Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dd84492-32d0-38e5-ad8c-82662d68acba.roa
File:                     2dd84492-32d0-38e5-ad8c-82662d68acba.roa (raw, json)
Hash identifier:          6R25en0+dDW/W56clGlFjIXgWIpAoq/Umr9t9qNm6C0=
Subject key identifier:   34:2F:50:50:59:A6:0A:29:69:EE:F7:56:11:83:B5:6C:D2:5C:4D:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C103B5592DE19B18E0F9650
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dd84492-32d0-38e5-ad8c-82662d68acba.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33660
IP address blocks:        24.10.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:3b:55:92:de:19:b1:8e:0f:96:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d165801a-7def-4043-aad5-ac10b4995a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:98:25:10:42:f6:69:0a:f4:b0:d3:4f:59:
                    2d:fc:58:eb:cc:1c:e2:33:7f:cf:7d:2e:93:17:c9:
                    ba:f8:0a:db:28:6e:4e:c4:3e:e3:11:41:aa:2e:9e:
                    ba:3c:07:b3:23:50:0c:b7:e5:53:c4:aa:73:9e:29:
                    5e:19:c5:c4:5d:12:96:a4:39:16:e2:dd:ee:30:96:
                    8e:f5:6a:e2:f4:b9:0e:e4:36:2a:04:4c:02:f7:cf:
                    83:ff:55:43:c1:6c:78:08:1b:0a:d8:4e:24:be:d5:
                    0e:10:95:bb:1e:3f:02:d5:19:ad:1c:56:72:00:51:
                    1c:31:7d:17:2e:0e:b5:51:da:b7:e6:d5:ab:30:90:
                    e4:e2:de:22:fa:aa:9b:ce:5e:94:7c:c2:73:e9:72:
                    7e:0e:62:95:32:e2:57:e5:65:66:e0:e4:d2:41:74:
                    50:e1:d6:41:93:27:71:79:1f:74:e5:39:3e:44:ba:
                    cd:d2:40:6e:5b:73:0b:34:72:dd:25:19:25:3c:66:
                    67:da:4c:c1:18:8c:ee:bc:59:8b:0f:01:99:d5:b9:
                    0b:88:15:45:e8:25:f0:81:e1:40:80:5a:e0:19:7e:
                    7a:e7:59:7b:5d:b1:cb:3f:7f:07:2c:af:5c:3a:c6:
                    92:8e:40:dc:8a:a7:65:dd:21:6e:0f:4d:3f:84:c6:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2F:50:50:59:A6:0A:29:69:EE:F7:56:11:83:B5:6C:D2:5C:4D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dd84492-32d0-38e5-ad8c-82662d68acba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.10.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:b9:d3:b4:8d:2c:83:3c:a4:8f:78:ea:98:b8:4c:0f:87:
         b9:e8:7c:b2:af:ba:8c:8d:4f:ed:ec:6e:8e:69:d5:df:23:6b:
         28:c6:62:d7:a7:ac:c0:30:4f:50:be:b5:22:50:99:5b:be:58:
         f8:4b:a3:14:11:b8:e0:24:c2:7b:86:e0:34:6c:3e:c2:ba:5d:
         4a:04:80:5b:90:c3:4f:3d:c8:23:db:03:66:a5:de:de:e1:6f:
         43:b5:6b:d5:f4:f6:d0:d8:74:fc:f2:b1:8d:e6:01:b8:ae:41:
         e4:3e:e3:87:d2:f5:cb:89:f1:a0:c8:4b:40:de:11:84:e1:b9:
         79:a7:33:77:2a:14:d4:fb:74:0e:90:e3:f8:cf:81:4e:05:a8:
         08:99:dc:cf:8f:8c:a5:3f:47:02:4c:63:1a:09:87:c3:21:f6:
         84:39:67:07:74:af:2f:b7:b7:1f:15:1d:11:f1:80:8b:7a:01:
         1b:3b:86:b1:7f:21:37:f9:bb:27:f6:3c:2a:28:79:8b:98:16:
         88:08:ef:49:95:6c:23:25:ae:1e:9b:db:9b:5d:72:d0:1f:61:
         1f:5d:ae:76:77:1f:8e:81:8b:f9:0f:0f:c8:98:87:7b:e4:c3:
         2d:03:c7:23:5f:fa:20:93:50:b8:bf:6e:05:ee:76:ff:84:19:
         b7:73:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:34 2025 by rpki-client