Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa
File:                     c4aaba14-e935-386d-a66a-5f8a5674acb5.roa (raw, json)
Hash identifier:          e1UDhTkzNmXjHbw1wOqa4gTxcUs9qBCupDo6/oXiki4=
Subject key identifier:   E0:1B:2E:1F:D0:92:DC:B3:79:1D:E0:69:FB:9A:75:DA:BA:0C:BF:9E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858484C1018EF300D3B933394BD80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     6939
IP address blocks:        143.109.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:18:ef:30:0d:3b:93:33:94:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d17ee740-64d2-4be3-9866-4d0274335e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:76:70:60:2a:00:28:cf:0c:d4:5d:52:8f:
                    14:85:8e:00:1e:3e:5f:13:2d:e8:30:7e:45:ae:c9:
                    83:37:fc:cf:97:ba:af:50:05:68:b6:4f:5f:4d:bc:
                    0f:e3:07:7d:39:de:96:97:4d:17:ec:bd:33:20:1b:
                    25:d9:85:54:d2:8e:de:67:d6:21:31:49:e2:89:46:
                    5f:f7:02:03:9f:ca:b3:c7:28:9b:f0:b7:c3:a5:eb:
                    6e:99:0e:25:9e:1b:91:bf:06:94:8f:44:be:fb:9a:
                    77:83:46:46:8c:8d:32:e2:8d:1e:76:a9:2c:75:a2:
                    cd:0c:20:a9:75:49:c9:e5:c4:d9:92:cb:78:fc:1e:
                    d2:91:61:c5:01:3f:c2:55:80:77:b6:2d:6e:1e:97:
                    d2:35:24:26:e2:97:c5:46:ca:c6:b2:70:fc:70:09:
                    b0:68:c9:35:e2:1d:d5:d2:47:7b:78:c7:a4:e8:a4:
                    f8:c9:84:90:b4:88:23:aa:37:33:7f:75:a0:5c:0d:
                    49:c3:ec:59:38:a7:e4:47:f0:f1:5d:ab:18:70:70:
                    9f:10:d4:9a:54:3c:66:43:48:ea:09:51:02:a8:dc:
                    45:58:ca:f0:51:95:bf:fd:34:fb:40:ae:d2:6e:9b:
                    42:ff:d6:f5:07:71:20:5d:7d:72:29:8e:43:5e:c4:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:2E:1F:D0:92:DC:B3:79:1D:E0:69:FB:9A:75:DA:BA:0C:BF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:07:ca:0c:38:09:49:7e:1e:5d:f6:d2:4c:41:ce:28:1a:9d:
         fb:8f:55:e3:74:c6:8d:6a:10:69:28:3b:c0:4a:5b:ed:2a:6b:
         08:e9:15:8e:10:96:53:51:34:b5:ab:45:82:80:10:8b:62:43:
         ad:5a:12:da:07:b9:e2:73:e1:0e:a8:62:f3:be:6c:77:6d:bd:
         bb:ca:25:0c:fb:84:83:cf:b0:d7:16:aa:f0:e7:21:45:5b:8f:
         0f:bf:39:b9:cf:42:13:ea:e1:c9:ee:4a:d4:31:4d:1a:8e:2f:
         66:5f:bb:09:b2:68:17:ee:c0:84:0d:a8:8b:3d:a5:76:5d:0f:
         29:ce:70:59:82:c1:32:f8:60:78:05:fb:8e:63:29:43:14:cc:
         9d:7d:d5:c2:d1:33:d5:1f:07:e1:b1:4a:41:e4:3b:a0:4f:4b:
         c7:ef:31:23:5c:b6:13:1a:2e:e4:b2:0b:6d:88:2c:6a:e2:6d:
         1c:81:53:03:c4:7f:80:82:20:ce:f4:8a:48:ec:ba:ff:c5:c3:
         62:35:d3:9c:37:d5:27:b0:ae:ea:4f:6c:9d:84:ec:64:14:0b:
         07:f1:e3:0c:3a:47:4e:a3:d4:18:64:28:75:86:ac:a7:6b:48:
         1f:74:02:90:b0:e7:83:dc:cd:7a:55:97:7c:31:71:c5:e9:11:
         45:a8:39:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:44:08 2025 by rpki-client