Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa
File:                     5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa (raw, json)
Hash identifier:          NpeOvSAZqvWbSQEh3fQk3B8c+gFZD14OmtU5lQoNjpk=
Subject key identifier:   17:AD:67:E8:BD:41:07:13:58:F7:1F:0F:4F:AB:75:70:9C:EC:58:E1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA18C0ED465B6F32935DC
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a1:8c:0e:d4:65:b6:f3:29:35:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=5a791360-d242-4a14-9060-9ce8782a41c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bc:8f:8f:d0:63:2b:17:e6:95:42:14:ac:cd:
                    e7:3a:de:66:ac:4c:c7:01:a6:9f:86:63:a0:68:2b:
                    95:b3:20:73:60:27:f6:b7:68:c7:a2:53:03:33:6f:
                    b8:31:bb:4f:87:99:ff:dc:b1:9c:58:17:0b:07:89:
                    1b:28:ba:25:4c:ee:03:3c:34:cf:8d:57:7d:c9:7a:
                    34:ec:39:0b:e9:13:a4:36:fa:60:fd:84:bd:8e:f9:
                    eb:29:c6:3b:d4:65:ea:b1:ad:7b:b7:07:e7:ca:6e:
                    b5:13:c2:23:13:84:80:60:63:c5:1c:2c:e9:80:90:
                    44:96:70:bc:2f:59:72:df:03:c4:59:d6:2d:20:72:
                    4e:46:5a:77:7b:f2:12:d5:db:9d:30:68:ed:38:e5:
                    81:7f:0c:48:1f:87:f1:86:3d:15:51:77:51:e8:d8:
                    58:7f:8f:d3:97:71:6c:3a:ec:20:1f:87:b4:fa:0d:
                    19:a6:b8:e0:c3:1b:68:29:64:da:9c:f8:15:f3:e7:
                    d1:21:bd:89:fa:bc:d4:ad:42:29:06:d5:1d:fc:53:
                    dd:c8:bc:f6:bf:02:88:be:15:31:54:b2:a1:7a:54:
                    af:3d:97:57:b4:c8:b3:c8:e0:cc:b1:d1:25:af:d9:
                    34:d4:d0:c4:07:97:ec:5f:c6:54:e2:48:bf:90:a1:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AD:67:E8:BD:41:07:13:58:F7:1F:0F:4F:AB:75:70:9C:EC:58:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:54:af:e4:13:ad:c8:9d:b2:bf:9e:da:f2:af:b0:4f:19:
         69:5f:16:76:71:4c:0c:2d:f6:e3:4f:70:26:7b:f5:7e:24:1a:
         6f:45:3f:7f:05:70:23:24:75:2c:41:88:7d:3a:59:6a:d2:03:
         ec:25:64:f9:9d:28:91:30:38:3b:d7:c2:cb:be:c1:cf:8e:ad:
         97:4e:53:6f:81:7e:9f:44:3e:6a:02:c6:58:74:d7:a1:1c:9d:
         7a:0d:32:85:84:18:09:ae:c3:fa:5d:d0:35:92:b0:1d:4a:aa:
         7e:ad:6a:7a:52:3c:c0:ec:39:85:3e:ac:1d:c7:af:ec:c5:ee:
         19:6e:24:ee:bf:29:84:8e:d3:bc:fe:15:27:d2:73:2b:36:4f:
         f5:0e:71:9b:30:9d:f4:7d:ab:ea:a8:6e:f0:7c:ef:82:ca:22:
         6b:a6:74:43:38:f7:18:75:ea:91:c9:e1:5b:c6:c4:aa:8a:fb:
         57:fc:99:66:f3:d4:a0:6d:6d:91:82:b5:b1:ca:0f:ad:a4:c9:
         77:29:d3:57:26:f3:6e:54:bf:51:3a:a1:7e:ae:7d:2f:44:59:
         3c:1c:18:b8:1e:e4:d3:f6:cf:00:93:95:40:4d:7f:bc:51:d2:
         d5:d4:b2:2c:98:a6:12:13:a2:15:d3:a7:60:c1:b3:4a:a7:2a:
         4d:d3:b5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:11 2025 by rpki-client