Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa
File:                     54999924-5032-3b39-ac1c-a58f234e2e45.roa (raw, json)
Hash identifier:          X6z907QkhEhtFvqtVqha7WIritg1tqAlStqD8pEeVkU=
Subject key identifier:   50:FF:EC:0C:70:AD:F8:C5:6D:F5:2F:BD:1A:B1:C3:66:96:4C:2B:83
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285847F9B4E16E66770290D603DEA0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa
Signing time:             Sat 23 Nov 2024 14:00:39 +0000
ROA not before:           Sat 23 Nov 2024 14:00:39 +0000
ROA not after:            Fri 21 Feb 2025 14:00:39 +0000
asID:                     26842
IP address blocks:        64.158.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f9:b4:e1:6e:66:77:02:90:d6:03:de:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Nov 23 14:00:39 2024 GMT
            Not After : Feb 21 14:00:39 2025 GMT
        Subject: CN=9a1161fa-2ac8-4692-bd2a-0060bd493a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:62:0c:42:39:28:57:aa:48:b6:2a:90:ca:b0:
                    8c:11:64:36:0c:6c:45:29:94:05:95:53:b8:1d:28:
                    71:f1:8d:9f:c3:63:9a:b3:b7:19:19:2f:4f:9e:ed:
                    5c:a0:55:1a:9c:f3:c9:cc:bd:1d:12:64:13:c0:66:
                    73:77:a0:4f:4a:cd:dc:00:af:8a:10:f3:35:6a:ea:
                    be:fe:34:c4:09:fb:c8:c0:cd:ec:03:c4:f1:30:b3:
                    74:8c:17:e6:10:f7:da:d4:a0:be:73:7e:b0:80:3a:
                    39:7d:16:b5:62:49:36:79:64:7f:34:99:b9:4e:1e:
                    a1:b2:ff:2e:8a:42:8c:a8:d4:d7:75:4f:86:fc:f1:
                    a5:41:51:8e:dd:96:db:ba:f5:65:1e:34:26:e5:6e:
                    80:e1:44:d0:e4:52:66:db:78:93:45:7b:9b:eb:df:
                    61:e9:49:34:59:27:b6:d5:90:83:81:55:2a:95:3e:
                    99:b1:6e:d1:b9:45:14:a7:3b:4a:cf:1d:15:e2:ef:
                    f9:a6:41:a4:47:30:c8:61:73:b8:5d:3b:c9:a9:eb:
                    c2:75:5c:67:ad:d5:f6:d4:de:2f:98:bc:4b:76:96:
                    cb:f0:8f:d0:57:ee:ff:19:4c:bb:60:3b:8c:ad:6e:
                    3a:c1:a9:a5:c7:ef:c8:71:c9:13:f7:24:9b:55:31:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FF:EC:0C:70:AD:F8:C5:6D:F5:2F:BD:1A:B1:C3:66:96:4C:2B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.158.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:33:f9:8a:83:6f:31:07:2f:b1:ce:96:e7:6f:0d:09:7a:34:
         35:4b:4f:9d:1c:ae:5c:25:f5:44:6d:00:71:28:b0:36:4b:69:
         f0:62:f7:1e:d0:da:41:2b:64:05:76:08:e1:41:63:8b:a5:8c:
         6f:d5:44:ac:6e:c8:0d:7b:ec:81:1a:d2:89:17:c5:ab:65:64:
         f9:c3:ea:23:02:e4:5b:cd:5c:91:6f:32:9c:7f:fb:81:8d:50:
         0b:50:23:26:57:83:f6:06:c1:99:7c:db:2c:ac:1c:5e:bf:48:
         67:51:19:c9:79:45:3c:0e:83:e0:4c:d4:5a:da:87:c3:dc:cb:
         8e:1a:8f:fe:87:a6:f9:71:e0:42:23:25:19:57:2b:f8:fa:74:
         bf:64:e9:d3:60:db:10:88:af:85:83:a6:bd:60:37:4d:39:60:
         28:89:90:68:75:44:98:d2:5d:3f:62:5b:69:32:0a:16:08:0c:
         2a:4a:56:68:0e:9f:14:c7:0c:de:bb:eb:c7:d9:8e:06:80:1a:
         36:2f:13:8f:c2:84:9f:71:02:21:3b:0a:e8:95:f7:f0:4a:77:
         4b:d8:b9:c2:c3:b7:90:bb:ef:1e:12:fe:72:86:ba:1f:95:02:
         7b:20:42:72:d8:4e:ba:36:0a:8b:85:29:15:de:45:2f:24:40:
         02:79:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:28 2025 by rpki-client