Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9e193de8-3748-3cc2-b43c-a90939a208c1.roa
File:                     9e193de8-3748-3cc2-b43c-a90939a208c1.roa (raw, json)
Hash identifier:          Q4QosVlJIJ3AVbtys+MQ2Bejacf6NmchJVY2fqEkKAo=
Subject key identifier:   23:C3:C5:6B:73:5A:5F:DB:16:3A:41:DF:0C:A4:93:10:B3:CA:62:FF
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584882809961460B2AAACA6B0F80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9e193de8-3748-3cc2-b43c-a90939a208c1.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     12083
IP address blocks:        24.35.28.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:99:61:46:0b:2a:aa:ca:6b:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=d55c62fc-e151-400b-ac55-a5dccf2861eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ac:89:b3:5f:5a:77:44:c3:66:86:7b:eb:24:
                    1c:6c:65:01:0c:35:e5:9e:62:39:e1:d8:72:ed:2a:
                    19:33:1b:d5:2f:cb:a4:f1:d2:b0:58:a4:48:e3:26:
                    50:ec:39:ad:58:3b:fd:15:ec:2b:8b:74:a1:01:3d:
                    83:70:fb:88:65:62:f9:13:4c:dc:8d:2a:9b:3d:f1:
                    24:81:68:b0:e1:63:1f:c0:7b:75:a9:13:c9:b0:f3:
                    9d:8f:43:bd:4a:b9:0d:8b:f5:54:74:b7:20:8d:70:
                    04:60:4a:95:61:d1:6f:eb:59:ae:96:0c:52:ac:98:
                    bf:3c:4d:d7:c4:0d:12:2c:a1:25:71:03:52:b4:47:
                    34:d4:d8:98:8f:89:ad:21:b4:d5:aa:ce:a0:32:74:
                    44:63:8b:ef:ed:e2:b0:37:d0:fa:4a:f6:9a:24:78:
                    15:c7:8a:71:f5:1c:d9:54:55:19:b7:2b:31:d0:d8:
                    45:57:39:81:ad:8a:15:30:d5:4a:c6:83:b8:33:95:
                    b6:41:fa:35:50:ba:a9:42:bf:45:46:b8:3a:b0:4d:
                    76:2a:4b:56:a9:5d:4a:53:cd:37:29:18:a9:3f:f3:
                    f1:8d:ce:d4:3f:25:0c:da:e8:a1:70:06:0c:2f:e6:
                    d2:67:b9:0b:12:c9:58:c0:8c:f3:e0:55:e1:12:00:
                    90:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C3:C5:6B:73:5A:5F:DB:16:3A:41:DF:0C:A4:93:10:B3:CA:62:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9e193de8-3748-3cc2-b43c-a90939a208c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.35.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4a:36:60:4a:c5:0f:11:e8:5e:57:86:03:73:c6:ce:0b:12:
         99:47:36:de:82:60:9c:d8:25:21:78:b6:3b:88:83:2b:26:0d:
         3e:ce:61:df:41:e7:be:3d:da:cd:1c:95:17:0d:3f:63:05:6b:
         cf:89:ed:f8:21:20:3c:5f:8a:40:0b:5c:f4:3b:e2:ba:d5:f8:
         f3:8e:6a:64:d0:8d:ab:8b:0b:82:4f:89:61:a2:67:3f:78:01:
         e8:f2:4c:34:af:b5:bf:3e:f3:4e:68:20:e7:f4:d5:57:70:5d:
         6b:38:14:5a:63:df:c4:22:ac:3f:1b:78:13:4a:71:1e:91:a0:
         35:02:ad:e4:28:15:e4:c4:66:4e:07:e0:f9:f4:d6:b5:f3:63:
         0e:88:8b:2d:71:a2:9e:76:9f:2e:7c:ac:e5:5c:ad:d6:63:d2:
         07:bd:c4:e1:3f:b9:d6:7e:e5:0c:b0:4c:e6:ee:17:01:58:74:
         5c:50:25:36:ea:03:a8:29:37:b4:86:3d:7f:2c:22:8d:1d:c4:
         7b:0a:5a:09:60:a1:02:3a:e1:c1:34:8c:a5:c9:5e:7e:65:72:
         f9:9e:c6:37:42:7d:19:80:81:c0:98:75:ef:dd:23:99:f8:e8:
         f8:14:74:25:bb:92:d5:8f:ca:cc:7d:d9:cb:b9:bb:46:4b:b9:
         f4:6f:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:54:37 2025 by rpki-client