7:57:91:
         85:0c:80:2a:f2:a5:58:2c:09:8c:02:c3:2c:d9:77:d8:34:c0:
         93:df:44:a9:e1:2b:82:cc:52:42:8b:01:6d:3a:2f:ea:2d:28:
         f5:26:2a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:31 2025 by rpki-client