Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa
File:                     31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa (raw, json)
Hash identifier:          ij3ejbch5R9tpf4n7+Eri3vAxZsSJwJjamnBAMIYS5w=
Subject key identifier:   0C:1F:60:A9:C3:B1:C6:97:CB:67:D4:53:4E:92:85:01:0A:13:11:31
Certificate issuer:       /CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55
Certificate serial:       010D0C9F4328584839EABF943A517CCF07944100
Authority key identifier: 3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        204.17.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bf:94:3a:51:7c:cf:07:94:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=47294f14-8179-4938-b4fc-7159f0d24de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:aa:7e:b0:80:7f:9a:36:4c:79:3a:57:9b:
                    c2:c9:37:7c:0f:9f:9f:52:a0:d7:f3:68:90:55:9b:
                    f8:42:cc:c0:95:3f:e5:ae:92:71:db:ff:e9:49:45:
                    ba:de:3a:81:30:14:97:da:63:1f:b2:f7:29:3b:a9:
                    49:05:d1:39:d0:12:e9:c9:e2:9f:60:ab:5b:68:d3:
                    90:23:f9:5c:b6:73:65:b3:05:15:da:7a:95:e1:b9:
                    0e:05:8e:a0:b8:2c:d0:34:64:82:1a:04:e3:e5:2a:
                    21:bb:fb:c1:d6:a5:e6:28:f9:3e:b5:2c:ee:d2:52:
                    6e:84:26:00:25:a8:4c:a2:de:7e:a9:8b:27:9a:38:
                    e1:0a:db:ac:86:78:bd:99:21:83:84:a9:4e:59:65:
                    95:02:99:e6:5e:f2:53:c5:09:1a:a8:96:af:18:cc:
                    a0:27:d6:a7:94:91:cf:ad:1f:76:ee:4a:f6:1a:e1:
                    2b:04:aa:f0:5c:b8:16:85:e8:1c:77:3b:e6:77:47:
                    5c:10:e5:1e:04:75:7b:31:83:56:e9:9f:ed:e7:0d:
                    2b:01:2a:f8:a7:bd:21:49:67:f7:0f:50:9e:70:bf:
                    f8:22:a7:42:47:8a:2e:1a:06:22:ef:3b:6e:b0:26:
                    bf:a5:5d:b9:68:7b:ed:cb:76:6a:8a:d6:70:99:94:
                    d1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1F:60:A9:C3:B1:C6:97:CB:67:D4:53:4E:92:85:01:0A:13:11:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.crl

            X509v3 Authority Key Identifier:
                keyid:3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.17.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0e:82:0e:a5:e9:86:ab:52:b6:43:82:7d:4c:be:f5:73:06:
         e3:58:56:9b:8e:e6:c2:a8:b5:d8:b2:ff:06:69:40:a5:b4:54:
         03:d0:be:d6:de:64:e0:b3:fe:10:d8:ad:ca:f0:5d:4d:43:4b:
         a8:6e:2c:cf:11:50:28:6c:5c:e1:60:81:22:28:be:ff:62:49:
         ca:80:b2:12:dd:10:6c:f1:97:f2:8b:b1:26:6e:47:f7:cc:fa:
         b0:a0:01:f6:96:9d:02:96:19:e1:cb:6f:51:e0:fc:32:53:7a:
         5f:23:14:96:ca:05:b2:c3:49:7a:81:c5:32:2f:94:4b:13:ba:
         1b:d8:8f:ad:c2:fe:3e:d2:de:eb:c3:55:88:06:72:62:ce:a4:
         ba:32:c3:5a:d5:c7:8c:2c:80:a1:e5:42:ec:4c:ea:60:48:16:
         4b:1c:49:af:87:90:32:da:19:e1:ca:ae:25:90:72:41:ec:a4:
         66:70:1e:02:cb:40:9b:a7:2c:91:63:67:75:b8:2b:da:5e:81:
         b1:07:cb:26:83:37:48:0a:8c:bd:72:ec:2a:01:b3:49:88:61:
         58:bc:7e:6c:97:83:80:07:2c:34:d0:8b:24:59:9d:b6:f8:29:
         26:d4:64:8f:c2:82:d2:d8:77:fc:55:f2:bb:3c:7a:a9:6b:11:
         b8:ce:92:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:46 2025 by rpki-client