Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/efa07b76-a425-35d5-bbc5-a1f6963a4baa.roa
File:                     efa07b76-a425-35d5-bbc5-a1f6963a4baa.roa (raw, json)
Hash identifier:          U4pl4O4+wxAlsY8RJ6VTq9NJb7T069uG4dMoGDmIUtQ=
Subject key identifier:   1E:A3:5E:AE:85:6D:59:04:64:A4:B8:21:37:0F:AF:B8:83:2B:BD:CF
Certificate issuer:       /CN=10f98d2b-74bc-4c35-b3c4-6890c248ed4b
Certificate serial:       010D0C9F432858482BF55C2B7FFAC307E3BC8380
Authority key identifier: 0F:70:4F:1D:6B:A6:7F:86:97:8E:0D:57:46:A5:13:CF:B7:20:5F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/efa07b76-a425-35d5-bbc5-a1f6963a4baa.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     401131
IP address blocks:        23.183.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:5c:2b:7f:fa:c3:07:e3:bc:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f98d2b-74bc-4c35-b3c4-6890c248ed4b
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=43f137d0-acb2-4163-9c94-77ad7694b5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:ad:ac:13:64:7c:7a:c7:97:37:6a:28:4f:
                    28:a5:12:3b:fe:19:0a:68:be:35:b0:f9:4b:c4:bf:
                    5a:19:16:91:13:ab:e0:ae:e4:fc:66:5c:59:99:c3:
                    ff:b7:eb:bc:92:f5:1c:4d:89:cc:3a:a1:6d:73:4a:
                    3a:4b:29:45:02:eb:91:e9:3a:19:4c:0b:81:0a:59:
                    a1:75:6f:be:5a:8b:c4:1e:1a:d4:d1:cf:a7:92:bf:
                    34:d8:4a:28:09:a8:4d:f6:0c:5c:35:2c:98:b8:3b:
                    39:97:34:ec:0a:3f:c9:f9:d4:e0:b6:ac:0e:f9:de:
                    e6:74:e7:0b:7f:06:dd:6c:bb:e6:e0:82:de:42:29:
                    37:3e:f0:bc:e0:68:13:13:ef:95:2c:25:64:5b:6c:
                    38:79:01:f2:14:99:df:15:47:d0:19:ee:07:d9:f2:
                    6b:4f:75:c0:c2:9f:17:40:4e:bc:07:1a:48:9e:86:
                    07:51:39:00:b8:b1:ff:63:80:c8:06:03:4a:d0:3d:
                    ce:d8:16:90:1e:15:32:46:70:e8:9a:fa:36:82:fd:
                    86:e2:3a:86:5c:42:a0:ad:a3:bc:fe:11:a4:67:b5:
                    5d:48:c9:cc:d8:c8:fb:de:f8:1e:5c:99:87:63:00:
                    07:da:49:29:7d:06:75:60:a6:74:54:42:39:9e:75:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A3:5E:AE:85:6D:59:04:64:A4:B8:21:37:0F:AF:B8:83:2B:BD:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/efa07b76-a425-35d5-bbc5-a1f6963a4baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.crl

            X509v3 Authority Key Identifier:
                keyid:0F:70:4F:1D:6B:A6:7F:86:97:8E:0D:57:46:A5:13:CF:B7:20:5F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:fe:dc:c3:ec:a2:64:61:98:ad:0e:1d:09:b2:c6:ad:8a:a9:
         aa:18:a8:5c:e2:4d:bf:50:f7:b4:46:a2:21:22:8b:9f:4f:f0:
         a9:ae:30:a1:2f:aa:c9:c1:17:54:25:05:e8:7f:53:c3:90:f1:
         65:45:61:8e:b9:ad:e2:01:32:ea:d8:ef:63:af:13:34:b6:a2:
         78:bc:c0:10:56:ae:50:73:d1:14:a3:35:3e:02:f7:c8:46:04:
         99:61:26:bc:4b:68:93:a4:53:a3:77:a6:20:6a:20:b9:38:9e:
         56:47:c5:21:eb:7f:be:25:ff:23:57:6e:af:c5:1a:3b:07:9b:
         e5:9c:35:e6:5b:8b:a1:79:ef:59:11:93:39:62:51:ff:9b:12:
         03:9f:b2:c2:ea:94:ec:31:a1:2f:4c:37:20:69:a3:81:e9:29:
         c3:fc:21:a3:e2:65:5e:25:b1:a8:99:93:6b:5d:b6:fa:97:38:
         f8:4e:73:0a:95:49:e3:62:ef:9e:bd:81:26:20:87:01:d2:f8:
         a0:cc:c9:4a:8e:d7:a8:58:a2:4a:97:ce:47:33:f7:dc:68:b4:
         49:02:bc:70:00:2b:f2:d9:c5:99:f3:4a:6b:5f:18:03:ae:c2:
         7b:5c:8f:eb:44:c7:1e:3f:36:40:0a:8e:9f:f9:a0:d4:7a:fa:
         75:d2:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:00:39 2025 by rpki-client