Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a562c147-51ec-3fc7-af8f-0e119738970b.roa
File:                     a562c147-51ec-3fc7-af8f-0e119738970b.roa (raw, json)
Hash identifier:          HOWMwqNpmB4dahGXF5eEQdyZJLkQkYhDYu4noXIz1NM=
Subject key identifier:   0F:A9:A2:46:67:29:14:E5:CD:40:B4:C2:6E:A6:39:3B:00:87:67:AA
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584812D53D5951DA924A72CFFC80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a562c147-51ec-3fc7-af8f-0e119738970b.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     7767
IP address blocks:        64.124.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:3d:59:51:da:92:4a:72:cf:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=b5c17fc9-1843-459f-a3ac-8a333039be62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:a4:ef:80:8c:5c:28:31:67:3b:9d:f9:9e:
                    5b:06:17:c3:06:e7:fc:ce:83:47:71:6a:c0:96:da:
                    30:7f:db:c5:cb:8b:3b:c6:0c:ca:58:ae:82:b2:06:
                    be:b1:c3:ff:8c:03:3d:4b:0a:60:96:af:43:ec:f3:
                    e2:b6:00:e5:0c:7b:ba:b4:e2:60:48:d6:ba:a2:3d:
                    1d:b8:09:c9:32:40:62:13:58:b8:a5:90:4d:e9:e5:
                    a3:2f:a0:a1:aa:66:4d:11:e6:31:24:95:92:89:30:
                    8f:ac:a5:55:37:dc:0b:fd:3b:0d:2f:a4:bc:a4:72:
                    a7:94:0e:96:06:6a:65:45:87:46:80:e6:46:b3:6d:
                    02:45:ca:87:0a:4f:aa:d5:28:dd:51:a5:9f:33:6c:
                    6d:ef:a0:d9:3f:12:da:5e:5a:be:b4:3c:ae:07:d2:
                    5b:c4:1e:e7:91:d2:3a:7c:a3:50:84:e6:20:92:93:
                    96:02:98:03:d0:fa:7c:b8:27:e3:3e:c4:52:7d:e4:
                    54:f6:bb:d2:46:a4:49:e8:0d:80:41:87:28:3c:6e:
                    fa:91:e1:1c:4f:af:63:9f:5d:90:b1:24:cb:29:d7:
                    5c:e7:8b:bf:0a:8a:41:a3:ab:21:fb:29:ff:dd:4c:
                    95:79:e0:76:ae:b9:a9:1a:3a:80:c1:8a:fb:69:c5:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A9:A2:46:67:29:14:E5:CD:40:B4:C2:6E:A6:39:3B:00:87:67:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a562c147-51ec-3fc7-af8f-0e119738970b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:31:2e:ed:dd:e3:ff:bd:83:d7:f6:a4:72:0f:7a:f5:58:b9:
         61:09:33:bb:2e:8c:3f:c1:ce:ca:d6:85:44:7a:1a:e8:6c:e3:
         0d:db:e5:0c:9e:b8:33:11:ef:8f:ae:91:59:b4:7d:11:d4:b4:
         dd:66:ff:ba:f3:19:06:19:ab:82:90:43:78:5a:00:e0:4d:86:
         54:d8:ef:89:c7:4e:88:8f:50:1d:8b:a2:e0:b3:15:55:ad:bf:
         16:e7:cc:5f:72:5f:e8:19:0b:f2:b8:67:3b:bf:55:e8:d1:8e:
         42:e5:48:1c:80:c5:db:ab:fb:6d:34:fb:29:0b:e4:61:ac:4c:
         aa:e5:65:53:5e:3f:3b:53:4a:8e:69:38:c8:d9:9a:df:7c:eb:
         02:6a:f7:88:4b:47:12:94:5d:58:b5:3e:fe:85:b7:80:0f:36:
         12:b7:38:bd:14:a8:23:ab:8f:a6:90:dd:96:97:b9:c6:56:97:
         f2:3a:b3:8b:76:41:b3:45:00:7a:ee:7a:bb:e2:70:88:24:90:
         41:89:30:e6:7d:18:37:3c:e1:98:97:12:c7:d7:f2:0b:7b:35:
         3d:36:b3:cb:95:ee:1f:60:05:b4:f2:9b:cc:2d:e9:15:9d:5c:
         be:b7:92:14:14:79:5e:91:78:a2:fd:0d:81:c6:20:21:db:ed:
         33:5a:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:23:02 2025 by rpki-client