Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/8280a157-b6a2-3c12-9835-cdc7ce110d6b.roa
File:                     8280a157-b6a2-3c12-9835-cdc7ce110d6b.roa (raw, json)
Hash identifier:          TMkNH9W2Zc6tvexf2UnKZYua6aUDFs6QbLN9UsaGLwk=
Subject key identifier:   AC:BA:7E:B1:EC:D1:EA:92:5E:ED:29:05:B8:51:74:06:F1:8A:44:F9
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285848292A51AAB8B1EABBA74ACD00
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/8280a157-b6a2-3c12-9835-cdc7ce110d6b.roa
Signing time:             Tue 10 Dec 2024 14:00:18 +0000
ROA not before:           Tue 10 Dec 2024 14:00:18 +0000
ROA not after:            Mon 10 Mar 2025 13:00:18 +0000
asID:                     0
IP address blocks:        169.145.144.0/24 maxlen: 24
                          169.145.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:29:2a:51:aa:b8:b1:ea:bb:a7:4a:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Dec 10 14:00:18 2024 GMT
            Not After : Mar 10 13:00:18 2025 GMT
        Subject: CN=9e3da7af-a6d2-4dd8-ac06-d8772b67ead1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:b5:7d:3a:bd:f2:f7:f7:52:9e:c8:16:75:
                    14:7d:3c:50:00:f1:2d:d5:b5:bb:6b:d9:32:c8:b3:
                    0e:21:d9:82:d0:76:51:08:52:20:34:2d:d1:3c:dd:
                    95:8b:3b:c1:cf:d5:4f:9b:dc:a5:7e:bc:ef:31:a6:
                    d2:4e:c1:d8:93:f4:9e:ce:12:fc:28:cd:ee:d9:60:
                    0c:19:a3:35:83:71:63:48:e4:2d:8d:9d:07:0f:52:
                    46:86:3d:7a:01:04:47:4f:98:81:d8:99:c6:16:5a:
                    49:a4:38:63:ff:f7:9e:5f:fd:e0:a9:bf:19:4e:6b:
                    cc:18:27:4e:35:b6:88:41:81:9b:25:66:05:b4:13:
                    b9:2d:e2:1f:a7:7a:9b:1d:b6:02:fc:94:d6:0c:6d:
                    e9:30:db:41:b2:e4:82:d5:ba:8e:b2:82:b1:88:8e:
                    2b:5e:84:c7:ef:83:c8:36:a8:8b:37:48:89:77:1d:
                    e6:b5:9a:e1:46:e2:df:6a:4e:7a:3b:76:ac:b6:ca:
                    48:00:4f:51:8c:00:85:61:51:4b:88:d4:1b:2f:03:
                    06:44:2c:07:21:98:f4:b9:82:d5:dd:48:2f:36:fb:
                    25:e9:b5:87:d1:ec:7e:62:d6:c9:84:dc:4a:0f:8b:
                    e0:86:87:3f:ef:99:c7:a9:04:ac:13:b0:68:7d:5a:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BA:7E:B1:EC:D1:EA:92:5E:ED:29:05:B8:51:74:06:F1:8A:44:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/8280a157-b6a2-3c12-9835-cdc7ce110d6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.144.0/24
                  169.145.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:8d:69:f0:9a:3e:67:18:db:dd:5c:5c:67:e4:db:b1:d4:
         64:a2:53:73:24:fd:09:58:fe:6c:95:87:c3:ab:39:00:67:f6:
         e8:8d:46:0b:75:a3:7e:f4:97:d9:b6:0e:17:6f:0e:59:62:0a:
         7c:e7:0c:20:f8:6a:3b:24:a7:6c:9e:7b:b8:73:f3:23:50:61:
         60:45:96:55:e5:bc:e4:55:f4:1a:36:f9:64:d3:5f:7d:05:ae:
         24:d2:36:73:60:01:9c:e1:55:a0:02:95:cd:6b:dc:4f:b0:01:
         af:04:0b:e0:89:ad:04:7b:95:5c:bf:2f:99:10:34:27:1f:95:
         7c:3b:7a:92:f6:6b:73:78:d4:d8:ca:83:72:db:12:76:0f:32:
         b3:79:96:b6:d7:21:24:ff:e6:06:25:1c:50:b2:93:3c:ee:0e:
         2f:7c:3a:61:7e:ad:ff:93:ef:f8:58:44:02:a0:28:8d:d4:94:
         83:99:14:64:8a:d8:f4:4f:23:25:62:00:ce:84:a5:cd:33:d3:
         fa:11:82:c8:00:10:91:15:e5:1f:e7:4a:a5:9a:ee:36:0d:a0:
         9d:d3:2a:f3:7a:3b:63:79:0c:18:ea:a4:51:6e:27:ed:3e:fc:
         72:b8:ff:6d:e8:c9:d8:18:97:c3:72:48:ec:99:1e:4d:51:49:
         56:e5:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:22 2025 by rpki-client