Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/24bbc0de-b689-348a-9e3d-69dc1672b79b.roa
File:                     24bbc0de-b689-348a-9e3d-69dc1672b79b.roa (raw, json)
Hash identifier:          o/1+n9LOn6XTY0hoVgsWiMpB0HvADWYcs+C6wy72+dc=
Subject key identifier:   1D:79:03:A2:02:E9:5D:E0:8C:B1:FD:15:08:A4:9A:EB:27:03:5C:FC
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F432858486D905E46D8DDBF751209CA80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/24bbc0de-b689-348a-9e3d-69dc1672b79b.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        24.124.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:5e:46:d8:dd:bf:75:12:09:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=868b4ddc-c99a-40fb-8c8b-be0b53e8372a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:f6:a9:ad:52:f8:d0:ec:fc:b6:2a:8a:ce:
                    71:9b:7c:46:1f:40:38:4d:3c:1a:b6:c0:b1:cd:14:
                    0d:3d:89:88:3b:b0:f3:22:18:4e:75:90:24:c3:ec:
                    4f:45:5c:4c:ee:1a:6a:25:e3:f7:18:ab:ad:5e:44:
                    6d:ec:fe:ec:f2:4c:6d:d8:11:8f:fb:b8:8c:07:4a:
                    9c:34:d3:13:ec:74:3b:bc:53:80:96:f9:7e:02:a6:
                    64:a3:f3:d6:13:99:89:61:fe:f6:62:71:2c:6e:9c:
                    77:72:5b:0a:80:89:49:68:82:f5:9a:b9:57:61:1b:
                    f0:85:f6:23:69:88:1d:4f:a4:1a:b2:35:94:2d:8c:
                    73:9b:f1:1b:91:c3:d8:fc:98:f0:25:7c:69:18:76:
                    d5:1c:19:e6:26:ff:fa:65:49:fb:03:28:64:e0:98:
                    75:68:d1:b0:01:e3:68:ff:88:b4:1d:a2:e1:27:bf:
                    fa:fd:4a:0b:e1:1c:5a:fc:c1:f0:7b:ae:88:60:7d:
                    fe:8e:67:86:8a:de:28:0b:42:27:d1:0a:43:67:07:
                    37:cb:e4:79:3c:8a:33:e7:79:3d:20:55:bb:f6:21:
                    78:f0:60:07:38:8a:51:c8:d1:36:f4:63:d4:96:75:
                    a0:6a:1b:7b:97:92:1c:25:bb:82:81:ea:5d:2c:98:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:79:03:A2:02:E9:5D:E0:8C:B1:FD:15:08:A4:9A:EB:27:03:5C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/24bbc0de-b689-348a-9e3d-69dc1672b79b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.124.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:65:99:26:6b:80:11:d8:17:11:85:4b:de:b1:19:17:1c:8f:
         51:47:d8:bc:d9:30:67:e8:d3:2a:17:f8:7d:f4:5a:70:8f:07:
         29:4a:1b:1c:c3:65:54:d8:11:5d:96:de:24:03:79:84:d3:18:
         b8:7f:df:95:d0:cb:82:d1:28:93:2a:88:86:ba:d2:60:5e:ad:
         5a:a0:75:c0:af:18:24:f7:d7:ca:86:be:47:2f:0b:8e:e2:57:
         b4:04:c9:e1:50:15:5c:9e:b5:46:f4:3e:31:98:57:e6:66:08:
         29:8d:11:b7:76:23:fc:4e:f8:ba:7b:c0:78:03:7f:80:41:66:
         e0:17:cc:ed:66:fe:4c:81:ee:41:e8:9a:44:0f:83:7e:76:23:
         dc:8f:bd:37:f2:5d:1c:98:55:6f:63:8e:e7:fb:70:68:20:dd:
         71:e2:0c:89:0d:1f:86:7a:0e:e3:0f:77:50:71:51:2f:61:c3:
         8a:d6:88:a4:79:91:f8:ab:ba:d7:47:6a:d1:c1:0a:1e:3b:0e:
         db:31:7b:cc:2b:24:af:cf:16:c1:ed:57:72:e6:d9:ae:cb:05:
         a0:5a:71:44:1e:d0:9f:e3:88:91:75:e2:d7:fa:79:fe:81:ff:
         46:10:40:81:f4:35:02:54:be:21:66:17:11:76:ae:e9:54:9e:
         dc:c7:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:47 2025 by rpki-client