Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa
File:                     5965b031-ef34-3104-aae4-6e476d645778.roa (raw, json)
Hash identifier:          uJ7HPvOvOYdAH9bMUkteS1IF0rwzB2o2BydmW/bWwiw=
Subject key identifier:   F9:66:4D:0E:AA:F7:68:F6:9F:DC:5D:1D:85:8C:4B:BC:42:69:0D:6B
Certificate issuer:       /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
Certificate serial:       010D0C9F432858482BF55ABAD621C6FF33618478
Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     701
IP address blocks:        192.48.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:5a:ba:d6:21:c6:ff:33:61:84:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=5182053e-d3e0-4aa7-a506-84e7eb225fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:b8:bf:d8:61:13:94:82:f7:2f:e1:da:fe:
                    ce:be:62:de:62:a6:de:71:27:af:44:ed:92:4e:a2:
                    70:51:49:c0:f5:12:04:fa:de:39:d5:cf:b8:e9:7e:
                    f5:7d:42:7d:91:91:41:6c:c7:19:1d:b3:ee:fe:d5:
                    61:08:d3:68:54:1c:d9:bc:46:6f:79:33:8c:01:a6:
                    7e:bc:96:13:14:8f:b2:08:62:63:76:45:1b:64:da:
                    61:b8:66:f5:ea:2f:aa:a5:42:cb:b1:31:1b:81:0e:
                    a4:a1:cc:1e:05:68:37:01:01:77:d3:c8:6d:5f:13:
                    18:1c:5b:06:7b:8e:10:08:df:ad:46:49:79:0f:f2:
                    ca:6a:17:42:d2:17:e3:35:4c:d2:56:e6:17:59:d4:
                    3d:e6:09:43:e8:f1:38:7e:5c:8c:61:8a:61:85:ea:
                    ee:da:85:89:4b:41:5b:54:3e:bd:5d:bd:74:35:55:
                    05:88:ae:8e:f2:b7:ce:2e:f8:28:ad:b0:e9:d2:4e:
                    49:2e:3b:c9:e7:87:40:29:aa:bf:b1:c0:89:d0:eb:
                    32:cf:6d:fd:2a:8f:60:0c:d3:8a:33:51:39:b0:5d:
                    83:27:e4:ad:e9:67:ee:40:b4:36:d1:59:fb:1a:c4:
                    26:c5:bf:4b:67:41:d0:37:69:f3:25:24:df:5e:59:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:4D:0E:AA:F7:68:F6:9F:DC:5D:1D:85:8C:4B:BC:42:69:0D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl

            X509v3 Authority Key Identifier:
                keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:55:a2:52:c7:e5:5d:35:a4:f8:83:0a:6e:8f:dd:5a:24:0e:
         a4:2b:43:a8:21:13:36:fd:2d:81:ac:d5:b2:ed:12:0b:74:1e:
         fc:40:8c:2e:62:59:5b:66:5a:25:a3:0b:23:9e:17:08:7c:47:
         df:35:2b:7c:10:cb:22:f8:6d:79:d4:2f:70:75:74:21:1e:52:
         71:2f:e8:90:11:30:aa:2d:bd:20:fe:6d:45:53:6c:18:56:c7:
         b0:42:1d:26:b5:7a:f9:f3:84:01:41:b3:df:18:15:9b:a7:ed:
         e5:bf:cc:71:e0:b1:a4:61:a4:86:62:a3:7b:e8:a4:ca:8b:34:
         44:61:a5:3d:6e:f8:de:d3:bb:19:d4:13:1b:f8:7b:dc:91:1d:
         45:97:e2:45:43:99:15:ea:ce:a1:89:4d:79:ec:22:f9:e1:ff:
         67:f2:ad:56:65:bc:5c:10:86:6e:b2:39:ff:b1:04:71:d4:a6:
         50:3f:d5:77:58:8e:7f:91:f7:3d:b0:d8:0a:ec:b3:5e:a1:a9:
         e1:26:88:27:b2:4c:de:74:5d:d0:f0:11:a7:db:cc:7b:9a:f0:
         b4:5f:fd:04:08:34:9c:b1:9a:2d:fb:22:b5:c9:1c:2e:20:80:
         5e:a8:f5:f9:6b:62:50:e5:9d:da:75:23:fc:53:34:e6:18:d1:
         57:0a:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:04 2025 by rpki-client