Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa
File:                     176ba803-b4f1-3a57-804d-e734d0c025da.roa (raw, json)
Hash identifier:          LSdq9sv6BebC/Isfo5ZfoKEcFYFn6yMdOtLWSBUwHnI=
Subject key identifier:   42:18:E8:61:12:33:6A:ED:FE:EF:C6:66:FA:BD:E8:89:9B:77:51:59
Certificate issuer:       /CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
Certificate serial:       010D0C9F432858481F651C7B97AF354717087380
Authority key identifier: D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        136.175.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:1c:7b:97:af:35:47:17:08:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=b259351e-4783-4aae-aeba-7848198252df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:6c:f5:25:ff:78:21:41:76:33:18:55:45:
                    78:04:2e:97:22:15:d0:da:21:8c:93:8c:32:e0:73:
                    76:16:3e:4f:1c:df:95:71:bc:24:99:b4:94:76:02:
                    b7:fc:5d:b5:c5:d7:21:ce:02:53:10:fc:0c:3b:72:
                    a6:86:c6:5a:7c:9c:05:a2:09:2a:31:e5:88:b4:c3:
                    b4:97:d4:a1:e8:90:80:84:4a:56:a6:ec:2e:98:7e:
                    3b:98:94:1e:52:cf:8f:f0:ac:67:89:6a:0e:e3:5b:
                    f7:8f:c9:b7:0f:96:fe:df:b0:b8:74:64:4d:cc:a3:
                    36:ef:bc:cf:f5:44:5b:98:96:96:f7:d1:a9:64:a0:
                    6e:02:4b:12:49:f6:7f:70:3e:58:e7:4e:36:f0:f9:
                    ab:f6:db:d5:29:ed:3b:8d:e1:ff:9c:89:b0:79:50:
                    67:96:a2:b4:a9:45:0e:09:85:aa:7f:e9:ba:25:c1:
                    a9:c7:35:0c:00:6b:4f:6b:78:7f:04:a3:47:87:5e:
                    c3:42:32:03:e4:3b:89:e1:60:b8:c3:10:5e:59:54:
                    d8:2f:46:aa:92:30:c8:f7:b4:be:48:f3:bb:db:12:
                    55:1c:f6:55:87:30:85:df:79:c3:f2:44:1b:2e:4d:
                    14:25:2a:88:d5:ec:71:78:52:70:4d:b6:5a:37:5c:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:18:E8:61:12:33:6A:ED:FE:EF:C6:66:FA:BD:E8:89:9B:77:51:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl

            X509v3 Authority Key Identifier:
                keyid:D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0c:53:01:e6:76:0f:3b:cd:17:96:9d:04:4c:2b:2c:0c:9f:
         1f:5f:7c:52:83:19:62:21:4d:b3:16:cc:2c:89:3b:61:9b:bc:
         e8:24:76:d9:c8:0b:dd:6b:83:be:82:19:db:0a:e6:f6:92:80:
         3b:72:7a:be:db:4a:21:f1:7e:32:a5:73:6c:ce:24:2c:a8:f0:
         26:a2:eb:a9:4f:38:eb:88:5b:54:7c:a4:7e:ed:48:eb:7b:81:
         6d:f1:d9:1c:a7:d7:e9:44:ac:64:33:56:7c:60:6a:d3:bf:d6:
         b8:2e:3a:f5:98:e7:ef:81:93:b5:c8:c2:a5:ae:80:59:11:c7:
         5d:a7:97:f8:b9:a7:44:9b:54:8b:81:12:e9:97:e7:fb:6e:61:
         e4:e9:cf:30:d9:48:b0:1a:22:2a:f0:6e:36:f8:ad:8e:d4:bc:
         2d:62:c5:da:52:8b:7c:5a:78:1d:d0:d1:c2:26:ef:0d:30:95:
         e7:fa:a5:4d:3d:26:57:5d:aa:33:45:09:73:aa:a1:2b:ff:ef:
         36:56:e6:a1:f4:7a:4b:c0:88:61:d8:e8:1e:60:e9:c0:99:1a:
         ef:63:88:7f:09:e4:83:a1:55:1b:cb:ed:3e:37:b8:8f:26:5a:
         29:81:a2:ab:b3:5c:77:0c:f4:ac:54:b3:d1:be:98:f9:f1:a6:
         b7:56:7a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:18 2025 by rpki-client