Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa2fa87d-8bfe-3248-b8e4-10f7573b1c86.roa
File:                     fa2fa87d-8bfe-3248-b8e4-10f7573b1c86.roa (raw, json)
Hash identifier:          RZoS1iaSb8bduSXMyCjBC5dODdUWW5B4bxsr/uJyEro=
Subject key identifier:   F2:47:71:9E:E3:83:0A:BD:AC:DA:7D:EB:04:AF:05:8D:8D:6E:F4:9A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847F584EB8B66BC2DD270CBAE20
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa2fa87d-8bfe-3248-b8e4-10f7573b1c86.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     7018
IP address blocks:        142.111.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:eb:8b:66:bc:2d:d2:70:cb:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=11f22488-1ed1-4404-a63f-3d4c339f8ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:8e:9e:7d:c2:62:d6:ff:c4:37:ee:1b:13:
                    d7:53:80:09:1e:c2:1d:ae:36:ea:83:7f:80:57:a9:
                    d6:20:67:21:0a:4a:67:02:c1:86:46:a7:0e:66:4e:
                    f6:9f:be:3f:cd:26:e9:c2:33:df:83:45:bd:43:b6:
                    46:94:13:9d:68:9b:ed:1a:92:0f:38:cc:9c:6a:6f:
                    93:a4:ee:20:ef:bb:3d:c5:14:f4:99:2c:4d:54:e3:
                    2d:83:c6:e5:eb:6a:35:70:f3:f6:5f:a2:fa:58:df:
                    53:16:7e:c3:e1:12:ad:6c:2c:67:b8:92:e5:58:8c:
                    13:08:d0:68:9e:6b:82:75:9b:67:ae:1d:3f:33:d4:
                    74:88:26:b8:c6:63:3b:d7:b3:fa:1c:78:f0:a2:a9:
                    d8:b5:3b:fc:e1:9a:d2:25:ee:3d:bc:f2:0c:c4:c1:
                    ba:48:c7:2c:35:d8:23:40:15:54:77:57:6e:aa:5e:
                    90:a4:59:da:d9:96:26:ad:de:6e:ae:71:f6:1f:61:
                    7e:2d:b8:97:9f:96:22:66:d0:d4:50:fb:1d:67:b0:
                    92:ef:6c:e6:6d:e9:5c:2a:dd:ba:6e:29:a5:5b:4e:
                    79:41:34:8d:1c:9c:35:79:c4:7a:53:72:cb:ce:f3:
                    24:dc:7c:ef:dd:87:60:4e:f6:b9:8c:80:4a:cd:99:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:47:71:9E:E3:83:0A:BD:AC:DA:7D:EB:04:AF:05:8D:8D:6E:F4:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa2fa87d-8bfe-3248-b8e4-10f7573b1c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:47:75:1c:24:a2:2b:1f:2b:db:1d:9b:e6:44:03:29:c2:
         ef:32:4b:7b:24:a4:f6:c1:89:e8:20:13:52:fe:49:4f:2f:59:
         ae:04:88:df:da:39:7e:d2:0b:1e:e0:5f:1e:10:fd:57:f9:0a:
         5a:bc:15:5d:d0:68:ed:79:38:7c:1e:0f:a3:b5:9c:0e:b2:57:
         47:ad:d0:08:d9:5d:b3:80:6b:ff:f7:75:62:9a:8d:ac:bb:3f:
         33:2e:4b:d2:14:16:b4:66:b3:ac:4f:e5:e4:88:25:73:2a:57:
         0c:15:d3:55:0c:51:2a:84:38:11:af:4c:af:49:61:d4:95:ee:
         6d:69:19:62:09:79:a5:2b:6a:0f:bd:30:a6:f9:3e:23:db:8a:
         81:55:2a:42:7a:1b:4f:0f:7c:12:61:49:f4:40:fb:71:d0:02:
         eb:e3:81:3b:e8:7c:2b:1c:27:af:a4:58:f3:6e:71:4d:3e:f5:
         06:d9:d5:c8:36:c5:09:6b:31:76:c9:32:f0:4a:84:b4:4c:01:
         06:ae:6a:05:69:eb:91:3e:eb:02:8e:95:e3:bd:84:ba:d8:ec:
         e9:72:18:32:74:53:23:45:b4:9a:50:79:48:15:2e:66:34:a3:
         80:3a:40:9e:90:d6:62:30:fa:d8:fb:fe:df:3a:ea:0e:af:e1:
         c2:0a:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:57:22 2025 by rpki-client