Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09984cd6-4e9e-3a11-8b1e-c812381993c2.roa
File:                     09984cd6-4e9e-3a11-8b1e-c812381993c2.roa (raw, json)
Hash identifier:          0hryFDIdmaNQBMLcT6dX5J+eO9Xll5ZzhoF4fKQCWzI=
Subject key identifier:   15:18:02:F1:B9:56:5B:A6:F9:27:5E:B9:38:9A:B3:16:BE:85:A6:34
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A356CA35BB1CEF6B34480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09984cd6-4e9e-3a11-8b1e-c812381993c2.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:35:6c:a3:5b:b1:ce:f6:b3:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2252818e-77e8-4e19-bcfc-c10ea91a5b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8c:45:d1:9a:d9:78:34:f9:8b:5b:46:5c:c3:
                    5b:21:46:23:ce:40:8e:4c:1b:78:37:0a:34:e5:8a:
                    2a:3f:5e:00:f1:78:02:db:34:06:22:93:7c:4b:69:
                    0c:21:fc:e2:81:58:a3:db:50:60:a6:17:46:f1:20:
                    f2:07:a6:9a:e4:a0:85:70:4f:37:7b:f2:82:eb:1d:
                    d0:77:96:d4:49:69:c8:b3:d2:78:de:d5:f2:02:23:
                    91:38:f7:05:a5:88:aa:45:d4:9e:66:d2:ce:4d:36:
                    93:9c:b8:22:f3:f3:ae:b8:39:a2:e7:e3:38:7e:93:
                    53:40:1b:6d:44:58:20:54:11:37:84:37:09:b7:7a:
                    e9:13:a2:c9:b9:9e:7f:77:68:53:f3:3e:41:bc:83:
                    26:49:d6:f6:be:fd:51:be:7a:49:82:e5:de:51:40:
                    8a:a6:57:91:f3:66:b8:26:25:f2:19:eb:1d:be:70:
                    05:76:53:58:7c:e2:24:8b:92:5b:04:6f:92:8a:f2:
                    ff:b4:ab:89:45:f1:f5:53:b6:60:1a:eb:0e:d7:22:
                    7a:7d:54:73:e6:68:77:b2:b8:00:bf:82:4f:ad:c1:
                    2a:ab:9f:85:cb:83:37:5a:3e:ab:23:47:d1:79:0a:
                    93:fb:cb:da:6f:00:c9:b0:69:de:83:f5:e6:69:71:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:18:02:F1:B9:56:5B:A6:F9:27:5E:B9:38:9A:B3:16:BE:85:A6:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09984cd6-4e9e-3a11-8b1e-c812381993c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:46:32:9f:62:ee:b3:26:e7:e9:29:05:c5:35:f3:dc:7f:
         05:be:96:17:b3:4e:a9:d4:38:2c:d7:08:6f:24:25:d9:f1:dc:
         75:9a:2b:b2:7d:c0:33:88:3d:c3:03:3e:43:3b:20:8c:26:c4:
         03:33:12:62:12:3e:33:d3:95:c6:84:e5:c7:5f:57:7d:0b:cb:
         ec:d3:23:5f:77:3d:fa:86:95:68:a3:ab:1d:9a:c6:98:cc:7c:
         7b:69:77:19:23:54:01:50:8c:78:17:ec:d8:f1:42:10:99:b0:
         29:5e:a1:bc:d9:c3:01:4f:34:f9:6f:0c:26:8e:92:63:b4:52:
         c6:ac:e7:e7:f5:0b:81:f4:ef:18:99:20:de:27:29:5b:6e:7d:
         b9:ce:09:3c:4d:75:a3:9e:3e:0c:b5:60:e8:76:61:0b:cf:c5:
         5b:65:62:75:59:48:c2:4c:f5:9a:c5:bb:ba:55:4c:d6:0a:de:
         f2:c4:a6:5f:0e:fe:fa:16:fe:77:b3:1e:8c:67:64:43:ea:a7:
         ad:e3:c9:ff:94:d0:f6:1d:cf:b0:85:81:03:03:0e:1d:b0:04:
         d8:7b:55:4f:98:67:b4:21:28:c5:97:05:7d:ad:c9:ab:39:cd:
         c2:41:62:46:11:1e:82:fd:2c:f1:92:13:7f:16:ad:e5:19:b5:
         11:db:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:31:00 2025 by rpki-client