Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa
File:                     829029bf-93c1-3123-a84b-0e8364d0d0e8.roa (raw, json)
Hash identifier:          IcuznJxVSwTyeWwTf8KYnxOVpZ3iW9XNei8iOUgX+T0=
Subject key identifier:   0E:A7:35:4D:43:E1:16:11:3A:BF:10:0B:61:BC:C5:C2:1E:11:FB:56
Certificate issuer:       /CN=dec85453-756b-41c4-9e89-03593a6d3f56
Certificate serial:       010D0C9F4328584855D59C310C55B4F141A73980
Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     200510
IP address blocks:        23.144.152.0/24 maxlen: 24
                          2602:2f2::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9c:31:0c:55:b4:f1:41:a7:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=8d810d27-b09f-428a-ad2b-85e50e119bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:b6:74:1a:a3:71:40:21:19:8a:c1:58:c8:
                    89:67:6e:df:48:d4:ee:ab:72:12:da:1f:f6:7e:8b:
                    22:83:e3:6f:da:3e:ac:1b:90:a3:8e:7c:05:db:d1:
                    d2:3b:d5:e5:d3:e4:d6:88:ce:68:d0:3b:13:d0:80:
                    c1:e5:29:54:f2:ab:29:ee:fc:17:7b:55:8e:0e:ba:
                    bb:b4:31:55:2a:3a:0f:05:50:c5:01:25:87:3e:6f:
                    c4:88:31:d9:b9:68:b2:a7:c6:22:19:f4:ce:6f:80:
                    0f:0c:ce:e1:03:1e:c3:14:fb:4e:c6:74:9e:27:5d:
                    75:b9:31:c7:80:23:94:d5:72:ca:f8:c8:c9:e6:1b:
                    2a:23:48:f8:66:73:f7:07:f2:bd:a6:bd:8e:c2:23:
                    2b:3d:7a:8b:bc:30:52:53:f7:7d:3b:ae:e7:22:9b:
                    7b:97:dc:38:6f:f0:f1:bb:fd:03:7f:bf:47:48:4b:
                    ad:21:55:69:15:bd:7e:28:9a:bb:d3:4f:d1:9b:4d:
                    bc:6b:fb:fe:69:60:2f:1d:ef:5c:6f:88:c6:a9:c8:
                    e3:f8:c1:09:65:bd:64:6d:6e:4a:66:6b:de:e0:f3:
                    52:38:34:70:42:f6:96:e3:d7:eb:f0:80:80:4c:aa:
                    64:35:b8:fe:0a:c0:74:82:eb:8b:3f:39:97:73:58:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A7:35:4D:43:E1:16:11:3A:BF:10:0B:61:BC:C5:C2:1E:11:FB:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl

            X509v3 Authority Key Identifier:
                keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.152.0/24
                IPv6:
                  2602:2f2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:d0:bc:b9:1f:26:49:80:74:e5:7c:4b:52:44:24:bb:6c:
         dc:00:e3:44:7b:d9:62:74:ae:93:c2:54:e5:99:16:3f:07:69:
         09:75:1f:c0:5b:85:09:62:24:87:b0:77:9a:2a:1d:1e:9f:dc:
         d0:eb:9a:1d:66:c1:7a:0b:4e:65:dd:ee:55:d2:e1:91:1d:1c:
         d6:a5:62:08:63:a8:a5:42:99:79:6a:cc:21:15:54:ec:d9:0f:
         7f:48:59:88:a6:49:49:4d:50:6b:9e:73:9a:ae:ae:76:c2:f7:
         1b:e7:fc:ba:e1:1c:5f:29:3d:70:fc:2c:78:68:79:6c:cb:48:
         7b:7a:fb:f7:76:39:47:b9:33:6d:35:73:4b:f8:88:6b:dc:5e:
         57:15:6c:9e:f6:71:7c:55:1d:e1:ca:d7:52:c7:3f:a2:57:20:
         1e:71:75:4f:06:a3:b3:73:68:c0:6e:1e:a3:0c:32:2d:78:fc:
         48:5b:dc:9a:d2:85:f5:14:ee:ef:9c:df:f2:ad:d1:3b:8f:35:
         0b:81:94:08:96:39:0c:30:66:91:3d:ed:4a:9f:f9:1a:a9:4d:
         b4:1b:18:38:dc:84:ce:f4:25:50:9f:63:a1:59:e5:4d:73:d2:
         de:15:ce:49:cd:64:5b:7b:e2:cc:f6:50:8b:84:3e:db:c9:72:
         ed:ba:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:53:36 2025 by rpki-client