Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a381e9-859b-3886-b173-b9db8ffbcd4d.roa
File:                     10a381e9-859b-3886-b173-b9db8ffbcd4d.roa (raw, json)
Hash identifier:          yDr4Ea47rkvk8qYYO1ochHlR3e5GA732Fvv/TyZ4Y+8=
Subject key identifier:   03:47:AE:6A:9F:1C:A2:1C:0B:86:D2:C6:DA:05:09:0A:C1:80:31:1C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B22B16AF39020B3C2A6C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a381e9-859b-3886-b173-b9db8ffbcd4d.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.62.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:22:b1:6a:f3:90:20:b3:c2:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e8f65b8f-7e0a-4b90-8a33-1923e85f1d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:ff:bf:02:55:7a:6d:3d:26:df:62:d6:b2:
                    82:44:69:6d:26:80:7d:bf:d9:6d:be:af:d3:b3:b6:
                    47:e4:28:04:8a:8f:6e:ec:71:d0:a0:a7:5e:f1:4a:
                    ca:11:1b:8a:9c:5a:dc:07:bd:ca:bb:77:0c:02:64:
                    2b:ca:d3:8e:61:f5:83:ba:42:30:1b:f4:69:4d:c1:
                    21:99:5e:37:11:46:3e:e2:84:ab:21:65:27:1c:b1:
                    ba:2e:b5:b9:0e:76:0b:09:e3:91:9f:8a:e5:bb:3e:
                    e4:16:a6:0e:6c:50:a2:ae:df:c1:0e:f9:91:de:d2:
                    49:7e:c6:36:9e:c2:c0:48:ec:c9:00:13:5e:d0:42:
                    6b:ee:d8:b3:5b:da:9d:51:44:4e:3f:d8:ed:65:e7:
                    b8:bf:84:2a:a2:10:e4:13:43:4a:1a:4c:47:3c:9c:
                    d4:c7:a2:81:4f:3e:8a:cb:d6:c8:19:62:16:45:4a:
                    a8:87:d7:73:26:27:bb:a8:42:03:fd:d0:cd:99:81:
                    e7:60:87:23:9c:23:34:35:e3:dd:4a:55:f5:8a:34:
                    7c:8d:f1:0a:19:48:1c:07:8d:ae:8b:c7:44:98:2a:
                    63:3b:2a:64:0d:59:8c:16:e6:01:c4:a7:ff:54:b9:
                    cc:38:2c:0f:ad:55:33:73:a5:a5:58:2e:68:c1:43:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:47:AE:6A:9F:1C:A2:1C:0B:86:D2:C6:DA:05:09:0A:C1:80:31:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a381e9-859b-3886-b173-b9db8ffbcd4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:36:60:53:6c:22:f4:6a:db:c0:cd:3f:5e:9f:d4:d6:1c:99:
         79:20:60:68:49:9a:b0:61:6b:2e:15:76:2b:c5:80:ce:70:70:
         9e:8d:17:16:27:1e:eb:54:ec:75:e4:de:92:9c:f4:81:48:72:
         23:a6:61:67:aa:19:8e:30:69:7c:54:43:6b:fc:86:11:ac:ed:
         63:4d:68:4a:46:fe:b8:20:0c:9b:98:fd:41:8d:0e:78:f5:5d:
         f9:cb:f9:f4:ce:19:8a:52:8c:7e:e6:b1:fe:86:36:02:64:76:
         90:c8:f6:c9:41:96:ed:90:74:dd:c2:13:27:f4:f3:1a:69:c4:
         67:72:71:b1:1b:e8:3d:d3:37:d1:2f:b1:5a:be:d1:c9:80:ab:
         20:f3:f2:23:15:06:fa:8c:b9:90:b7:17:5d:6e:a3:ae:27:28:
         a1:99:7c:7c:82:71:b2:c6:8d:fe:db:94:6e:e6:b4:9b:97:6c:
         70:c2:9d:e0:6f:61:b7:af:6d:f1:dc:97:a9:d8:b7:84:04:c6:
         54:87:e6:fc:87:3f:c1:66:a0:73:05:7e:7a:29:78:61:10:49:
         3f:a5:60:55:61:f2:29:d3:59:27:d1:2b:55:a6:09:1e:86:32:
         28:cb:83:51:cd:6e:6e:d9:83:f5:a0:3f:ef:ab:d6:cb:d8:04:
         cd:b0:27:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:17:24 2025 by rpki-client