Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1a492c83-14f4-3b07-909e-701e1df5e579.roa
File:                     1a492c83-14f4-3b07-909e-701e1df5e579.roa (raw, json)
Hash identifier:          ssLzBIcMj+nxA1c58lKC6NMHAmNDeRaoEojs+vtdVDk=
Subject key identifier:   8E:E4:D1:68:9C:F8:EF:8A:F7:39:5A:09:1B:C9:D2:32:00:07:91:C5
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285848617C34D625E891CD6323C950
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1a492c83-14f4-3b07-909e-701e1df5e579.roa
Signing time:             Mon 30 Dec 2024 18:10:33 +0000
ROA not before:           Mon 30 Dec 2024 18:10:33 +0000
ROA not after:            Sun 30 Mar 2025 17:10:33 +0000
asID:                     81
IP address blocks:        152.26.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:7c:34:d6:25:e8:91:cd:63:23:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Dec 30 18:10:33 2024 GMT
            Not After : Mar 30 17:10:33 2025 GMT
        Subject: CN=27806159-7dce-4dca-b715-ddbc2be17997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:ae:bc:7e:97:c1:e4:74:b7:09:a6:e1:4f:
                    8a:ae:28:b9:70:89:32:04:9c:0f:87:0b:1f:a4:62:
                    5c:85:5c:cd:54:c2:a3:1c:ca:0e:db:2d:b7:14:6b:
                    89:a6:38:d0:06:f5:cd:c0:a3:b6:a0:be:f1:ba:00:
                    0b:93:5c:06:bc:ff:43:ed:aa:a8:83:72:a1:a6:12:
                    80:8d:42:4c:15:b7:15:ea:9e:37:4a:bf:45:41:ff:
                    16:2d:64:c4:46:76:b8:13:62:b6:c4:71:64:58:2b:
                    1c:19:46:a2:17:ba:50:df:51:f4:cd:5c:be:02:50:
                    ca:84:05:e0:28:72:37:c9:bc:20:02:7c:b6:94:90:
                    75:41:09:2e:e6:7f:aa:e7:e0:77:d2:fb:c9:aa:49:
                    87:1e:fe:fc:fe:df:24:61:0f:18:84:5a:0a:a5:62:
                    f4:eb:f7:25:c5:dd:c0:0e:bf:ff:b5:d9:f4:cc:05:
                    be:9e:81:ea:21:12:ff:c2:19:c6:8a:ef:f8:d2:13:
                    bd:b7:60:b4:39:74:98:fe:0a:a5:ff:12:5f:87:fd:
                    11:f8:6a:0a:d7:cf:51:08:18:2d:ac:2c:1e:bb:ad:
                    cd:ab:b4:5a:3f:76:51:1d:3e:84:cb:63:91:dc:8e:
                    a9:19:db:05:bb:e5:46:d8:67:83:3b:82:e1:8b:4c:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E4:D1:68:9C:F8:EF:8A:F7:39:5A:09:1B:C9:D2:32:00:07:91:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1a492c83-14f4-3b07-909e-701e1df5e579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:51:08:c4:53:5d:2e:9b:76:5b:60:c2:31:d0:a1:3c:75:a5:
         3c:95:7b:9f:99:ba:e7:9c:30:39:f5:cc:d2:45:c6:d9:51:33:
         11:27:d1:89:b9:03:6e:ce:26:e0:bc:f6:5c:a4:c6:49:10:32:
         ac:26:a6:9d:88:00:f6:42:d2:ea:a9:e7:dd:a4:9b:f6:c1:1e:
         b4:7c:b5:57:f8:1a:73:e6:65:d3:de:5f:8c:e1:55:fa:3d:1e:
         c0:fc:50:b3:2d:9a:af:13:c0:9d:3d:4b:f6:3d:b3:e6:ca:1b:
         b5:b7:63:ec:36:fe:91:26:2c:fd:f6:20:13:f9:b0:19:92:49:
         9a:5d:75:73:60:0e:43:6f:6e:f0:a4:b7:cd:4b:c9:ac:aa:f7:
         30:3b:41:17:a5:40:4c:cf:96:8f:cb:9f:33:6e:9f:82:8f:c7:
         e8:13:89:d1:a4:17:08:71:d4:70:1d:82:8f:26:fe:da:9f:d7:
         a7:b1:d9:38:53:53:e8:1b:e5:62:78:f9:76:6c:87:59:05:7d:
         ae:4e:1f:ee:7e:f5:a1:0a:61:81:25:6a:dc:cc:f6:31:65:ff:
         27:bf:47:96:c6:cd:12:df:6e:fd:0d:e5:51:d0:f2:a1:13:78:
         54:a6:f7:7f:cc:53:bc:c6:5d:c9:20:42:50:61:0f:a0:aa:64:
         f7:91:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:14 2025 by rpki-client