Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02634ef7-76ad-316e-a32f-77f1afa3219e.roa
File:                     02634ef7-76ad-316e-a32f-77f1afa3219e.roa (raw, json)
Hash identifier:          ReByRpP4Cwb9aevjYiOE2SHuyVE5fhpI+fy8X14gOp4=
Subject key identifier:   1E:6A:8F:3B:43:3E:80:4C:17:DD:D8:FE:57:AD:DC:05:35:BD:09:0E
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858488DAB4C5FD9D77282DB672F80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02634ef7-76ad-316e-a32f-77f1afa3219e.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     174
IP address blocks:        173.244.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:4c:5f:d9:d7:72:82:db:67:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=31b90c7c-998c-49a5-b9f5-1b374afed1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:5c:10:dc:6a:09:8b:5d:f7:2b:ba:0a:5c:
                    fd:94:a2:eb:2d:40:59:6b:d9:34:2f:ff:01:cc:90:
                    ad:87:4e:d6:5a:1b:b7:6b:af:12:ce:7f:61:5d:48:
                    95:aa:ba:18:2a:a3:ab:3f:67:e2:db:38:c8:3f:a7:
                    f8:d5:2b:c5:f9:ee:5c:49:9d:af:36:b1:e5:91:0b:
                    fd:a1:59:e0:81:ba:49:e2:be:8c:21:4f:fd:7e:11:
                    18:99:6d:cc:80:77:0b:05:d1:7b:94:00:dc:84:13:
                    4a:71:da:a7:79:a2:a3:e8:a7:02:12:96:ba:b9:ae:
                    09:fa:a0:1c:d3:7f:1c:af:2b:b7:f3:f6:2d:9a:15:
                    72:07:39:0c:42:32:94:59:03:8b:63:6d:e1:bb:9d:
                    ce:5f:ed:fb:65:53:7a:dd:25:1b:6e:e8:7c:88:9e:
                    3d:02:52:59:0c:74:b4:f7:10:46:50:9a:cd:9b:e2:
                    db:fd:8d:d6:40:32:99:fc:ea:a5:65:68:2d:77:2d:
                    e3:e9:43:cf:a0:70:68:b0:6e:c4:e7:3e:94:82:79:
                    6e:46:dd:53:59:73:a8:39:a8:78:3c:cb:a6:c7:72:
                    26:6b:f9:27:e1:19:9b:68:31:cd:92:92:0c:0b:12:
                    0a:2a:0a:f9:c7:b4:7b:6c:1b:f1:69:d6:fd:49:b7:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6A:8F:3B:43:3E:80:4C:17:DD:D8:FE:57:AD:DC:05:35:BD:09:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02634ef7-76ad-316e-a32f-77f1afa3219e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:de:07:25:ff:4b:81:b1:2e:87:61:92:9e:46:77:a2:5c:2c:
         90:c0:6f:0f:cd:62:9f:0e:23:fd:7e:8f:54:ce:13:3c:86:3f:
         39:79:74:10:57:95:7e:a8:51:24:42:bf:3f:da:d2:69:27:c9:
         f0:b0:39:5f:2b:15:d6:b6:b1:40:66:59:fd:df:98:0b:3a:20:
         fe:2a:e3:a8:3e:e9:7e:de:72:4b:13:69:d7:cd:2f:65:c8:a1:
         99:49:ed:5a:df:b4:be:7b:62:5a:a1:31:43:f1:04:fc:d2:ae:
         30:79:73:f5:01:b9:09:70:a1:74:02:e7:a0:7f:4e:bd:fd:c4:
         a7:80:c1:ac:b4:67:0a:b0:ec:a5:ea:6e:88:b7:36:a9:12:1c:
         43:2c:9f:7d:96:e4:86:dc:02:c5:55:87:d0:ee:d8:03:1c:fa:
         80:6d:12:08:87:cd:19:42:dd:a2:b3:5d:c9:e9:d1:11:63:dc:
         21:74:5c:3f:b6:a6:39:49:de:b9:6d:a4:19:6f:de:6b:92:4b:
         4c:95:f9:4f:3d:93:5a:c2:0a:cb:b7:27:6c:27:21:38:17:bd:
         2f:7f:31:77:a1:15:d6:fa:d0:30:7c:8e:1a:d0:c9:b5:67:71:
         cb:b0:67:b0:df:54:c6:c7:cc:0b:05:2d:49:e1:c2:39:fd:25:
         e2:ff:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:24:51 2025 by rpki-client