Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa
File:                     a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa (raw, json)
Hash identifier:          wH4+ft4s1+ybXf8oux8OMRZea1Vi1RPMUD+mfrmUfXQ=
Subject key identifier:   01:99:6D:B9:1B:55:06:04:FA:85:A6:2E:35:9B:0B:EB:2F:2A:81:95
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584812D524AF7883C46760868E00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     16839
IP address blocks:        149.96.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:24:af:78:83:c4:67:60:86:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=13dd9339-a0da-4ccc-b9d4-04f698719d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:1b:5c:1e:2a:12:e2:e7:ee:52:6f:e6:57:
                    50:5f:20:e1:c4:d9:ee:ff:02:53:c1:6d:3c:da:99:
                    e4:93:15:36:7e:28:72:59:fd:65:45:a5:a6:ea:6c:
                    d1:b5:7a:5c:e5:f0:be:56:e5:03:fd:e5:ca:44:65:
                    75:a8:56:7a:4f:3c:21:f3:bb:ba:d4:8d:48:7e:9b:
                    66:58:fb:cc:96:02:3f:85:85:97:b4:f7:3c:03:cd:
                    18:e9:48:cd:b7:ec:e1:e4:5a:6d:7e:6d:1e:5a:92:
                    50:4f:db:d4:50:9b:a2:6f:1f:55:30:fb:10:90:b7:
                    9c:cb:f9:7f:6f:97:ca:25:e9:6e:21:aa:f4:61:7f:
                    e5:75:9b:7d:59:80:6d:0f:62:3d:dc:4e:4b:01:0f:
                    0f:df:b0:45:e9:ac:b0:9a:d4:09:8f:aa:92:b6:a2:
                    a0:e7:32:7b:8f:bc:fd:68:a8:f0:6d:e1:cc:1b:b2:
                    68:64:04:0a:6b:e2:b2:4e:2a:d0:c5:43:6c:3e:df:
                    68:09:87:0e:92:a6:48:64:cd:40:1d:90:b0:5a:bf:
                    eb:76:6b:13:fe:75:ad:bd:22:81:a4:e4:30:21:d1:
                    ae:9b:67:8d:3f:eb:25:00:cc:ee:8a:5f:b1:cd:c2:
                    c6:7b:a0:48:ec:3e:da:bc:8a:50:eb:ce:7b:4d:7b:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:99:6D:B9:1B:55:06:04:FA:85:A6:2E:35:9B:0B:EB:2F:2A:81:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:24:d6:1e:90:04:60:1d:cc:f4:12:3c:bc:85:82:a0:95:50:
         68:2e:64:7b:2e:fd:7b:47:b6:9b:e7:bd:b1:ae:e5:87:67:98:
         bf:af:f5:27:9f:32:f1:d8:b3:92:54:96:56:3a:df:8f:26:00:
         bd:66:a0:ef:91:38:58:28:70:a9:fa:fd:b9:84:ff:ad:14:c9:
         25:a5:b9:42:81:f1:ab:73:72:49:33:fa:a0:fc:32:58:38:9f:
         35:28:0a:bc:ed:28:d4:0e:b7:5d:1f:f9:32:c9:12:44:7a:28:
         9b:41:f2:fe:99:be:f6:56:ee:85:04:57:c7:20:e0:ad:61:76:
         d0:c7:9d:6c:0f:e3:ed:23:e7:ca:91:06:bc:77:ad:ee:24:18:
         5c:46:34:3e:0f:00:fb:c8:01:98:c8:5e:08:6e:b2:b7:e8:72:
         f8:39:1e:e4:6f:97:66:9b:81:82:cf:77:16:10:e0:70:82:5b:
         38:e1:2f:f2:e4:eb:4b:7a:66:de:9d:9b:21:43:39:d7:22:db:
         c0:67:22:f9:21:94:a1:0c:c5:1d:9e:d9:b4:26:35:e8:75:92:
         9d:1e:3e:a0:1f:e8:46:0c:20:98:99:61:5b:a5:70:7b:87:6f:
         4f:4e:f1:0c:4c:04:19:91:5b:8f:8c:1b:8d:57:30:18:f4:e1:
         71:0c:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:54 2025 by rpki-client