Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/7bb970e3-1f2c-3c28-87bb-b019061a026e.roa
File:                     7bb970e3-1f2c-3c28-87bb-b019061a026e.roa (raw, json)
Hash identifier:          gh4CCAwsou7SOHuv700hb66UmMd29aTusQ9rEplRZLs=
Subject key identifier:   B3:14:47:FE:46:DE:E8:89:A0:83:9E:1E:86:9F:8F:6B:F4:C1:4B:1C
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F432858487A207154ED5B40B6DE06DA00
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/7bb970e3-1f2c-3c28-87bb-b019061a026e.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     9084
IP address blocks:        154.1.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:71:54:ed:5b:40:b6:de:06:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=d9b04c10-afaa-44e4-8d15-c6d17c54c6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:10:57:5f:58:43:ea:1c:61:2f:dd:a5:ef:
                    7a:f1:50:68:b6:02:77:a4:13:73:36:fe:57:27:4f:
                    68:8a:7b:28:31:58:e9:59:e5:5f:02:8b:cd:0c:51:
                    04:44:26:fb:05:41:af:bc:1a:da:4b:7c:45:b0:f4:
                    c3:77:e7:09:84:3b:38:ef:af:66:52:6b:6e:25:2e:
                    ab:bf:b8:64:6f:56:8d:74:13:d3:fe:a3:79:a2:fc:
                    22:e7:99:af:3f:8f:cc:b3:a2:a6:cd:75:43:38:a8:
                    96:cb:91:7f:53:7d:b8:9f:4d:d9:7f:39:82:70:32:
                    ff:2e:45:2e:76:49:5c:ac:a7:ea:44:5d:40:b1:e9:
                    79:87:bb:b1:17:61:96:00:3f:b2:84:39:2f:ea:17:
                    ad:6c:b4:d4:f5:0c:d8:6f:46:bf:8b:ff:91:87:26:
                    03:b5:4a:99:39:f4:be:74:38:9a:2d:2e:7a:3e:54:
                    7c:18:4e:db:46:9d:83:61:b6:15:c6:5a:96:6f:59:
                    91:fe:9b:50:c1:34:2b:d1:e8:37:f1:66:c1:e0:15:
                    20:77:2f:70:29:a8:f2:02:47:7c:12:5f:21:f0:20:
                    d1:d9:88:68:f8:3c:a2:a6:e0:2f:f1:02:40:63:56:
                    7a:18:7a:cc:ed:fc:5a:93:f7:1b:4b:6d:a6:78:31:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:14:47:FE:46:DE:E8:89:A0:83:9E:1E:86:9F:8F:6B:F4:C1:4B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/7bb970e3-1f2c-3c28-87bb-b019061a026e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.1.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f7:91:eb:12:04:52:a7:7f:68:e2:08:09:f7:6f:84:e9:a4:
         57:6e:b0:fb:57:0e:87:36:a4:f5:80:ef:62:e3:ef:db:2a:0c:
         37:f5:b3:c5:ee:ad:25:4a:4f:8d:41:35:81:d5:1d:e8:ff:50:
         ad:8a:5d:d3:f5:03:b9:53:33:76:38:67:f1:d1:6d:ca:60:30:
         6a:7a:9c:6f:74:e6:47:8c:ae:29:ec:50:f6:29:09:2f:a6:a6:
         d7:b6:96:90:8e:76:14:45:83:0d:78:a2:84:41:40:64:be:98:
         b9:52:36:a3:4a:e2:cb:2a:97:2c:e0:7b:03:36:97:37:f3:9e:
         f2:af:01:29:71:4f:22:9f:b7:3a:c4:c5:1a:66:8b:18:3a:89:
         d9:65:12:06:e2:05:7c:30:4e:aa:14:f9:4a:68:f9:b4:e5:c2:
         c5:4b:09:2e:66:32:0f:a8:64:e1:23:d3:b7:f3:59:e6:a7:b3:
         15:7b:5e:2e:6b:30:29:67:b6:b5:5e:ef:b5:a8:59:11:a0:d3:
         f2:6f:b4:d5:4c:0b:27:2a:6c:a7:8b:fd:83:e9:32:2f:de:14:
         f9:80:8a:6e:f4:ae:db:e4:64:c7:11:d7:a1:7f:27:12:53:1a:
         43:00:64:80:a9:87:13:d2:6f:b5:ce:2a:b4:18:f6:1c:e1:c8:
         9e:3c:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:05:37 2025 by rpki-client