Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03c8890-91ef-36f6-b735-c81baa1583e9.roa
File:                     a03c8890-91ef-36f6-b735-c81baa1583e9.roa (raw, json)
Hash identifier:          qM4hX+8LnNQsmogffnnjJ2zsfmYekjgpcK9glkGZT80=
Subject key identifier:   26:AA:34:A1:B8:D4:97:2F:27:42:AE:00:C5:CB:E2:E2:4A:52:00:A1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7C9D8628574C6E55F380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03c8890-91ef-36f6-b735-c81baa1583e9.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:7c:9d:86:28:57:4c:6e:55:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=20d069e0-6a0e-442f-8fcb-6f001adb58e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:29:40:dc:7a:61:15:a2:9a:64:31:c2:f1:
                    f6:dc:fc:e6:67:cd:43:3b:e5:85:bb:48:5d:c9:80:
                    ea:52:24:48:42:0b:76:86:61:d3:f3:00:18:47:9f:
                    77:88:d0:4a:a8:81:17:ac:7e:32:a5:88:44:14:c7:
                    c3:0f:e9:8a:ff:9f:8f:6c:5e:1d:2e:a0:c9:a0:a7:
                    d8:4b:ea:0a:8c:58:02:93:af:70:61:dc:9f:20:63:
                    2b:48:d4:91:87:93:d6:ea:fa:6a:ba:d9:ec:d1:c4:
                    15:37:7d:31:23:41:fb:8c:7f:76:d1:3a:84:fa:93:
                    bb:65:0e:4f:27:55:7e:7e:bd:3d:34:8c:79:e6:49:
                    30:60:80:25:e8:8f:b4:50:27:a4:60:fb:3b:17:66:
                    76:2a:6c:ee:76:a8:ea:4c:dd:8c:81:0e:d0:9a:1d:
                    23:35:16:da:7b:83:ff:d3:e5:a5:88:a8:a5:f9:1a:
                    80:94:03:e1:49:fe:64:fb:dc:98:61:d8:f7:0f:19:
                    2c:bb:40:43:34:c8:25:d9:35:97:ed:2c:bc:4f:7d:
                    11:09:b1:15:8d:6b:46:a7:a9:9d:af:6e:71:2f:cb:
                    27:ce:9e:9f:e4:de:0a:88:f9:ce:12:b7:4e:e3:48:
                    b3:0a:6a:d0:eb:5b:c1:9a:26:52:4a:36:d5:4e:2a:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AA:34:A1:B8:D4:97:2F:27:42:AE:00:C5:CB:E2:E2:4A:52:00:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03c8890-91ef-36f6-b735-c81baa1583e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:61:b2:7a:49:b5:96:77:26:33:d7:2d:d4:bf:ac:9f:39:86:
         17:cf:1c:d1:fa:d4:4e:62:e6:ba:9d:d5:68:31:35:14:88:53:
         52:c8:df:cf:2d:ff:7d:b7:cf:c6:b9:c0:08:75:3a:01:61:08:
         d9:69:87:21:4e:85:6e:81:3b:92:ff:40:62:a3:39:64:59:d9:
         d3:b0:02:2c:49:7d:12:74:6e:88:7a:48:ff:7a:a3:d8:7d:0e:
         e5:e8:7a:36:22:6b:5c:5b:42:0a:96:77:f5:cb:35:25:0d:f2:
         a5:59:27:54:da:27:b9:01:79:57:78:7a:fa:37:19:46:e2:9d:
         1f:79:47:e5:76:10:2b:04:f6:61:82:dc:5b:5d:dd:92:c8:f2:
         5e:bd:6e:b1:f3:a4:dd:ef:db:22:91:10:df:7b:93:d8:84:1c:
         73:b2:d8:6a:46:32:40:a4:8a:06:23:90:0f:a7:ea:b1:fa:22:
         d8:1f:33:a0:5d:fe:97:ee:a5:03:1b:69:c8:9c:9c:12:d3:fe:
         44:d5:5e:6f:9f:98:be:bd:6b:92:81:24:70:32:68:9a:5d:de:
         d1:05:d7:f8:01:32:fa:16:c1:93:c0:2e:74:80:eb:e7:c1:e0:
         09:51:4b:05:ec:2e:38:ce:b8:7d:1e:7f:e1:0a:1b:74:97:94:
         b5:84:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:54 2025 by rpki-client