Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b9585c2-9ea8-37a1-bf15-a4c905a69c9f.roa
File:                     2b9585c2-9ea8-37a1-bf15-a4c905a69c9f.roa (raw, json)
Hash identifier:          oW7zpQBeabx1d+pvrGJ1N6D59otHzDq99UKiFzTs9vQ=
Subject key identifier:   84:8A:BB:86:AF:56:4B:FC:4E:BA:F2:16:B7:08:80:FD:2B:62:87:7C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A6EA3A5E322A59DCA0900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b9585c2-9ea8-37a1-bf15-a4c905a69c9f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:6e:a3:a5:e3:22:a5:9d:ca:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=23fbb40f-1c04-4f37-a3f7-fc5a061dc4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:2b:be:78:76:9c:05:b2:e8:70:60:8e:28:
                    fe:01:30:d8:b1:3e:c5:6d:74:49:85:7f:1f:2b:14:
                    10:09:b0:d3:bc:3a:5c:4b:6a:59:31:e3:4d:32:47:
                    12:38:b8:c0:9e:8d:e9:68:1e:0d:3b:9e:5b:73:a9:
                    d9:db:c4:d5:d9:df:99:0d:e9:06:83:94:b2:3c:75:
                    e7:93:c2:0c:d4:47:79:92:66:3b:c8:d9:fe:57:91:
                    99:5b:33:b7:b4:a5:59:e8:91:29:60:f4:28:27:94:
                    3a:aa:1b:2e:7e:eb:ad:8f:99:d7:05:00:11:dd:f7:
                    e7:6f:ce:fa:2d:6a:ac:2c:26:78:2d:30:2b:14:8e:
                    49:25:d0:74:46:a0:87:49:79:bf:aa:25:89:0e:15:
                    9e:14:5a:f9:5f:e9:66:9a:52:66:90:96:d8:87:fa:
                    12:79:b4:ad:73:56:03:92:cd:c0:67:21:3c:ee:27:
                    54:79:75:69:11:8f:9d:93:35:a2:f1:ec:a2:c1:02:
                    55:98:6c:41:0b:c9:79:7e:81:6b:b0:09:bd:4a:7e:
                    f5:31:ed:f0:b2:30:9e:a3:9e:dc:28:e4:8a:b8:80:
                    b5:31:17:60:67:f3:71:6b:e0:d7:61:7d:c3:d2:49:
                    d5:6e:86:10:2b:72:b7:3b:fe:e5:51:f4:f0:2a:07:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8A:BB:86:AF:56:4B:FC:4E:BA:F2:16:B7:08:80:FD:2B:62:87:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b9585c2-9ea8-37a1-bf15-a4c905a69c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:80:57:de:9c:04:1c:4f:ae:63:84:98:a5:c3:a6:03:10:
         82:3d:71:f3:65:05:01:29:5a:ae:04:f9:11:ff:33:40:a0:7b:
         0f:1c:eb:9b:5b:4e:cd:c4:8e:bb:67:7b:41:88:4c:f4:ac:59:
         bc:f6:7c:b0:8a:1b:e9:ff:cd:0e:60:77:a6:9f:37:52:93:0c:
         e5:60:b0:c3:63:33:98:ab:45:17:09:2d:bd:54:d8:c0:7e:36:
         f6:b2:db:70:cd:39:8a:91:82:a8:1c:24:7f:c0:9a:3c:48:5e:
         83:47:0e:e9:0e:15:4f:cd:85:5b:69:bf:ef:eb:94:a0:fe:44:
         47:47:fd:06:38:94:5c:88:3f:0c:bc:09:36:f5:fe:f3:3e:7f:
         64:2c:c9:75:ac:20:b2:08:31:66:9b:7b:e0:8d:ac:4e:ae:43:
         ef:0d:6e:9c:35:fb:a0:e7:f6:a9:70:3e:3a:f2:34:b6:dd:92:
         e2:9a:ca:14:f5:cb:9a:ab:76:4f:93:9d:2d:d3:c5:bd:09:98:
         9d:03:f5:28:ce:4d:67:84:fb:2b:db:58:e2:52:b8:44:b5:34:
         64:99:34:fb:e2:98:98:a9:7e:7a:df:c5:91:c0:34:7a:54:ae:
         2d:b5:01:0a:ac:b1:e0:4a:72:55:2b:94:76:23:ac:3f:22:35:
         cf:d0:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:22 2025 by rpki-client