Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/890e9a6c-8673-3c01-b87b-492de1b063ed.roa
File:                     890e9a6c-8673-3c01-b87b-492de1b063ed.roa (raw, json)
Hash identifier:          OlA0bH9XYANT/znMA87QrlCW1pf2wbOs6gmbaz7K670=
Subject key identifier:   46:05:93:13:69:45:3A:21:3A:F8:BB:D8:6C:8D:0A:08:02:16:FF:3A
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584827C54328A5255EC22A947DC0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/890e9a6c-8673-3c01-b87b-492de1b063ed.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     396955
IP address blocks:        163.253.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:43:28:a5:25:5e:c2:2a:94:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=342f8d8a-727d-4f74-82f3-e98623ad7f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c0:ef:62:ee:f8:a3:99:57:d6:16:6c:16:1b:
                    fe:a0:58:bf:a1:f3:94:e3:73:90:21:be:1d:8b:b9:
                    1a:8c:87:dd:c1:ea:26:55:91:18:84:c3:b7:09:5c:
                    d3:8c:5a:1e:7d:f2:a2:53:c5:76:26:7e:54:74:99:
                    3a:6d:5e:86:94:d2:22:2d:d8:f5:13:1f:2d:1e:b4:
                    a9:1e:fe:56:29:eb:4b:e9:53:65:c5:0c:1d:0f:b4:
                    d8:8b:82:c7:45:b6:40:3b:0e:ef:e6:6e:07:ef:8e:
                    df:a5:cf:13:ad:5b:2e:6c:c4:d9:63:d7:64:14:da:
                    fd:66:ee:88:2f:c6:b5:c0:de:21:89:71:41:aa:93:
                    5e:e0:b8:04:a3:d9:8e:d9:75:74:1c:03:1b:2b:bd:
                    5e:7c:8b:32:00:7d:86:2c:09:24:dd:a9:25:75:24:
                    a8:6d:f8:81:72:96:f4:f4:c4:46:1f:20:e0:d5:76:
                    20:51:98:78:70:b3:ab:72:da:01:cd:8c:9a:dd:bf:
                    88:05:6d:c6:b8:e7:b8:0c:df:e2:7e:85:5c:d5:e6:
                    70:ed:f4:b4:5b:60:20:ce:4c:30:20:79:60:2f:7d:
                    59:13:88:ad:1d:87:c9:35:b8:34:00:9c:c9:2d:3f:
                    a1:a2:85:17:00:77:0c:fb:97:00:16:2e:6c:ad:b0:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:93:13:69:45:3A:21:3A:F8:BB:D8:6C:8D:0A:08:02:16:FF:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/890e9a6c-8673-3c01-b87b-492de1b063ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:9f:cb:32:c4:0d:d6:ea:4c:9a:e1:6f:7b:6d:15:0d:e7:
         00:1d:e8:ba:92:78:fe:32:30:28:4a:78:4c:aa:5e:ac:52:d1:
         bc:68:d5:45:87:27:b5:d0:b1:d1:75:28:1a:f8:95:08:0d:d4:
         d9:81:8e:39:12:ac:ab:c6:41:1d:d6:fa:67:76:ad:ec:a7:25:
         b5:26:53:95:9c:d7:3d:e4:47:2b:3f:f4:3b:40:77:59:58:ac:
         15:df:07:e4:1d:c3:ae:51:1a:eb:80:da:78:87:0e:c0:fc:15:
         89:93:f1:45:8b:a5:5a:fa:c6:7d:c2:1c:bc:f7:62:bd:4f:05:
         ff:3f:90:ac:24:ee:ec:55:22:7e:ab:2c:d9:c6:df:08:f7:be:
         af:97:5a:38:47:19:b3:d2:af:c9:05:3c:e8:8d:91:b1:20:1d:
         ad:69:39:94:c6:7a:8e:85:4e:5e:4b:b1:36:1b:81:85:1b:7d:
         27:39:d9:6e:c1:7c:ad:3d:b7:84:32:e6:68:3e:d0:65:cf:70:
         13:cd:53:13:6d:e2:04:12:02:f4:d0:fb:39:9c:30:dd:31:97:
         c1:60:92:c2:35:78:ca:f1:c8:e9:c4:7a:b0:8f:0a:e9:b7:14:
         6d:1c:32:8e:fd:a6:64:af:0e:e1:50:96:51:a2:80:6f:71:77:
         e6:5b:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:06:57 2025 by rpki-client