Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/d247a6c8-267e-3623-be36-ba14a3e05792.roa
File:                     d247a6c8-267e-3623-be36-ba14a3e05792.roa (raw, json)
Hash identifier:          DTHwJ5Zkg46gjhnwYAb63guLRf7QRY0iPLZ11x3vZLg=
Subject key identifier:   1F:A8:E6:04:28:BB:BB:24:64:A6:EA:DE:56:85:1B:E6:3B:DE:EE:E7
Certificate issuer:       /CN=2c730f6b-a302-4a8a-b301-bcc156169c43
Certificate serial:       010D0C9F4328584855D59F6316952D3751478F00
Authority key identifier: 51:45:1E:9B:3A:B3:29:C7:77:4A:6D:DE:F2:3E:96:71:77:AF:1E:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/d247a6c8-267e-3623-be36-ba14a3e05792.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     894
IP address blocks:        23.137.82.0/24 maxlen: 24
                          2602:fb5d::/40 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9f:63:16:95:2d:37:51:47:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c730f6b-a302-4a8a-b301-bcc156169c43
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=6b4b5bfe-778d-43e3-ba80-2abeac293866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:fa:89:4f:03:01:f7:99:e1:3c:57:31:ea:
                    5c:72:bd:1b:19:76:db:57:9b:6f:f1:7a:d8:fb:9d:
                    66:fc:f6:ca:56:70:87:8b:21:a0:3e:1e:b6:15:46:
                    66:53:8d:62:b3:f8:53:59:9f:7e:8f:a5:81:b6:a4:
                    78:95:ec:29:3e:76:8c:d6:e1:4a:d3:d3:60:92:ef:
                    b2:cb:c6:f2:9f:44:d2:97:34:2c:df:cd:5f:dd:dd:
                    b9:16:30:b2:11:19:11:51:8e:04:50:20:ea:ef:e7:
                    94:4c:7b:f6:19:32:db:2a:60:e1:b2:fc:ab:9d:5c:
                    0c:f6:92:12:ff:74:27:4a:a7:24:da:48:96:22:52:
                    58:63:89:50:16:32:09:98:32:17:61:84:ce:f5:a8:
                    66:2a:38:a0:54:b8:cc:38:35:07:80:58:a8:e3:5d:
                    2a:81:35:37:5d:5c:28:c4:ee:e6:fa:6b:53:03:94:
                    b0:10:47:9c:c4:ae:f4:a5:73:db:b3:6f:f0:d9:86:
                    1e:09:5b:ed:43:50:39:31:be:d4:0d:72:cf:04:07:
                    fe:76:1c:e2:c5:c7:52:8b:3f:d1:72:69:06:58:31:
                    5b:91:24:1d:01:68:a2:e2:4f:55:be:52:b8:a7:23:
                    96:74:66:dc:ef:1e:d3:a2:91:46:60:39:ed:65:87:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:E6:04:28:BB:BB:24:64:A6:EA:DE:56:85:1B:E6:3B:DE:EE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/d247a6c8-267e-3623-be36-ba14a3e05792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/2c730f6b-a302-4a8a-b301-bcc156169c43.crl

            X509v3 Authority Key Identifier:
                keyid:51:45:1E:9B:3A:B3:29:C7:77:4A:6D:DE:F2:3E:96:71:77:AF:1E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.82.0/24
                IPv6:
                  2602:fb5d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:63:46:29:78:16:d6:e1:2b:8e:a3:5b:69:8b:df:3f:70:61:
         e0:f7:62:bb:2d:0d:d5:3c:80:97:9f:0e:1a:60:c1:47:35:db:
         07:f2:cb:8f:78:6a:5e:83:14:ea:86:9f:af:9e:44:71:14:3f:
         50:53:50:76:4a:bf:47:35:2d:7f:06:c5:df:7b:ee:48:a7:27:
         df:8f:e0:fd:6e:6c:27:8d:d4:c9:7a:69:c4:17:8a:73:37:44:
         cd:66:9f:a2:a0:67:26:2b:91:b9:7d:04:db:1f:78:4a:e6:f4:
         b3:fb:63:d8:be:19:77:dd:08:23:47:68:99:c8:cd:1c:46:6d:
         5c:89:96:77:a0:25:ea:23:96:9f:15:e7:be:94:42:60:c2:b4:
         a7:c1:fd:72:15:e2:dc:08:3c:cc:8b:2d:fb:6e:e2:fa:28:c7:
         9a:ac:fb:fe:b0:94:ab:46:db:c5:b8:3c:c7:e8:1b:2c:0f:43:
         80:93:5c:30:14:52:3c:19:6e:84:ed:6b:2e:d5:2d:42:45:4c:
         ce:64:9d:24:2e:ff:7f:8e:06:f5:5e:43:1e:36:48:92:7f:f0:
         f3:b6:af:f1:b7:d2:db:1c:e8:c9:14:15:ee:53:8e:ce:92:cf:
         e1:0b:96:7d:c8:a9:cd:f9:32:d0:c8:84:a7:3b:e5:14:48:00:
         f0:1c:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:08:38 2025 by rpki-client