Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f607452-e921-3bfd-98cb-fd31b28994c2.roa
File:                     6f607452-e921-3bfd-98cb-fd31b28994c2.roa (raw, json)
Hash identifier:          L6VDeUSo+QKZl/2z7Jfk1QmJgpGcG3XHasEJyu56IOI=
Subject key identifier:   5F:24:59:39:36:60:BB:4E:48:83:D4:FE:C8:71:A7:FE:23:F3:D1:7F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B02A88559DFE288B64F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f607452-e921-3bfd-98cb-fd31b28994c2.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:02:a8:85:59:df:e2:88:b6:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9b2c2234-d7a5-4e40-965c-f6899d5cfd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:8c:20:27:ea:00:56:1d:c8:ba:da:59:59:
                    16:fa:ec:4d:00:65:c0:df:54:b8:84:54:fe:df:a9:
                    10:8f:7f:31:04:d2:17:8e:75:e8:23:a0:93:f7:cb:
                    b8:a0:bc:76:8d:bd:d9:ba:50:25:c1:a6:8e:5a:37:
                    3f:50:62:45:43:81:7e:6c:a8:92:60:02:f9:e5:74:
                    20:a9:83:79:a1:1e:66:08:79:1a:c3:64:73:a3:99:
                    05:2b:5d:01:1a:7d:5a:04:66:c9:f4:01:b2:ca:ce:
                    d3:5b:45:05:b6:cd:5a:dd:cb:9e:f7:0f:bd:8f:ca:
                    32:8e:bc:cb:3b:7b:33:77:c7:5c:2c:bb:08:65:fc:
                    aa:ca:38:08:63:cc:ef:1c:b6:a5:0b:fa:67:3b:d7:
                    7e:f5:fa:09:37:a9:bf:00:cf:85:33:b1:84:9a:59:
                    06:6b:b8:f0:5c:a5:15:d9:d3:e8:e8:12:45:52:3f:
                    86:21:40:88:21:f4:fd:42:d8:ad:0d:57:84:f1:38:
                    89:87:f6:f4:95:e9:03:10:8b:d2:66:7c:d1:9d:9d:
                    2b:76:12:aa:0e:e1:80:e4:31:7f:78:d5:70:86:1b:
                    aa:87:6a:2f:35:92:4b:e2:77:d3:68:b9:af:35:78:
                    66:c2:aa:14:fc:c3:d4:a4:36:3b:b0:c7:ca:cd:e3:
                    5e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:59:39:36:60:BB:4E:48:83:D4:FE:C8:71:A7:FE:23:F3:D1:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f607452-e921-3bfd-98cb-fd31b28994c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8e:b3:82:94:86:c6:cd:34:93:29:41:7a:83:36:88:71:23:
         f6:44:28:d9:10:8c:00:b9:db:16:89:fe:98:2d:c9:94:73:74:
         34:c9:01:8b:0b:d0:60:fb:ec:74:99:f8:9f:ea:ba:61:13:25:
         5e:b2:f9:fb:9a:a4:f9:52:fd:4a:63:be:97:68:f3:37:4a:f9:
         9e:f5:ba:de:24:9e:10:01:93:ed:14:b2:25:b5:36:cc:9a:f0:
         97:99:2b:a9:62:9f:dc:ce:27:23:2e:a9:b2:d0:df:54:d6:91:
         25:98:5b:db:b0:20:9b:08:0a:4a:a3:0c:a0:2e:7a:c7:9f:66:
         84:0c:37:65:33:bd:af:13:87:52:cd:9f:42:fb:f9:e3:0c:73:
         c4:fb:de:bd:85:2f:07:37:99:76:53:49:82:e8:10:63:79:b2:
         e3:f2:ee:22:f2:a0:b0:62:45:94:ba:c5:fb:f7:b0:8c:f7:ea:
         bd:b3:61:93:8e:99:ff:e2:c5:b7:e9:3d:1c:4d:6c:38:39:84:
         55:46:6b:94:88:92:6f:13:ee:78:f4:c8:72:b3:d5:49:04:3a:
         86:d0:a5:dd:b7:f2:9d:55:7c:08:fd:2c:68:3e:1e:ee:83:4f:
         fd:20:dd:67:d2:a1:5f:9e:ff:7e:5a:a5:f8:12:2f:fa:f1:7e:
         3f:c5:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:55 2025 by rpki-client