Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa
File:                     48ed3810-816a-3e90-8728-bcb8b396c1a9.roa (raw, json)
Hash identifier:          n9QofLm3woHoh2/5yKRG/qrH+Y0sRdCrjdf7dLwuMzI=
Subject key identifier:   38:89:7B:2A:B7:98:8E:0F:8A:3F:6F:BA:4D:87:45:54:11:C0:52:F4
Certificate issuer:       /CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450
Certificate serial:       010D0C9F43285848530AE7946729CC592054268E
Authority key identifier: A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     394688
IP address blocks:        192.152.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:e7:94:67:29:cc:59:20:54:26:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=6e6ad10d-e13d-48e1-be50-7d146ac5cb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:ff:74:7e:ba:1c:0c:5a:f4:e2:4c:f3:c6:
                    2b:7b:a1:82:39:bd:03:6c:e2:e4:41:46:9a:ab:4c:
                    15:ee:30:31:80:29:bf:2a:a1:ed:9e:78:12:38:02:
                    92:15:71:72:f5:15:82:9f:9f:87:4b:ca:68:93:17:
                    44:de:ff:ba:b7:75:68:fb:18:a6:99:05:d7:fe:ac:
                    35:a3:25:10:a8:cc:58:40:73:80:8f:c6:72:6b:5c:
                    0f:ab:37:b6:56:53:20:f3:8c:a7:55:45:79:05:eb:
                    8b:0b:ff:db:12:f3:b6:1a:bf:04:19:9c:48:22:fa:
                    10:20:66:26:68:64:05:92:a3:36:bc:3e:88:f6:c0:
                    1b:f5:5e:52:d5:42:6b:29:33:57:65:f0:b1:e3:68:
                    d5:47:f5:f8:ca:30:3e:b3:96:04:9c:c9:df:ed:85:
                    e7:36:14:40:12:cf:98:4b:42:ae:29:19:fd:96:bc:
                    94:e6:d2:a8:d7:21:b7:f7:bb:bb:74:da:eb:8d:3d:
                    a4:72:bb:8a:75:4e:b6:82:13:f2:ac:89:25:70:d3:
                    9d:f3:e1:4a:88:f0:79:f5:5d:5d:4a:7a:49:e8:56:
                    2b:61:1f:a8:ed:fe:13:fc:28:4a:a0:67:c1:a5:3a:
                    18:92:9f:73:3b:e6:95:26:0a:41:eb:25:7e:69:b7:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:89:7B:2A:B7:98:8E:0F:8A:3F:6F:BA:4D:87:45:54:11:C0:52:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.crl

            X509v3 Authority Key Identifier:
                keyid:A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:22:f2:a2:9b:0b:96:29:42:af:28:3d:ab:4b:c5:18:1f:d8:
         79:09:1d:cf:6f:53:14:96:2f:4b:98:7d:f7:50:68:5e:5c:d3:
         a6:6a:de:ec:d9:ec:0c:e9:c2:f5:21:3d:07:2b:25:30:0a:cd:
         d9:5f:c2:ab:70:7d:a0:ae:51:20:ab:e0:fb:29:b3:af:20:96:
         ce:8f:ca:e0:94:b2:cb:6d:70:2e:38:77:44:2f:d8:ce:c2:06:
         4c:99:c7:42:b2:57:a3:75:3f:56:42:e1:33:bf:a8:f2:4f:96:
         f3:87:3c:5c:9c:d1:5b:f1:57:1b:cb:f2:67:3f:9d:19:37:b9:
         cd:8e:e0:66:4b:cb:d4:60:f8:89:5e:3c:d8:f6:b8:b3:84:30:
         77:b2:dc:61:c0:f8:88:a7:2d:f0:07:eb:9f:99:ed:6c:33:3e:
         f2:05:f6:3a:e2:13:bf:99:76:c8:ea:c7:d8:0d:2d:aa:11:21:
         e9:a8:cc:48:d4:10:1b:a6:de:d8:33:2e:4f:e2:17:37:44:be:
         50:6a:7e:d3:88:09:5e:ad:0f:1b:79:c2:af:7d:c0:8e:57:4f:
         ee:32:07:ab:3e:bf:d2:55:35:16:92:95:1f:80:c6:18:1c:99:
         e8:fe:98:c7:0f:18:14:13:dd:9a:a0:e6:fb:65:e6:d7:35:d7:
         b2:3a:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:59 2025 by rpki-client