Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbd124ec-7c40-3e23-8f40-4c0eb26fdae1.roa
File:                     cbd124ec-7c40-3e23-8f40-4c0eb26fdae1.roa (raw, json)
Hash identifier:          QRGcrEsLRLAOeAgMXBkkKq0V6rlDyoTsGLb06FJoXIE=
Subject key identifier:   1B:D9:CA:1A:8F:7F:0A:65:7B:5E:EA:20:AD:55:ED:F6:2A:2D:78:C7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A875F5E1568786DA95D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbd124ec-7c40-3e23-8f40-4c0eb26fdae1.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:87:5f:5e:15:68:78:6d:a9:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=40c30dbf-a9d8-48b2-bb29-2e6c40bf4e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:5e:89:92:93:74:e4:5e:93:6b:6d:84:5e:
                    1e:c3:9e:c2:b3:eb:fb:e2:65:25:52:1f:a6:15:27:
                    48:c1:b5:3c:df:3b:c6:56:78:fd:f1:dd:d2:a8:69:
                    33:71:3d:dd:c2:65:30:ca:ec:ed:4e:2d:3f:76:18:
                    11:45:db:ea:ff:63:54:4f:80:7a:c5:c0:ea:82:54:
                    b4:84:13:39:fb:d7:08:02:24:5b:65:52:5e:1d:c0:
                    1b:8b:61:0a:90:e0:67:f8:ca:be:70:12:e7:57:06:
                    f6:4b:78:1b:12:85:db:79:1e:65:20:de:83:e2:9c:
                    28:0c:9a:b4:cb:78:e0:eb:13:b7:11:24:a2:88:a4:
                    00:15:8b:77:18:9a:2a:40:f7:49:1b:e4:49:3d:66:
                    90:db:cb:51:f0:04:e1:ee:6d:f7:f1:6f:1e:9d:7d:
                    61:d8:b1:6e:ae:59:39:d8:b0:73:8a:7e:39:c3:96:
                    41:e6:dc:40:79:0c:df:5b:2e:b1:2a:24:59:f3:09:
                    68:82:8b:7f:12:b0:28:75:28:d6:07:24:e8:86:fd:
                    c4:44:54:05:54:4e:7f:4f:69:6d:eb:2a:52:da:41:
                    7b:5c:78:2b:ea:f8:3b:b3:c3:a2:3f:5c:f3:f6:49:
                    4b:dc:9e:17:d4:0d:96:96:03:0d:65:a9:14:db:27:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D9:CA:1A:8F:7F:0A:65:7B:5E:EA:20:AD:55:ED:F6:2A:2D:78:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbd124ec-7c40-3e23-8f40-4c0eb26fdae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:b0:ca:ce:59:1f:98:d8:99:d7:05:0c:01:a0:17:da:9e:a3:
         78:c8:af:1b:b4:77:e3:77:aa:46:e3:d2:d4:45:4f:ea:8b:1f:
         88:fd:36:1f:dd:92:aa:ce:f6:7f:94:4a:4e:fc:dc:ed:91:26:
         d7:06:61:61:1b:71:92:a3:a6:26:c4:07:9d:f9:6f:bc:df:3b:
         c1:e5:b5:b8:95:a8:b5:51:e8:84:31:a9:be:07:96:e1:c2:46:
         99:7f:70:14:1a:67:98:29:f0:b3:7f:c3:f3:e6:3d:7a:00:04:
         f8:7f:35:83:00:d4:0e:33:23:4d:cc:e2:e2:47:70:8c:ba:aa:
         de:25:f5:88:77:95:29:87:72:30:97:e5:92:9a:4e:d9:d7:42:
         5c:b7:67:84:9c:a8:d8:93:0d:03:13:29:f0:90:a7:3f:94:50:
         99:42:8d:e3:be:eb:49:03:e0:1b:e6:57:10:75:ea:7b:d3:e0:
         c5:49:13:6f:07:fd:61:16:af:e8:76:16:16:2e:48:ff:80:47:
         2c:93:fa:a0:cb:48:de:67:4c:11:85:aa:97:00:e3:11:24:7f:
         41:5c:49:22:8f:da:7b:48:a9:f7:c6:66:67:d4:d2:23:67:b5:
         7e:94:c8:b0:f9:ca:1e:43:62:5a:90:63:4b:2b:35:3e:89:7c:
         ae:3b:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:39 2025 by rpki-client