Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/d1bf37a9-e0a5-3b1d-8d7e-234a254abfae.roa
File:                     d1bf37a9-e0a5-3b1d-8d7e-234a254abfae.roa (raw, json)
Hash identifier:          BR5/ejHjBXS/zKGrqctUIQNKaQwNnVF3q+02BBT0KPE=
Subject key identifier:   15:00:A0:4D:8D:17:68:15:C8:00:53:34:16:63:4E:1E:CF:E1:D8:86
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F432858481F653667F65B721BDD7E8D60
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/d1bf37a9-e0a5-3b1d-8d7e-234a254abfae.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     206051
IP address blocks:        161.195.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:36:67:f6:5b:72:1b:dd:7e:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=72a364ee-577e-400b-a847-a09a7c64414a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:18:9e:85:88:ee:04:e6:93:fe:56:6b:59:
                    71:a0:23:57:8f:89:38:ce:9e:79:65:81:fa:e2:a3:
                    f0:7d:81:c7:1f:d1:f8:1c:ba:7f:13:86:2e:ca:75:
                    45:e6:26:7b:dc:47:7a:61:82:62:da:35:b2:8d:17:
                    6d:24:9b:13:d2:ab:cd:07:5a:20:ee:57:90:d0:ba:
                    70:6c:a7:1f:b6:ca:13:6a:78:69:46:48:18:c3:11:
                    29:f6:b7:e2:ee:7d:80:88:64:22:a6:14:2f:98:15:
                    6e:73:46:a1:15:e1:e7:81:b5:92:e4:84:08:ae:7c:
                    fd:11:6b:0c:60:b2:99:2b:d3:83:e3:5e:33:28:fb:
                    49:da:7e:3b:e8:06:72:47:15:33:87:cf:6c:21:d9:
                    03:3c:31:fb:b6:4e:53:45:f0:d7:69:3e:70:be:02:
                    b4:a8:fb:05:84:ec:59:ef:64:3b:3a:02:82:12:e9:
                    11:1c:59:52:85:96:d6:5f:f1:6e:89:2d:9b:51:e7:
                    79:cb:d2:aa:09:b0:a3:46:68:bb:98:6d:b1:d8:3e:
                    93:43:25:c3:f4:f1:b5:fd:d1:33:f2:bf:e1:06:43:
                    fb:65:54:40:f8:6a:cf:7e:99:00:ad:c0:46:c2:04:
                    7f:e1:41:41:2b:e6:81:24:98:d3:36:53:e8:75:31:
                    8d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:00:A0:4D:8D:17:68:15:C8:00:53:34:16:63:4E:1E:CF:E1:D8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/d1bf37a9-e0a5-3b1d-8d7e-234a254abfae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e0:fe:a5:4a:9c:94:6b:e5:b0:68:e1:ac:1b:32:02:81:91:
         8b:28:7e:07:73:37:65:ce:a5:4b:04:21:a2:aa:fc:83:1f:a6:
         3f:00:f3:4a:24:19:8c:a4:be:32:b9:6e:e2:e4:d5:6f:42:82:
         33:23:e4:17:25:f3:56:2b:bb:b7:f8:5c:13:f4:05:4f:9e:5c:
         23:02:05:7b:14:78:df:c5:a4:51:f7:3e:73:cd:84:40:39:8c:
         52:17:e3:79:de:32:86:b4:10:37:14:72:2a:11:98:c0:2d:30:
         25:ab:3d:31:23:de:6f:2c:fd:0b:f1:ae:2b:33:75:32:4f:56:
         4f:84:a5:ce:3f:d0:ed:06:78:d0:0b:d6:7e:dd:c5:d3:ec:b1:
         a7:33:c6:ac:ff:f2:1e:ce:9f:83:9d:10:6a:b1:28:be:28:47:
         7c:6f:14:bd:b5:65:cf:a7:49:9b:de:55:c7:c2:fa:86:dc:4c:
         2e:4d:d4:c5:ca:3a:a3:05:85:23:f4:b9:d0:b6:57:62:6c:14:
         6e:e6:40:06:a7:f7:d4:0b:5a:7d:62:0c:a3:e1:3a:94:ed:f1:
         30:a9:5e:49:0d:eb:d7:64:a1:6e:54:64:c4:2e:67:04:10:b5:
         4f:48:93:59:6f:30:f1:84:9f:cb:2d:49:5c:5a:dc:c0:52:8f:
         ea:5b:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:44 2025 by rpki-client