Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/11cfa27e-719b-3266-b215-446176a2db40.roa
File:                     11cfa27e-719b-3266-b215-446176a2db40.roa (raw, json)
Hash identifier:          f8YJ6/KKRCmgBddgz4TZtand8fZhT1ByJ/JjtExj+hQ=
Subject key identifier:   E9:47:C1:14:83:05:9B:C1:47:A8:0C:C8:FA:35:85:CF:52:65:9B:E6
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F43285848037B64438F35920F451E0800
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/11cfa27e-719b-3266-b215-446176a2db40.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        192.161.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:64:43:8f:35:92:0f:45:1e:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=b7c8042a-11de-4e8a-a81e-ba1184178435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c0:8d:33:e6:5d:1a:19:44:cd:23:b4:c3:76:
                    d4:82:c0:35:76:08:2d:7d:ad:66:91:8d:4e:bb:f0:
                    ec:b3:ec:d5:48:13:be:86:09:17:0c:33:63:63:c9:
                    a0:be:a5:31:87:4d:91:34:91:d8:2c:15:6c:20:bd:
                    66:84:14:d7:48:d6:c7:96:5b:3f:33:c6:fd:84:2d:
                    cd:64:ae:4b:be:ae:82:3a:0f:f3:bc:c3:58:1e:d4:
                    7b:cd:e0:a9:51:a4:7b:00:8c:78:db:b0:bf:58:15:
                    cc:8d:be:54:16:83:24:e7:b6:d8:9a:ac:d7:29:39:
                    00:79:25:16:96:25:0f:2e:cf:1a:dc:a1:f4:19:50:
                    1b:4e:95:f6:c3:e3:91:bb:0c:4f:63:40:c7:55:91:
                    ad:6b:d6:51:d5:a0:76:4f:4a:4b:0a:81:da:12:bf:
                    89:c5:5a:16:10:ea:06:f7:fe:e9:e7:17:92:b6:8c:
                    bf:d1:c3:98:f2:3d:62:33:16:8a:bf:ce:fb:2d:3a:
                    d5:79:9b:a1:c3:d0:13:26:0c:df:05:31:a9:23:ad:
                    44:70:10:62:07:85:d1:3a:32:c4:0c:08:a0:6d:bd:
                    62:d0:28:11:41:00:e5:82:1b:9b:db:7c:6d:87:6c:
                    6d:04:57:8a:2c:06:7d:f6:a6:94:60:ab:55:56:48:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:47:C1:14:83:05:9B:C1:47:A8:0C:C8:FA:35:85:CF:52:65:9B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/11cfa27e-719b-3266-b215-446176a2db40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:2c:4f:2e:52:6a:62:d9:54:25:0f:62:3b:dd:04:d2:2a:5e:
         e0:6f:02:ff:36:61:80:94:d3:dc:1c:f1:09:cf:27:f9:a7:46:
         a4:d7:c4:e5:b3:7b:b6:b7:8c:af:c6:e6:83:3a:ea:e4:ac:05:
         aa:f3:e6:a1:e5:38:07:2e:bd:66:80:65:fa:b3:5b:b9:db:15:
         23:2e:5a:0f:d5:fe:66:e5:49:ac:60:2c:05:9d:9b:d9:a6:c1:
         8d:3e:c2:15:34:5d:50:6f:59:42:0d:4c:19:98:60:24:ff:34:
         74:7d:de:90:f1:3f:6d:36:8d:3d:fc:9f:fd:a5:ec:4f:84:a7:
         af:c4:da:4c:26:a2:99:b5:35:52:7b:60:7b:04:01:b2:2d:fc:
         c7:87:29:d4:a6:d3:f4:c0:29:2a:8e:de:7f:ca:a1:43:90:33:
         b9:a5:81:6b:34:5a:ec:55:58:78:13:ab:ec:8f:2e:82:67:84:
         02:93:96:9a:2e:ac:6b:2d:3b:cf:ea:19:8d:96:1b:cb:45:9c:
         55:40:7d:2b:e7:c2:80:83:7d:3c:62:c2:34:a9:b9:f2:be:98:
         c8:e3:75:e3:3c:dd:78:58:9c:95:d6:23:f5:8d:2c:2b:07:29:
         3d:5e:dd:2b:d5:d5:b4:8a:aa:3d:28:70:0d:72:5f:7d:16:4e:
         ba:22:d3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:26 2025 by rpki-client