Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e0485bf3-6b5d-3cf6-a7fa-863378649b27.roa
File:                     e0485bf3-6b5d-3cf6-a7fa-863378649b27.roa (raw, json)
Hash identifier:          POfIOZsTXEHIRlP79POYYW5JMSLfIvGzpkcnBnx/AEY=
Subject key identifier:   00:09:05:54:6E:55:76:B4:04:90:75:46:A2:12:25:F9:60:B4:48:EF
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858481C9A75551D3ACE76E29A7080
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e0485bf3-6b5d-3cf6-a7fa-863378649b27.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     53508
IP address blocks:        24.89.62.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:75:55:1d:3a:ce:76:e2:9a:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=83fc2001-88e2-4968-af47-782c58ffa173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:a6:9a:83:97:c5:b6:7c:2f:22:ab:ff:f4:
                    d1:21:12:6c:13:98:eb:cb:42:80:17:97:f9:c3:87:
                    d7:cc:f4:14:15:e6:79:1a:7b:42:b7:e9:08:3f:74:
                    46:f9:4f:c2:3d:ec:ac:a0:91:09:51:3e:e5:1d:9e:
                    99:f9:91:05:91:67:7b:d2:f3:6d:18:1c:13:1c:44:
                    09:1a:3f:29:1c:c7:64:90:9e:a9:fe:0f:7c:d0:21:
                    56:ab:ad:74:f0:21:fa:5a:38:9b:ca:dc:94:b3:a3:
                    fc:31:f4:82:fd:03:a6:ae:0c:aa:ea:b1:54:50:37:
                    98:fe:59:6d:35:eb:ad:2f:6e:4e:3d:f6:1f:28:47:
                    05:f6:5f:0a:28:b2:09:67:5c:a7:ec:c1:50:b5:04:
                    40:d7:69:d4:9f:71:56:ca:6d:7b:fb:e7:ab:f6:35:
                    68:2a:98:e3:47:df:48:6e:6f:d7:9e:6c:2a:cc:80:
                    b1:e4:6b:01:8e:f6:a2:98:93:12:b5:9b:a5:26:4e:
                    24:27:52:9c:20:b0:7e:8c:95:67:fd:81:8e:34:75:
                    13:94:4c:41:45:9a:ec:31:af:59:b6:d7:b3:30:d9:
                    44:73:1b:ee:31:83:98:09:3c:94:66:56:d8:90:f1:
                    a1:65:ca:3a:2b:40:49:64:86:b3:c1:46:aa:00:01:
                    1d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:09:05:54:6E:55:76:B4:04:90:75:46:A2:12:25:F9:60:B4:48:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e0485bf3-6b5d-3cf6-a7fa-863378649b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:86:d6:df:ce:37:d8:78:1d:fe:37:a0:cc:cf:d4:d8:7c:9f:
         01:0a:4d:02:ae:f4:5d:d2:29:07:fc:c8:c6:26:0a:79:76:bb:
         16:c6:c1:f7:9d:6b:b8:22:9e:4e:3c:27:a5:a2:42:04:1b:18:
         07:f9:99:96:42:bd:d6:e3:c2:17:12:33:a3:98:b5:45:b1:4b:
         0b:ef:ff:4b:81:a9:30:fd:31:66:8e:d1:a5:53:b8:31:81:7a:
         e8:13:22:c0:06:54:03:9d:46:e8:1f:42:77:ea:11:f4:26:03:
         fd:27:65:bf:90:d1:3a:9e:de:5b:de:e0:e3:be:b0:0e:3c:fe:
         1f:92:d7:c9:ee:d0:28:2e:96:71:e5:e9:1c:63:d3:4b:8a:d6:
         d5:af:22:51:be:c8:69:f0:c7:5f:31:8b:47:2a:78:c5:25:1e:
         a8:0e:72:26:b4:de:90:d5:88:11:cf:1f:00:e4:e1:61:98:db:
         11:48:48:c9:21:e3:98:72:3f:8a:b4:ab:ad:71:d8:12:44:60:
         11:10:56:f0:44:b1:eb:7a:b5:2c:ef:2c:29:20:36:7d:ad:5e:
         98:8d:8e:cf:05:be:51:03:7f:ba:28:46:fa:5e:3d:73:9a:23:
         48:c0:93:d6:9e:1c:9a:75:f0:c5:a9:51:ab:77:19:54:b9:d3:
         ca:d6:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:56 2025 by rpki-client