Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a2ecea7e-9099-3980-ae05-f503e823b277.roa
File:                     a2ecea7e-9099-3980-ae05-f503e823b277.roa (raw, json)
Hash identifier:          k5o9zacqgQ6JXaktdKpfUFi5qe3SVIkMnyajNxA7BQk=
Subject key identifier:   2A:13:B1:95:CF:83:2C:5B:3A:7D:D8:B9:F8:81:36:E9:0E:49:83:9A
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B50035D079A89A96F8AA500
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a2ecea7e-9099-3980-ae05-f503e823b277.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     40934
IP address blocks:        184.94.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:03:5d:07:9a:89:a9:6f:8a:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=076d87bb-d660-4247-92e2-9ed1b39881f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c2:47:73:89:cd:aa:d7:a3:20:ec:37:04:e4:
                    37:49:29:c9:6f:c6:9e:4d:b6:0c:8f:e1:30:2f:b2:
                    e9:39:7c:e4:1c:8e:e0:81:56:f3:aa:7e:57:cb:b7:
                    e7:23:a6:fe:e3:32:f7:82:0f:df:dc:44:06:cb:f0:
                    d4:11:ec:82:e7:4a:8a:a5:b8:8b:04:3b:55:9c:64:
                    f5:dd:b4:9d:3b:03:80:18:e2:e5:37:1d:f4:e6:94:
                    9a:e8:6b:62:3b:6b:7a:90:43:16:ef:99:36:de:7a:
                    df:76:67:fa:fc:ff:9b:ed:dc:b5:83:ba:de:bc:bb:
                    06:25:dc:28:22:2f:23:ae:4e:ee:9c:92:80:11:2e:
                    53:a2:53:32:4d:8a:8e:52:34:65:12:d8:a3:c1:6f:
                    1c:4a:e6:d6:ce:4c:39:d6:6f:d0:66:af:c0:5b:23:
                    68:87:da:57:8a:1a:c0:56:61:8a:01:0d:84:af:b9:
                    a7:04:b0:c7:8d:72:82:5e:c7:28:84:1b:6d:b5:f5:
                    c0:05:5f:4e:d5:d5:14:73:04:48:df:e0:b4:7f:53:
                    16:21:f3:86:41:ee:09:d1:25:87:7c:3d:07:3e:93:
                    f5:df:a2:6c:27:fe:8e:34:cb:92:78:a9:99:0e:20:
                    c1:d2:d7:b2:61:4f:e7:00:2a:bb:f6:9b:6b:e0:40:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:13:B1:95:CF:83:2C:5B:3A:7D:D8:B9:F8:81:36:E9:0E:49:83:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a2ecea7e-9099-3980-ae05-f503e823b277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:10:45:78:2a:e6:05:38:a8:44:48:04:e4:6a:4f:56:1f:
         fb:6f:72:d4:9e:70:a6:73:66:e4:d5:2e:c4:4c:f5:37:8e:95:
         e9:68:b9:d8:c0:c1:59:da:3c:d0:6c:b5:17:a0:f4:05:35:cb:
         68:e1:c4:b9:79:bd:c9:79:0f:89:a5:f3:a9:9c:9e:4e:03:58:
         7a:92:59:66:21:70:7f:aa:4e:62:7d:8e:81:69:98:76:aa:7d:
         0a:b7:4e:16:6d:d7:bf:c6:43:7b:49:89:02:ff:cd:d2:e2:cc:
         5f:80:1a:ed:bf:39:f3:2a:7a:cd:a3:d6:5b:30:23:9c:78:f0:
         77:83:ac:6d:55:e5:a5:c8:20:62:4c:d4:5a:ea:a3:02:c3:28:
         f8:7f:4f:e4:2b:7e:ee:88:ec:57:9e:0c:ce:6b:24:ef:be:3e:
         ce:42:02:64:7c:75:d7:e0:0f:1c:d9:01:df:ae:b6:db:be:3c:
         ed:1d:3e:27:d1:18:c2:d0:4a:eb:51:eb:6d:b8:60:a3:72:70:
         73:42:62:10:a1:75:cd:da:40:b1:d4:12:67:2c:eb:1f:e0:41:
         02:61:39:ea:b5:3e:e9:ff:a9:c6:de:b2:bb:5f:cd:c9:90:9a:
         0f:e7:c6:3d:fc:b6:e2:b1:c5:c9:65:cc:df:4c:28:a6:95:03:
         7e:b9:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:25:50 2025 by rpki-client