Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/20cc90df-180a-3a10-818a-f6d680929854.roa
File:                     20cc90df-180a-3a10-818a-f6d680929854.roa (raw, json)
Hash identifier:          1u5lD1dM0J31b0vLGxzk4LpSAQCSPCEk5tEgEni5YFY=
Subject key identifier:   71:2F:CE:C2:57:30:68:59:7C:28:9A:DB:64:AA:83:48:75:AC:74:1B
Certificate issuer:       /CN=edca2973-b815-4276-ae56-405cc9e280b5
Certificate serial:       010D0C9F43285848494575376D470ACDE2F28B60
Authority key identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/20cc90df-180a-3a10-818a-f6d680929854.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     13727
IP address blocks:        142.147.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:75:37:6d:47:0a:cd:e2:f2:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edca2973-b815-4276-ae56-405cc9e280b5
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=7aeb6c94-356c-403c-9a7a-54cea8029c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:45:a9:ec:41:a6:66:1c:fd:a3:36:15:6a:
                    91:ff:a8:a9:08:b8:a2:78:d9:6e:68:e3:2d:4f:35:
                    e8:1b:23:87:07:58:66:62:0c:74:b2:20:c1:6f:dc:
                    2f:df:ab:33:fb:cd:bf:ca:be:77:a2:06:ba:5f:e2:
                    f4:0e:9a:4b:1e:91:bf:f4:7b:12:32:32:53:6f:cd:
                    8b:26:e6:18:9a:99:62:d5:d1:f4:5c:9f:0c:c5:7f:
                    95:de:25:85:e5:0c:94:70:ce:97:87:08:3b:25:80:
                    b8:e6:f6:31:c5:6a:90:63:82:48:49:9e:cc:f7:ac:
                    13:93:ca:9b:18:e8:20:94:af:60:07:e6:95:64:a4:
                    3d:33:ca:59:e4:60:a9:14:87:6e:5a:15:a4:0d:4e:
                    47:ba:28:df:44:6a:77:9f:38:37:f9:dd:54:89:e1:
                    d0:6c:36:28:0f:83:f8:f3:78:42:ce:53:9f:89:1c:
                    2c:22:0c:b3:07:f9:95:12:66:09:c4:65:7d:c5:63:
                    ee:b3:79:89:0b:65:5e:72:83:ab:97:a5:c5:00:5e:
                    c1:75:4f:f7:ed:9e:d9:83:3b:cc:d8:ca:55:1d:2a:
                    ad:e9:72:85:35:fa:bf:dd:d4:c2:9a:95:98:11:64:
                    c9:d2:85:f4:02:e5:e0:1b:ce:87:08:2c:eb:56:b9:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2F:CE:C2:57:30:68:59:7C:28:9A:DB:64:AA:83:48:75:AC:74:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/20cc90df-180a-3a10-818a-f6d680929854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1f:7e:01:47:4e:56:93:92:18:b9:b3:f8:45:f5:0a:83:ce:
         85:c6:1c:71:06:4e:d4:50:f9:dc:73:d9:79:0b:42:65:d5:12:
         02:5f:68:49:b4:07:9d:18:58:70:a5:fc:14:72:bb:f7:df:07:
         ec:d8:bf:99:1a:76:95:bd:3b:69:9a:a5:cb:b8:43:45:ee:22:
         fe:f6:3d:74:d8:6b:da:ec:fc:86:fb:cc:47:89:a6:f9:77:df:
         a6:d4:d1:be:36:98:f8:b0:20:7a:64:47:89:46:19:77:3d:9b:
         48:61:50:ad:ad:24:3c:13:ae:1b:95:68:0a:d2:35:96:1e:e9:
         78:b2:51:17:99:cf:51:0d:35:7b:e2:1a:8b:b0:cf:8f:c5:5f:
         35:e6:41:12:45:9b:57:85:36:d8:99:3a:bf:56:30:a5:69:64:
         cb:85:29:24:a5:f6:19:1d:c3:4e:d1:ce:7c:c2:20:6c:e3:02:
         0b:da:39:d5:b9:89:65:9d:7a:3b:29:a1:46:6c:dc:a2:e4:53:
         7c:1a:d7:0e:c4:66:f6:ca:e9:20:e7:75:20:da:1b:70:58:ed:
         99:c6:88:fe:72:31:98:45:6b:9b:e1:71:6f:77:c6:78:8c:02:
         cd:b7:64:03:34:35:25:e8:78:55:05:9e:08:4b:f8:0a:66:61:
         ed:05:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:27 2025 by rpki-client