Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e892de81-4666-34a3-a74d-320f6e84daec.roa
File:                     e892de81-4666-34a3-a74d-320f6e84daec.roa (raw, json)
Hash identifier:          ap73M5ZE+0R5JCfWv1HAJ8CkWQKABANjZagJ7AkHZ/0=
Subject key identifier:   AF:B8:62:6D:D4:D5:FF:04:36:2B:B7:CA:97:8D:C9:06:1A:75:E2:B7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B2194D14B7D6287814180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e892de81-4666-34a3-a74d-320f6e84daec.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.62.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:21:94:d1:4b:7d:62:87:81:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6095688c-fa28-4269-9d58-b932188c450d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:e3:e1:0e:95:41:e8:0a:50:af:18:02:8f:
                    51:40:2c:da:2c:2a:3f:5a:48:39:a4:87:40:0a:e7:
                    29:5f:db:4e:da:2d:ef:b2:98:29:57:c6:31:49:db:
                    1c:d3:2a:e1:63:ba:2c:25:81:b5:e4:a8:8b:8e:04:
                    9f:9c:6a:7a:30:85:ee:ce:d8:1e:02:b1:cc:ff:3d:
                    9c:d6:fa:d2:c5:ce:91:28:bc:55:4c:ad:68:3a:83:
                    04:17:69:d5:f9:09:5b:58:7a:12:88:26:9e:cc:85:
                    ff:53:82:f8:4e:b2:e3:3e:4e:4a:47:03:fb:da:01:
                    81:fe:8f:42:ef:3d:53:6e:3f:7c:f6:13:b5:74:ec:
                    aa:6e:be:b3:8c:09:7e:b9:e6:0b:14:0a:55:3f:a1:
                    53:10:29:7f:d5:86:29:0b:68:06:00:32:f3:3d:df:
                    0e:23:a7:6f:68:53:7f:75:ec:fa:f1:39:1f:3d:f8:
                    36:4a:63:3b:48:63:29:7d:4d:9d:26:0d:86:13:ac:
                    04:50:54:1e:27:40:a9:13:ba:c0:ee:0a:48:16:76:
                    68:09:4d:eb:42:e3:e8:e0:9b:64:a6:9d:67:52:05:
                    74:07:b1:74:80:42:f6:e1:ae:1b:36:06:b8:ab:4c:
                    c6:a0:5a:94:a0:42:62:76:f6:c6:20:e4:f2:dc:40:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B8:62:6D:D4:D5:FF:04:36:2B:B7:CA:97:8D:C9:06:1A:75:E2:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e892de81-4666-34a3-a74d-320f6e84daec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c7:58:4e:71:b8:63:7c:c4:81:c8:74:31:36:6b:06:56:e6:
         5a:e3:04:41:76:c3:20:9e:ff:d8:65:99:c4:bf:8b:69:a7:d5:
         f7:0e:e6:27:28:4b:9f:60:9b:88:93:2d:d7:0d:3b:14:c0:14:
         03:af:b4:68:df:24:cb:4b:87:ee:65:79:64:08:be:da:ec:1e:
         52:09:dc:b8:5a:c5:0d:9f:19:1b:c5:8f:55:04:6e:7f:bf:02:
         7e:d2:83:51:0f:4b:54:10:22:bc:ba:79:68:e9:fa:d6:4e:9b:
         24:e0:d5:bd:63:6a:fc:9d:3e:7f:72:34:1c:ec:08:c4:6d:f9:
         cb:70:c9:1b:0e:53:29:b9:69:99:ac:07:98:77:5b:b5:9c:47:
         e4:58:31:4b:85:a9:46:3f:44:19:e4:ec:bc:4c:15:08:7e:62:
         db:1b:bc:4c:ca:0c:64:6e:35:06:3b:41:e6:dd:5b:12:b0:ed:
         e5:ec:25:3f:fb:66:92:89:08:e3:07:81:24:a9:8b:9a:8a:60:
         fb:68:55:33:02:f9:5e:b6:6a:92:d7:ce:db:59:35:fb:25:d3:
         df:f2:a0:bf:0b:d4:b8:d4:d0:a4:fc:de:1b:a7:75:23:80:1c:
         ff:b8:bb:35:c0:50:1d:61:a3:53:2c:9f:0c:4c:86:4f:66:eb:
         f5:0d:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:25 2025 by rpki-client