Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa
File:                     38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa (raw, json)
Hash identifier:          s1uu4FFOI5ksvs2TwjzJk670etcYijX+gogW1nUqhrw=
Subject key identifier:   FA:AA:4B:B6:DA:AB:9C:02:D3:C5:21:5B:A3:5D:00:2D:9F:80:01:39
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F43285848573AD4E132C0CD233D6B5DC0
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        192.103.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:d4:e1:32:c0:cd:23:3d:6b:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=81448f8d-acd5-44a4-9fa0-481c8b778796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:3d:99:e7:b4:3f:0d:b8:63:1a:f5:f9:5f:
                    cc:c2:d1:e5:81:f6:d2:b1:39:9b:c5:5a:84:8e:44:
                    a9:e1:2b:6d:df:de:34:b6:2c:c2:15:9a:7f:ff:1c:
                    64:2a:8e:9f:83:88:b8:4c:88:64:5d:e0:48:fe:0b:
                    a3:33:2d:a6:1a:35:1b:e3:6c:87:ba:3b:70:fa:5f:
                    dd:f5:eb:fa:94:25:76:1a:ba:14:16:c1:c9:2a:1d:
                    43:d0:55:c0:da:2f:d0:68:14:22:fb:54:4c:ab:16:
                    84:fa:19:b5:d8:ae:dc:d3:07:d5:be:1f:d3:66:c1:
                    10:fc:75:ae:41:4e:1f:ed:ca:ae:95:00:19:38:98:
                    2c:93:84:ed:08:7d:13:bf:9d:c0:87:6b:3a:2e:98:
                    0c:5a:fb:4e:2c:4f:f7:54:39:3f:95:62:72:06:c8:
                    8d:3a:ab:01:78:9f:c1:2c:7d:1e:9a:c3:bc:6d:f9:
                    30:b5:0e:2f:02:f4:db:c5:c4:73:ce:02:f5:e0:a3:
                    89:a0:f3:e1:a2:6e:ae:61:7a:85:1f:bc:aa:80:03:
                    85:bd:22:b5:c7:2a:ca:5c:fd:7b:80:2f:6b:ff:56:
                    ee:a5:7a:35:11:b3:a7:54:4b:38:ed:47:65:d5:41:
                    c6:d6:b9:56:97:7d:03:9b:0c:00:a2:42:e1:98:07:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:4B:B6:DA:AB:9C:02:D3:C5:21:5B:A3:5D:00:2D:9F:80:01:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:21:ba:df:fc:d9:47:79:ee:fa:68:f6:6f:b9:29:59:4f:a8:
         73:2a:8c:bb:b5:70:1a:99:a8:d3:86:a6:ce:d4:44:7e:f0:9d:
         b0:a5:3c:08:c0:46:f9:70:4a:45:64:ca:a0:14:3d:eb:eb:4a:
         16:c9:81:35:32:23:5a:c0:fb:be:b0:7b:35:a6:50:09:b6:20:
         97:fc:8c:bd:54:8e:3e:44:09:2e:5e:6c:a6:c3:68:b7:91:76:
         07:95:f5:4a:ad:ef:df:54:e2:b5:1c:1e:93:8d:e4:4d:f6:63:
         52:75:2e:fa:14:9d:f4:c0:16:3c:e7:83:a1:00:3c:74:c3:24:
         f8:01:a3:f4:42:cd:ac:87:fd:ba:6b:5e:52:a0:8c:76:59:f0:
         2c:a9:e3:e5:36:fd:2d:89:06:de:62:9a:1b:14:65:e6:2f:f6:
         79:f0:4e:ff:f7:28:ac:18:69:be:ad:f5:ec:67:4e:7a:1d:89:
         cd:99:24:52:1c:8b:e2:14:db:29:70:0c:a9:b1:65:53:2e:d4:
         59:8b:34:0b:7f:29:00:f5:50:44:1c:c6:5f:29:03:ea:32:43:
         97:d3:69:c6:37:ae:8f:49:52:dc:cb:f9:fc:15:97:69:ea:c7:
         0e:80:8f:90:60:7e:e6:33:1d:9c:9a:68:12:c4:8d:8d:32:95:
         9b:41:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:59 2025 by rpki-client