Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa
File:                     f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa (raw, json)
Hash identifier:          hOTlL73K+uwK6uQmzBONN44tSXyB/D1Y9dE/6v0wcy0=
Subject key identifier:   07:4C:5D:FA:9D:97:1C:9C:9F:EE:D6:B1:44:91:88:35:17:90:B5:69
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858487A837A4BCFFB96920DD78CC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa
Signing time:             Wed 08 Jan 2025 17:20:25 +0000
ROA not before:           Wed 08 Jan 2025 17:20:25 +0000
ROA not after:            Tue 08 Apr 2025 16:20:25 +0000
asID:                     149440
IP address blocks:        166.88.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:83:7a:4b:cf:fb:96:92:0d:d7:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan  8 17:20:25 2025 GMT
            Not After : Apr  8 16:20:25 2025 GMT
        Subject: CN=8114306d-8239-4858-a8e9-7294ee141012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:19:39:d7:86:01:b3:8f:c7:20:4e:1d:5e:
                    3b:d1:16:4d:ba:04:62:dc:11:c7:52:d4:fb:36:15:
                    96:44:41:1c:d0:79:dd:3e:93:9b:9a:c3:e6:55:ef:
                    7d:b8:99:b6:c4:5c:33:19:b2:b0:b2:80:d8:13:d3:
                    3a:fc:22:ba:73:8a:de:b4:99:9b:13:14:9b:1c:7e:
                    a7:cd:92:06:dc:1b:f0:17:4c:08:53:b6:ba:26:3d:
                    7f:5a:e6:7d:76:01:4b:d3:c6:a0:ce:df:26:f7:49:
                    11:43:c6:cf:91:72:c0:03:e0:8f:2e:5b:22:ca:9d:
                    fa:bc:12:24:29:c6:82:ff:45:4c:ed:2c:a5:f3:94:
                    db:b2:b1:85:4f:fd:c6:a1:37:76:2e:5a:e1:ca:4f:
                    6d:9a:24:c8:3d:b3:18:11:9a:16:b5:93:09:69:4b:
                    b8:93:a7:80:0f:bc:3e:9a:d4:b3:35:38:d7:12:99:
                    5c:58:51:44:62:ea:4c:88:80:5f:31:8c:58:37:2d:
                    6f:d8:bf:d2:6b:92:57:07:c7:59:a1:37:28:8c:55:
                    c1:96:74:63:b4:51:1d:8f:26:d5:7f:12:0f:66:6a:
                    70:28:70:16:ff:34:9c:64:ee:a1:93:f5:e2:e7:79:
                    c7:e3:02:99:dd:c0:6a:00:d4:b9:ea:ce:30:0b:27:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4C:5D:FA:9D:97:1C:9C:9F:EE:D6:B1:44:91:88:35:17:90:B5:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:61:c3:42:8a:e2:b1:82:19:a1:f6:e3:9c:de:82:45:d2:49:
         37:7c:8a:c8:8c:ab:2e:a5:0f:46:d3:9a:96:78:cf:b2:83:1a:
         8b:7f:87:7d:71:4e:06:89:08:d9:24:d8:2f:ba:1f:6f:1b:bc:
         68:42:63:88:d9:92:04:c8:60:eb:ed:6c:0c:5c:97:6b:78:a9:
         39:9a:0d:ac:5c:ca:da:bb:ac:3e:f1:7f:c6:3b:de:06:f5:08:
         83:ea:12:33:71:ec:2c:35:b6:3d:22:df:8f:2e:7b:e5:fe:1a:
         ea:82:10:92:06:bf:43:1a:c6:9e:67:42:13:88:98:2e:05:b9:
         ff:be:e1:fa:79:3b:d7:60:8e:ac:e5:6b:a2:5e:8f:87:ba:a7:
         c4:90:e5:0e:68:9b:39:10:cc:6b:c2:ec:e3:85:04:ca:e9:8e:
         a9:5b:56:83:98:cf:61:69:e4:3a:60:e9:94:b4:50:70:00:47:
         79:10:9b:c5:57:94:ce:25:22:49:2d:4b:ed:df:59:cf:7a:a8:
         a3:c8:49:47:39:ee:02:85:38:91:aa:fa:a0:52:e5:5d:f1:42:
         48:4c:56:ab:b2:6f:1d:dd:7c:b5:01:1f:e0:d1:b3:49:77:00:
         86:8e:bb:e5:4d:8d:6a:4c:a2:a1:ee:45:a8:4b:68:dd:2f:f1:
         30:6d:78:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:28:31 2025 by rpki-client