Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f1aed8d6-940e-3937-85b2-13f8369430be.roa
File:                     f1aed8d6-940e-3937-85b2-13f8369430be.roa (raw, json)
Hash identifier:          K0aQrXmgtQ9J1T+wIEntt/JaR2JgjUgpqn+8r5ff6BA=
Subject key identifier:   C5:1C:96:7F:4D:7C:A1:D8:94:D8:F3:E0:7C:33:9A:BF:E4:85:61:EB
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5001FE41B2A1484C32E49C
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f1aed8d6-940e-3937-85b2-13f8369430be.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        159.18.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:01:fe:41:b2:a1:48:4c:32:e4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=47792b8d-9c92-428c-9d0c-4af39b512e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:11:4a:bd:e2:19:54:4d:8d:49:0d:94:a4:
                    4d:cd:c0:db:9e:72:a2:3a:1a:c7:be:27:70:32:f0:
                    df:51:1b:bd:c3:0a:51:a1:87:2b:28:ad:e6:05:71:
                    46:5a:3e:a7:29:cf:8c:5d:ca:93:d8:45:39:82:4c:
                    a2:55:0c:1c:cc:5e:e1:cc:06:25:50:48:15:80:79:
                    55:ef:7c:ba:71:6b:41:d3:b0:00:e4:5c:8b:07:22:
                    c4:cb:92:e3:e1:9f:3a:57:00:e0:ec:22:52:48:7b:
                    23:cd:9b:b0:84:3c:35:a3:d1:a9:38:ef:48:55:48:
                    b9:2b:c9:15:32:ba:66:26:bc:13:81:86:a1:e3:a9:
                    0d:8d:6e:1c:38:d1:3f:89:05:77:ff:73:a1:a8:b3:
                    a0:f8:b0:98:38:8f:4c:15:cd:fd:4f:37:06:8c:c9:
                    fc:c4:1e:01:b5:8a:08:74:14:bb:b9:3b:5d:05:a3:
                    b2:ce:31:a0:48:86:af:76:52:0d:14:3e:62:7d:18:
                    85:23:90:c9:74:f6:a7:3d:52:63:aa:e7:a6:2d:06:
                    03:ee:c6:0f:c9:fd:9b:9f:3c:fb:43:28:9a:ce:9e:
                    6e:50:f4:27:88:31:4d:d7:5d:13:c7:f8:cc:c2:52:
                    f7:25:6c:91:6e:8a:22:c4:db:1b:82:ab:af:44:d9:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1C:96:7F:4D:7C:A1:D8:94:D8:F3:E0:7C:33:9A:BF:E4:85:61:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f1aed8d6-940e-3937-85b2-13f8369430be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d2:9e:04:59:07:09:7b:1a:41:48:90:94:a5:3e:a7:b3:eb:
         1e:64:ef:46:e1:fb:de:e1:20:a7:83:95:78:2f:b7:af:e6:3f:
         3d:e9:02:72:10:20:b7:35:ea:d8:6d:63:e5:53:6f:c6:bc:ff:
         e6:f4:d2:02:c9:4c:99:6c:20:c6:cd:82:44:92:71:c4:cc:03:
         10:5e:09:92:8b:bc:fe:a4:44:c1:c0:da:ae:1d:81:8a:78:1c:
         67:ba:23:c6:8b:34:0d:78:22:72:76:d9:1d:7d:8f:07:97:43:
         17:71:6a:50:ab:de:a2:45:73:d7:03:5d:49:c7:34:4e:5a:5f:
         0d:99:a7:c0:a7:20:c4:6d:ac:fa:3c:31:a2:46:c7:53:0a:bf:
         5c:31:6d:b5:57:c6:a5:67:b0:a3:d7:b1:16:60:ed:00:cc:7f:
         0a:55:df:af:e2:bd:ed:02:69:4f:7f:05:42:12:f7:bc:33:f9:
         82:3d:16:bc:b9:ea:34:e3:78:40:c3:51:62:95:1f:b4:c0:06:
         79:62:3b:dc:b8:13:8e:e4:be:91:44:57:00:a7:ef:3f:6c:1a:
         0d:13:fc:1a:b3:56:c4:eb:0e:64:ce:54:b2:49:f6:cb:32:40:
         16:39:8a:e9:5f:21:fe:6c:77:f0:37:7c:89:71:ce:bc:9d:4b:
         18:e5:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:07 2025 by rpki-client