Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/9f48706e-02a9-368e-9142-cf6229e2ad19.roa
File:                     9f48706e-02a9-368e-9142-cf6229e2ad19.roa (raw, json)
Hash identifier:          MBj9VQkTM8+grP8xtn2fwxGtOe1+Q4svww1OZzFUIEY=
Subject key identifier:   C2:F7:3A:3E:DD:61:8D:75:5B:D9:85:23:27:E1:FE:E1:2E:7F:80:C4
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F43285847FDE4DB34B93A82EF3F7DFD80
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/9f48706e-02a9-368e-9142-cf6229e2ad19.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     19901
IP address blocks:        143.103.192.0/20 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:db:34:b9:3a:82:ef:3f:7d:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=dacf94a6-368f-4c02-8d6f-1756a31dea01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:5a:ef:a6:32:95:f6:a9:96:17:10:01:7f:
                    b4:c8:d1:e8:9b:f2:8f:77:28:b9:d3:66:38:90:3b:
                    df:aa:4f:c0:9d:78:aa:38:1f:d8:8b:cc:3a:fa:36:
                    57:6a:c4:ed:d6:3b:82:63:40:4c:0a:d5:2b:e1:96:
                    83:00:d4:39:f3:f6:8e:14:f2:dd:93:83:d8:01:b2:
                    10:de:09:d1:3c:d7:f6:5d:be:06:bb:28:02:a1:88:
                    58:be:15:4c:16:ae:ae:b3:6c:9f:1c:e4:7c:49:28:
                    28:1e:0a:29:49:99:17:5d:34:3e:15:31:92:78:b4:
                    10:d3:21:d8:8a:da:c4:7a:82:13:ab:46:55:a9:2f:
                    ee:41:ae:c8:0a:d3:80:a7:ad:bf:bc:01:06:e3:e0:
                    8b:6d:7b:b9:83:07:11:0d:4b:42:49:2c:80:ce:78:
                    28:68:1d:29:83:7e:a3:fd:08:84:f9:a0:66:f0:5c:
                    8c:cd:1d:98:3d:84:8e:d2:39:06:17:7c:1e:15:df:
                    b5:97:90:5e:e5:79:26:c8:8b:78:e2:58:2e:c0:8b:
                    18:f1:93:e8:75:2e:3b:85:3b:bd:94:80:4c:26:97:
                    fd:93:c7:a9:3a:41:17:d7:95:2c:b6:e6:04:7e:30:
                    1e:12:5e:ab:a7:bb:e3:ff:3c:ba:79:6c:d7:b6:53:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F7:3A:3E:DD:61:8D:75:5B:D9:85:23:27:E1:FE:E1:2E:7F:80:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/9f48706e-02a9-368e-9142-cf6229e2ad19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:22:a5:a9:35:49:b7:b0:d6:57:52:8c:0a:b7:72:aa:cc:d6:
         b6:6f:f9:86:45:22:a7:e5:e5:dd:71:35:01:00:17:15:ae:be:
         38:2c:01:39:5b:25:9e:a2:e9:37:cb:d4:7f:99:7e:32:4c:d4:
         52:ba:14:f0:34:0d:fb:75:2c:25:38:07:51:97:ef:aa:dd:90:
         be:55:23:d1:8e:40:dc:10:c5:34:fb:3a:ef:2f:9e:6d:b1:c2:
         bf:fd:c6:9a:f6:52:59:9b:ee:f7:ec:b7:ca:9b:02:80:6e:b1:
         71:1f:17:51:2a:36:86:44:b7:19:9d:00:7b:29:62:38:a0:cc:
         13:08:13:ca:7e:75:a5:69:57:74:c0:9e:66:d7:1a:22:09:25:
         71:ca:86:93:17:25:48:75:b2:96:b4:28:17:0b:9a:46:2b:cc:
         59:47:52:21:ad:5d:04:28:f4:ee:e7:9c:81:df:58:9c:9a:b5:
         df:4d:5c:08:ab:94:a7:a9:1f:d2:8d:5f:de:fa:31:2e:cf:f0:
         2c:72:35:f7:09:94:8e:bd:7b:67:b2:7b:95:2e:1e:cd:db:45:
         41:3d:4a:e3:94:b8:47:c8:fb:b9:b3:45:3f:4d:b2:f3:3b:d5:
         f8:e0:e9:09:24:e2:83:ce:29:fe:f2:e8:e4:51:c9:b7:8b:1e:
         78:4d:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:26 2025 by rpki-client