Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa
File:                     9e945d0e-3397-3db2-8c77-78d048e45730.roa (raw, json)
Hash identifier:          5EoxXHJIjFNAWLYzYJyKsHZccdnvpuzIPfLfNz8rGKY=
Subject key identifier:   6B:42:58:CF:72:C5:10:4C:FF:0A:C1:96:F6:BD:50:D0:BA:76:3F:FA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858487325A62E18CDBA42CD85E200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     9009
IP address blocks:        136.0.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:a6:2e:18:cd:ba:42:cd:85:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=2c650ab2-ebe7-491f-ab28-db604ce4587c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:71:a1:65:b9:54:f5:4e:35:01:3a:b0:c3:29:
                    d8:20:d5:79:7c:80:fc:80:3e:c6:43:ef:5f:e4:28:
                    d0:69:a4:40:0e:3b:b8:f7:cf:9b:bb:ef:2e:92:9b:
                    ba:bd:5e:41:94:72:80:bc:be:1f:5f:eb:9f:21:2b:
                    6b:13:9a:a2:d3:f5:bd:2f:92:cd:8c:28:4c:54:77:
                    85:17:b0:5a:c1:66:5d:5c:d4:04:1d:b9:68:74:40:
                    c2:54:54:ff:b1:ca:90:31:da:7d:8a:58:f8:22:56:
                    a1:6c:79:9c:85:b9:6c:bf:00:a8:12:c7:e0:6f:a2:
                    5b:f4:05:24:0e:83:f6:71:66:0d:c9:26:22:21:98:
                    bb:b9:4a:fe:8d:8c:b3:58:5e:6b:01:b6:0a:22:05:
                    70:a4:02:cc:68:21:52:60:dd:b3:8c:36:88:d6:e5:
                    da:bc:c8:8a:9e:62:c6:32:cc:66:99:5f:31:92:be:
                    15:f7:6f:d1:37:40:7e:e9:09:51:ee:f3:d4:13:1b:
                    a9:38:70:b7:24:3d:01:66:3c:7d:2a:22:d5:cc:38:
                    4c:1f:eb:4e:43:40:b2:69:f2:b0:20:80:10:0d:e0:
                    08:25:f9:7e:8a:66:56:72:6c:7d:69:3f:a0:bc:5b:
                    d0:25:0a:3b:80:c7:9f:0b:b6:c0:05:dc:ea:7c:69:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:42:58:CF:72:C5:10:4C:FF:0A:C1:96:F6:BD:50:D0:BA:76:3F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7c:ff:bb:60:1a:89:57:19:17:e5:11:82:51:6d:a9:bd:35:
         f4:da:56:e1:f2:4b:48:bf:f1:f1:14:2a:30:0a:29:24:e9:a9:
         0d:da:d3:56:fb:a6:c5:f8:4b:23:0c:20:86:2d:7d:2f:06:23:
         b6:7c:7a:69:97:01:a3:f2:3d:fc:47:2a:22:4d:65:b6:90:99:
         68:de:51:d7:e7:fd:dc:73:61:53:43:8d:f5:c0:15:dc:fe:02:
         8b:89:76:e9:bb:c5:59:8a:f9:d6:b6:6e:41:02:4a:22:13:06:
         ca:a4:9c:b3:50:dc:d3:7e:a7:b8:71:78:8f:a7:15:e7:e1:b0:
         a4:9a:cd:7b:d2:84:0b:25:80:bd:65:48:84:01:00:5d:f5:df:
         ab:8e:7b:fb:50:dc:01:02:35:e5:18:4f:b1:67:00:b7:62:ff:
         3c:5c:82:88:55:60:da:4d:a9:2a:c7:c2:37:05:7c:b1:77:29:
         96:c8:57:73:19:d7:08:cb:5b:d8:b5:8f:aa:55:dc:bb:e1:2b:
         fa:84:14:ca:d8:aa:e3:fc:b1:84:45:bf:6c:be:7c:7e:24:42:
         21:cc:ec:8b:0c:52:ed:b9:5b:d7:0c:25:b0:7b:7c:9d:5e:e3:
         81:c4:71:95:61:d6:dd:6a:39:14:a5:9a:5b:6d:76:9a:71:e1:
         4e:1b:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:50:56 2025 by rpki-client