Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ac5b26b-4e9f-393f-ba39-8845b45b224a.roa
File:                     4ac5b26b-4e9f-393f-ba39-8845b45b224a.roa (raw, json)
Hash identifier:          uxadZ/yaN2hTj646xEBGBX3zQzSls7lO9A8asgBlx2w=
Subject key identifier:   AB:7C:E4:15:C0:28:51:33:54:94:44:00:72:A6:E1:66:D1:E8:96:CB
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848222FEB21DC7585334CB23180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ac5b26b-4e9f-393f-ba39-8845b45b224a.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     63018
IP address blocks:        172.111.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:eb:21:dc:75:85:33:4c:b2:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=d3c5171f-19f4-4451-915d-1cc9486093ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:71:b1:a5:26:28:98:ef:7d:3f:09:9e:07:8f:
                    3f:d2:6e:a3:0a:15:20:a3:e8:68:59:46:ad:ea:a8:
                    b7:f0:10:1e:b7:40:33:29:fd:9b:24:23:5a:ca:84:
                    0d:c9:4f:5f:7f:80:ce:3a:d8:5b:9e:51:75:ae:da:
                    d1:0d:e1:7c:ce:9d:0b:de:ce:44:94:85:4f:ae:a6:
                    33:47:0f:d5:46:5c:bb:b0:76:db:0c:53:a3:ff:e0:
                    13:32:33:0c:7a:ef:03:ea:08:08:29:b0:07:c3:77:
                    31:2c:40:31:f9:f2:68:6f:40:65:f0:66:6e:f7:f5:
                    88:f7:a8:f3:be:1b:0e:33:de:d2:ca:3f:4d:e2:d1:
                    13:7f:63:4b:ad:65:0e:4c:9b:49:e1:17:0c:34:25:
                    b7:1b:3a:e9:9d:93:d9:69:11:6e:32:3d:1d:bd:61:
                    b2:64:9b:d9:59:0f:53:60:16:69:38:40:81:c9:8a:
                    68:8a:a5:ea:ac:1a:07:ed:e3:b5:86:c9:f5:28:f9:
                    ae:e4:15:f7:a3:b4:28:62:b0:51:b1:b5:d6:c5:6f:
                    a5:8e:bc:64:80:08:0b:8b:6a:be:e1:f8:8d:6c:50:
                    c9:4f:93:ae:3e:05:4a:6f:a4:b0:d0:4b:5d:b5:dd:
                    43:45:95:92:e9:fd:0d:06:d4:f5:b0:58:b1:b1:41:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7C:E4:15:C0:28:51:33:54:94:44:00:72:A6:E1:66:D1:E8:96:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ac5b26b-4e9f-393f-ba39-8845b45b224a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:45:50:81:b3:87:a8:dd:3e:03:90:19:37:01:51:d0:77:f6:
         f4:ea:24:ea:17:16:73:92:a9:5d:b6:e7:2c:dd:8b:26:da:f6:
         8c:a1:91:c5:84:e8:f0:b0:f6:1e:4e:c7:7b:19:f4:d4:4a:58:
         16:bc:41:41:87:dc:a8:8f:cd:ee:20:89:b1:49:c7:1e:45:a1:
         be:ee:9e:4f:c0:fa:e3:1b:30:ea:bb:53:67:f0:32:55:79:54:
         e1:35:74:f5:f8:dc:c2:45:38:65:d3:ea:d2:e7:01:3d:98:de:
         11:b4:7d:73:f0:88:60:09:b1:12:2b:16:46:af:dc:b8:30:c9:
         6f:6a:fd:61:4a:cd:87:f7:3e:51:ec:f2:d5:ad:65:eb:3a:2e:
         16:9b:e5:09:b0:29:b1:cd:c5:ff:41:c4:c9:86:46:93:9b:e6:
         8d:2a:23:37:d1:22:03:74:5c:ca:49:0c:3d:f1:56:d4:7a:29:
         90:71:e7:a5:4f:f6:2e:85:9e:44:8c:6d:47:59:78:67:46:4d:
         d0:e9:4f:13:d1:14:83:ae:fa:b4:ae:03:02:3e:a9:ad:06:71:
         e2:e7:53:59:35:25:e2:db:56:55:9c:eb:be:a9:26:65:33:1b:
         b9:b9:93:4c:71:ce:c0:f2:81:d4:8d:f3:df:08:c4:2b:dd:a9:
         95:03:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:55:54 2025 by rpki-client