Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa
File:                     7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa (raw, json)
Hash identifier:          HLDl8wzSjq9+cFXtIdWJ/nM7fB06m1cLF46DXT29xk8=
Subject key identifier:   4E:A4:51:10:95:9D:02:5C:E5:96:AF:48:1E:86:A2:9A:81:D4:49:C8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858487325A59EFEAB039AA4675E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     9009
IP address blocks:        136.0.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:a5:9e:fe:ab:03:9a:a4:67:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=12293c7a-289b-46f0-b68b-cd78aae88825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:23:07:df:7b:cc:c1:cd:df:05:58:84:77:c1:
                    32:3f:66:33:4e:e4:63:79:f0:ae:21:00:10:49:aa:
                    49:fe:9e:12:f9:06:f1:da:4d:d1:58:b4:39:20:83:
                    7e:a5:ad:63:41:24:8d:9a:48:15:f6:cc:3e:19:21:
                    5d:63:d9:10:51:b2:1e:d4:db:00:f6:6d:af:26:38:
                    ea:1e:8c:1c:d1:de:42:3a:b2:5e:68:2b:e9:7b:16:
                    ad:b5:f7:47:f8:cd:da:46:39:64:1e:e6:76:62:20:
                    c3:5f:29:1f:2e:51:c9:8a:ce:31:95:ea:87:3c:4f:
                    e6:f8:54:79:39:7f:87:cd:ba:c6:24:6b:d9:ee:10:
                    8a:dc:9a:ca:0e:e6:50:20:cb:57:d6:6a:dd:b3:06:
                    ef:e0:be:73:8e:0e:41:bd:2a:20:f4:c3:51:18:db:
                    b6:3e:27:d2:8c:d8:37:8f:b6:6c:1a:7b:af:98:22:
                    e0:3e:1d:43:90:c0:3a:c1:dd:b6:1f:e4:d5:4e:74:
                    92:75:41:44:52:9b:b7:b3:6b:da:79:8a:ae:41:de:
                    69:7e:1f:15:87:3e:e0:88:33:ac:fe:39:b1:50:15:
                    bd:da:69:ee:1f:44:57:50:3b:6a:f6:2e:95:87:36:
                    cd:3f:e1:bf:1a:56:51:3b:8c:90:0f:3f:07:03:bb:
                    6b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A4:51:10:95:9D:02:5C:E5:96:AF:48:1E:86:A2:9A:81:D4:49:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3d:77:d9:1a:28:c0:13:b3:58:4f:bf:1e:28:7a:29:3f:6d:
         70:25:d1:6e:a5:18:91:f3:7b:35:54:5a:1a:f2:c7:62:a3:49:
         8d:6b:ec:dd:ac:10:e6:73:6f:a4:0d:ee:be:db:c5:63:c1:6e:
         35:c3:5d:be:02:bd:a1:71:6f:99:57:a1:bf:23:37:5b:cb:b0:
         04:05:d2:58:5c:45:b4:57:7d:79:1b:40:02:a4:6d:86:af:9a:
         1d:97:fc:68:71:ee:2c:e6:38:e0:f9:86:09:0d:00:d8:fc:70:
         fc:66:ba:4a:d0:42:60:c1:71:28:41:0f:c0:04:7d:36:3f:96:
         f9:c1:65:4f:a9:8c:b8:e7:e4:df:da:50:fc:99:24:66:e6:49:
         de:2b:16:d6:18:ad:30:ac:53:4e:2e:47:79:38:dd:8a:7f:2f:
         55:21:31:c4:76:f7:15:39:73:05:8d:20:d0:07:e9:99:65:e9:
         8c:77:de:ad:e5:3a:24:66:53:bc:15:e5:8f:5e:e4:b8:3c:0b:
         17:5f:f9:77:02:5e:54:49:c1:5b:00:8c:f6:e5:45:61:8d:4c:
         2d:b5:2d:56:ce:e9:7a:22:7d:26:20:f7:f3:6f:6d:a7:93:5b:
         06:e4:6b:7c:da:76:e9:e2:66:0c:83:ec:d4:57:c2:57:53:42:
         56:81:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:51:32 2025 by rpki-client