Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa
File:                     e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa (raw, json)
Hash identifier:          yFUY5lSeY4BB1N3rDkq3pTIL6S8S05EgeUlZ9C8XJOM=
Subject key identifier:   ED:48:5C:88:C0:2C:EC:C4:62:EB:32:5D:F2:DD:66:F6:92:CE:F5:61
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847E4C4AB839C279EA52894D140
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     212238
IP address blocks:        142.111.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:ab:83:9c:27:9e:a5:28:94:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=a3b8acee-4188-467a-a559-b47c6ce5665e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3f:12:67:02:f9:8f:12:c7:e1:fa:a3:38:e7:
                    11:f1:12:2c:b4:be:e7:42:93:92:ec:f4:59:5d:41:
                    3f:e4:03:e5:ad:28:83:50:23:84:62:12:5a:87:05:
                    e1:8d:d3:c2:21:38:26:94:a6:8f:49:5c:2b:d3:28:
                    ea:43:6b:65:94:99:64:6b:66:a3:0b:a3:f3:40:8a:
                    fb:15:f0:3f:95:ff:0e:84:63:98:4e:66:71:bc:e0:
                    0c:02:97:30:25:90:02:25:96:48:1b:ec:38:fd:46:
                    0b:55:65:1c:ea:27:63:69:34:fe:c0:16:c3:cc:b1:
                    91:0a:6b:5e:51:bd:93:17:0b:f8:7a:91:6f:d4:25:
                    38:3e:29:66:10:c1:41:52:4c:f4:aa:f1:eb:f8:87:
                    e6:85:ac:46:1a:29:26:cd:45:a2:cc:32:41:59:f1:
                    52:9c:15:8e:3e:55:c3:a3:4c:85:28:4d:db:8d:8f:
                    36:a3:1c:b4:7a:5f:39:85:0a:f3:9d:82:51:d6:c5:
                    16:33:ff:68:0a:ee:ab:4d:77:b4:98:0a:69:a3:e2:
                    f9:ec:c5:79:e1:02:ae:5f:19:db:ac:25:6a:02:9c:
                    87:c3:4f:eb:32:1f:7e:96:8a:5a:cf:c7:79:66:d8:
                    40:71:88:ef:65:7a:2d:ba:b1:0c:7a:36:f8:ba:0b:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:48:5C:88:C0:2C:EC:C4:62:EB:32:5D:F2:DD:66:F6:92:CE:F5:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:03:28:c5:f0:bf:28:35:db:50:88:ba:b8:0d:41:73:c0:6c:
         9c:91:18:c2:4c:ce:6e:eb:45:cb:b9:98:60:d6:6d:54:9a:56:
         f1:fd:16:dc:de:e8:78:5a:f0:9f:7c:2e:2f:6a:35:06:cc:84:
         88:05:c9:60:50:46:a3:b4:d7:55:bf:95:79:f9:d1:c5:b7:56:
         ba:85:a8:80:c9:a6:18:c4:1c:d7:df:f1:70:dd:a0:ce:3b:27:
         47:95:24:42:02:88:8b:1a:33:b3:7e:3a:2d:19:f5:a0:58:08:
         c8:f6:d7:6f:5f:48:57:4f:9a:73:c5:03:66:eb:e6:b2:9c:d9:
         b0:0c:5d:54:ba:05:07:52:9b:44:38:20:dd:3b:7b:40:3d:43:
         c1:81:a5:25:fb:30:ec:db:ff:30:62:a9:a4:df:a0:a2:c9:2d:
         85:fd:6d:25:29:66:b1:24:0c:c6:75:c8:52:7e:eb:45:e4:1e:
         ad:f3:22:c4:ba:35:b1:4a:53:8a:35:2f:5b:92:35:c6:e4:c0:
         fa:40:53:54:e7:77:40:fe:28:62:ee:8c:c3:21:13:ec:64:3c:
         8c:64:d7:88:74:43:74:8f:0f:0b:ae:de:db:6e:71:bb:d0:8b:
         d5:6c:53:85:3f:fd:e2:5c:a3:57:29:30:e1:78:e9:9f:04:6d:
         1a:cf:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:30 2025 by rpki-client