Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d83c9de4-d785-30f4-b93d-17951b1fe5d4.roa
File:                     d83c9de4-d785-30f4-b93d-17951b1fe5d4.roa (raw, json)
Hash identifier:          0tYXEB2immmwx1gxaXG9TuwZraqkaC+/kXGh8hs2rdU=
Subject key identifier:   B0:4C:67:3F:EA:7F:88:D7:C1:A1:B8:D8:0F:1F:3A:F4:2E:15:46:11
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858483E1AB9C2A07E90C6F0E27480
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d83c9de4-d785-30f4-b93d-17951b1fe5d4.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        165.254.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b9:c2:a0:7e:90:c6:f0:e2:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=c2b41f63-269f-4d6e-bda0-b6a60f000213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cc:55:a2:dc:4a:eb:bb:f4:da:d6:b2:01:7b:
                    fd:23:57:90:9f:32:c3:02:60:94:1e:ff:8e:bc:e1:
                    8c:9f:f4:44:2c:84:6b:ed:4a:d6:25:c1:fc:1a:a1:
                    54:db:e1:74:26:90:6a:e4:5a:0e:66:41:e1:f5:ba:
                    b7:33:0e:62:a9:f3:67:7d:2f:6b:34:54:74:20:f5:
                    8c:a9:1c:39:3d:23:cd:4b:4a:20:0d:c2:d4:2a:60:
                    eb:86:65:25:f9:74:bc:88:0c:c4:a1:48:76:d2:16:
                    12:df:2a:56:56:ea:a7:57:94:01:21:99:92:ab:0b:
                    d7:34:63:58:b1:9b:8d:9f:63:b7:ea:7a:3f:8f:47:
                    c2:a3:4a:ee:14:4a:43:91:3c:8c:0e:3b:ff:16:f2:
                    e8:20:ab:d6:08:7b:f5:f5:0c:77:6a:df:06:9e:69:
                    33:83:36:a8:75:07:92:76:25:dc:bf:73:61:83:85:
                    ae:c1:93:b5:d4:d1:11:4e:69:9f:ee:b2:a7:4e:a5:
                    fb:33:6f:96:4c:a0:ae:02:4d:7b:32:fa:3c:e1:19:
                    0e:a4:5c:76:e8:39:0e:e4:71:a0:bc:3e:73:de:21:
                    ee:4a:93:41:09:b1:79:c9:7d:46:df:2a:15:6a:11:
                    fc:01:85:34:01:c7:02:20:28:6f:78:54:c9:5b:b2:
                    f2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4C:67:3F:EA:7F:88:D7:C1:A1:B8:D8:0F:1F:3A:F4:2E:15:46:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d83c9de4-d785-30f4-b93d-17951b1fe5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:a1:3b:0c:72:b7:ef:a0:b5:8e:c8:41:b1:62:32:fc:6b:
         fd:ca:17:3b:12:fe:eb:33:5e:1b:cd:26:66:41:66:10:6e:0d:
         36:58:cb:cc:2c:27:6f:ca:51:75:8b:b0:a4:68:be:44:84:27:
         b7:09:35:89:6e:85:ea:a0:04:79:c5:20:67:b3:8d:6b:a6:06:
         1e:53:1c:ac:ca:08:e5:3c:cc:6f:c4:8d:4e:c2:93:f0:78:10:
         4e:9f:62:cd:cb:ec:39:bd:fd:a9:7f:9e:97:7f:6a:76:88:38:
         9b:a5:34:11:9c:05:29:59:43:f2:4a:e9:70:4f:23:dc:bc:d9:
         19:e8:4c:96:33:3e:3a:99:05:41:ce:aa:ef:9f:f1:ee:55:1b:
         6d:78:cb:00:a4:de:e3:54:9b:1f:68:b7:ce:bc:8d:ca:fa:0d:
         0d:3b:65:ef:bd:c4:53:89:a5:f7:ae:23:c8:a7:5c:4b:81:32:
         14:dd:38:8a:42:52:37:db:89:e6:25:cd:90:13:4a:df:ff:aa:
         62:ec:49:6b:0b:55:53:88:c8:34:ab:62:20:ba:f8:65:fa:ce:
         d2:02:65:ba:d7:41:2e:1c:21:a1:05:b4:1b:47:97:20:08:78:
         02:33:2f:1e:6d:55:58:67:b5:bb:d2:ff:62:00:e4:07:a9:1e:
         f6:6c:7e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:44:08 2025 by rpki-client