Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa
File:                     253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa (raw, json)
Hash identifier:          6F954b+mNheKqrvq75qhntItkAA4FsIg4GXZ2Rzljts=
Subject key identifier:   E3:5D:09:04:52:78:E8:E2:CD:BF:5B:5B:04:F8:8C:B3:24:E1:2D:8A
Certificate issuer:       /CN=176385df-23a6-41a1-bbc0-dd5116b049c5
Certificate serial:       010D0C9F43285848037A48428E74C98B02DA95D0
Authority key identifier: C7:5D:43:5D:FB:A7:95:DA:30:8A:1D:20:BA:16:11:A9:2A:8A:04:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     394037
IP address blocks:        134.195.54.0/23 maxlen: 24
                          172.110.180.0/22 maxlen: 24
                          2602:fd38::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:48:42:8e:74:c9:8b:02:da:95:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176385df-23a6-41a1-bbc0-dd5116b049c5
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=e1856218-5bb3-477d-aa2f-1fd45f3f9440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:78:65:0a:3d:5d:33:be:67:20:5d:e3:4d:
                    34:0e:f8:e6:67:46:6c:3a:01:43:cf:81:f9:16:53:
                    f8:0c:8b:7f:87:32:6c:17:de:49:21:88:06:4b:f6:
                    bc:fa:82:b1:7d:38:8e:fd:b8:30:ab:cf:bc:10:f6:
                    1d:e8:56:75:6d:ca:a2:f8:b1:76:ff:78:e1:2a:fc:
                    e8:51:71:b2:90:b1:bd:5e:ec:8f:11:dc:16:91:bd:
                    f7:d4:9e:4b:58:00:b0:86:92:c1:1d:58:9d:85:51:
                    b8:a2:dc:d7:42:87:2f:43:a6:f2:7e:b1:e7:8c:e7:
                    9b:06:0d:15:f9:8f:ec:15:47:f4:73:4a:27:e8:25:
                    b4:56:0f:00:05:9a:f9:e0:16:37:41:3d:50:d3:a5:
                    db:5c:9a:d6:4a:9e:df:9f:bb:a0:b5:f9:8c:28:18:
                    f7:32:5f:32:19:5a:07:35:ed:df:18:79:f4:a8:22:
                    81:38:5a:32:3e:46:e2:24:60:09:63:b5:23:c9:b4:
                    a6:aa:b5:e0:92:f7:bd:0c:fb:98:70:d4:21:18:aa:
                    7e:7b:ce:d8:08:be:83:5e:15:a1:00:cf:17:1e:9f:
                    d9:35:f9:b6:ff:32:7b:30:bd:56:06:ec:c6:ac:18:
                    a9:2c:cc:66:34:7c:87:2b:6c:85:80:fc:6b:28:85:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5D:09:04:52:78:E8:E2:CD:BF:5B:5B:04:F8:8C:B3:24:E1:2D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/176385df-23a6-41a1-bbc0-dd5116b049c5.crl

            X509v3 Authority Key Identifier:
                keyid:C7:5D:43:5D:FB:A7:95:DA:30:8A:1D:20:BA:16:11:A9:2A:8A:04:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.54.0/23
                  172.110.180.0/22
                IPv6:
                  2602:fd38::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7e:f7:5a:6c:2d:89:12:cf:67:de:dd:19:a5:99:9e:40:97:
         5b:35:a5:bd:ff:89:79:a9:34:43:6d:85:5f:37:10:37:da:d5:
         87:67:5a:b3:8c:90:73:d1:e2:b2:ef:8c:c7:de:34:5b:ab:7d:
         22:4e:94:d4:81:25:ae:00:81:ea:72:c4:4f:fb:dd:bd:3f:80:
         0f:df:b2:d4:71:df:9e:5e:81:b3:2d:04:b6:d7:fb:6a:ff:11:
         ec:24:4a:f1:9f:38:3b:3f:78:f7:64:a4:72:a5:19:76:2f:d7:
         4b:33:f2:42:b2:19:d8:8d:dc:18:bd:61:9c:ca:04:1e:fa:93:
         6c:82:8c:6b:85:b6:18:69:b8:4b:6f:78:67:eb:be:cb:94:e9:
         36:be:ba:20:f8:7e:6f:39:0d:d9:4e:37:74:2a:fb:03:97:97:
         b8:17:f2:64:7a:a3:c8:48:ee:6a:11:33:53:cb:87:8d:48:4f:
         24:a1:6c:ae:3c:93:3d:68:3b:76:f2:8a:d5:d1:4c:12:69:9a:
         e6:35:cf:89:b8:35:95:32:22:4e:24:dc:7b:a0:99:9e:bc:cb:
         7e:06:e6:a8:9d:30:22:6d:fa:2f:2f:94:18:5c:6e:3c:73:a6:
         5f:29:b6:79:d7:99:7b:1c:28:29:03:13:23:38:19:d3:ae:4b:
         7d:a3:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:35 2025 by rpki-client