Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/0c37b99f-c577-3f20-ac68-ad8eb8089f3c.roa
File:                     0c37b99f-c577-3f20-ac68-ad8eb8089f3c.roa (raw, json)
Hash identifier:          UqYR+ZpLPCD5bz2lDsD/6xbrbjZbGFLIrtIHU8mKLoc=
Subject key identifier:   01:E4:D6:AC:90:E4:49:FE:8B:48:6A:78:E5:08:62:55:D5:69:D6:78
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584807AA700C364FF60101A02480
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/0c37b99f-c577-3f20-ac68-ad8eb8089f3c.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     14618
IP address blocks:        144.81.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:70:0c:36:4f:f6:01:01:a0:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=222dd8ae-3e61-4a86-b6b6-cfc7218b5357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b5:48:c1:de:ad:af:ff:9e:fe:04:15:de:d4:
                    30:79:88:6b:3a:2e:a3:3a:6c:6a:b3:fb:93:28:f1:
                    79:6d:8e:33:99:ec:8c:a1:18:2c:d5:53:35:cc:f2:
                    62:bf:d3:70:fe:1c:0c:a0:1f:69:f4:ff:da:0c:7e:
                    27:53:9f:22:d4:4a:93:22:fd:57:b7:65:30:b4:29:
                    98:e6:1b:8f:25:08:86:81:77:b4:91:48:23:d0:73:
                    9a:81:9d:6b:03:59:9b:80:e8:2c:4d:78:9a:94:be:
                    8c:37:97:f5:25:f4:ff:f2:31:d6:84:d6:77:ca:d6:
                    ed:e4:e0:55:e4:a3:c1:26:9f:18:72:26:7f:72:57:
                    e7:41:3a:84:c6:1c:82:ae:b6:df:9c:58:f7:06:0b:
                    c4:d1:a1:da:6e:fa:a0:07:a2:14:51:55:55:c0:61:
                    24:6f:1f:e5:21:42:ad:b2:07:ab:c6:09:72:c9:8c:
                    60:7d:70:c5:2a:37:32:46:a3:5c:44:3a:ce:29:b3:
                    dc:76:ce:a5:3d:52:86:d5:68:5e:87:fd:ae:96:07:
                    03:8a:65:2e:3f:6b:50:98:a7:9b:98:a3:ed:9b:d5:
                    4c:99:cf:d0:5a:98:bb:e7:3a:e8:98:54:05:09:e3:
                    b9:4b:4a:37:30:18:87:20:b8:20:26:63:a9:e7:21:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E4:D6:AC:90:E4:49:FE:8B:48:6A:78:E5:08:62:55:D5:69:D6:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/0c37b99f-c577-3f20-ac68-ad8eb8089f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:97:97:5e:63:3d:4c:4b:8f:d9:88:a2:50:ea:c0:b0:46:fb:
         ac:10:d9:3f:a5:35:a9:a3:1f:67:41:77:d3:ab:78:6a:ea:21:
         3e:cd:40:0d:b6:92:e0:19:0a:9a:9e:1f:63:63:46:00:a2:6d:
         e2:86:38:75:47:86:0f:bf:0c:0f:b6:cc:10:0c:89:f8:87:5c:
         0f:3b:6a:d7:be:d2:5e:77:bb:a1:40:12:05:5a:2c:e1:42:5d:
         fd:06:f9:82:0d:c7:81:44:9a:31:b4:27:3c:0f:d9:50:78:07:
         ba:d4:e2:73:a6:46:d3:38:f7:36:29:71:d8:52:ac:8a:92:54:
         31:42:0f:95:b1:7e:1c:08:d0:30:66:f8:9d:d7:26:ce:c0:76:
         d3:20:f8:8f:9b:34:8a:eb:5c:90:d4:6b:40:79:2c:0b:ea:7a:
         05:68:bd:8a:d2:d9:68:e6:3f:23:b5:6f:7a:2e:02:87:f4:b4:
         f3:39:e6:9b:41:88:f7:b7:55:db:d4:e6:14:f4:57:ae:d3:97:
         91:16:5e:61:b1:ff:92:ae:f0:ba:bc:8e:31:fb:2b:18:ab:4c:
         f5:52:fc:3e:d6:c0:45:ae:48:fe:19:83:1e:48:fc:f7:8a:34:
         f4:1f:89:12:cc:33:7b:0c:78:63:8a:94:51:bc:28:3b:50:87:
         53:03:59:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:24 2025 by rpki-client