Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f9f8ad2c-281b-3735-83e9-c127b15d61a4.roa
File:                     f9f8ad2c-281b-3735-83e9-c127b15d61a4.roa (raw, json)
Hash identifier:          fim5Nki2TVziEQc8xhm9T+kKcBn6nw5xDAwAEmo72KQ=
Subject key identifier:   7A:C8:A3:2B:57:52:94:38:F4:3C:02:06:76:44:77:31:31:E9:80:29
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858482D5A914AC0B0FC121E4EFE80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f9f8ad2c-281b-3735-83e9-c127b15d61a4.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     11427
IP address blocks:        142.254.226.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:91:4a:c0:b0:fc:12:1e:4e:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=53d509ea-c4a4-4c99-bc38-6431242aa903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:f4:be:cb:c3:d9:6c:b7:f2:5f:c1:19:e6:
                    33:b5:b8:1c:12:2e:52:c0:f7:d9:99:96:13:83:3b:
                    29:dc:13:0d:38:d3:2d:e0:06:47:f1:86:50:c0:5b:
                    68:37:27:5e:a4:91:f5:bc:3a:38:df:69:1f:9f:3f:
                    33:e2:b5:44:d0:84:60:a6:18:54:c3:38:6a:8d:87:
                    74:99:8c:7b:c2:57:1f:51:8f:a0:74:63:17:1f:24:
                    5e:52:66:d9:4c:d5:ff:ed:11:32:8a:19:ee:18:62:
                    6d:43:08:22:58:f8:45:3e:ee:7f:28:80:7b:11:c5:
                    1f:8f:50:d9:fb:fb:c3:a6:85:3e:f2:14:31:9d:86:
                    e0:29:d1:c0:43:7c:cb:12:d1:23:ea:91:e9:f0:ac:
                    82:93:18:f3:fb:a5:82:12:ed:47:45:fb:f7:a1:11:
                    11:db:da:61:8f:2f:35:af:6c:8e:77:4b:6a:81:47:
                    17:d5:8e:a4:dd:54:b2:51:77:26:27:e0:5f:71:1a:
                    21:e6:f1:3f:14:71:b3:ca:06:99:7a:41:bd:8e:5b:
                    11:c5:12:38:66:32:8f:2c:aa:20:52:1f:a9:9e:96:
                    fb:6d:78:32:de:bd:f2:79:cc:6a:da:5c:7f:34:f4:
                    cb:e3:cf:9c:7e:d0:f2:c1:e6:e7:ae:76:6f:9e:18:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C8:A3:2B:57:52:94:38:F4:3C:02:06:76:44:77:31:31:E9:80:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f9f8ad2c-281b-3735-83e9-c127b15d61a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.254.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4f:e1:04:ef:5b:ab:cf:24:6d:5f:0d:1d:d4:b9:73:f5:06:
         3e:7f:7a:b6:0c:1b:df:a1:10:7e:f3:f9:21:ce:f2:35:f4:90:
         fb:18:8d:43:77:c2:9b:60:a6:a4:50:82:40:f4:3a:51:d9:42:
         6f:cf:70:c5:59:42:45:6d:72:5b:a5:e7:9e:76:d8:04:0f:a7:
         8b:4a:05:5e:bd:5f:f4:d1:32:bd:a5:c2:d2:95:d2:c9:87:c4:
         f3:30:fa:21:08:d0:4e:b4:20:18:9b:53:49:1d:bc:24:da:e5:
         7b:1f:a8:00:a5:7e:e9:65:99:fb:a0:1a:7a:12:f8:9d:c7:97:
         d9:50:fb:a3:62:33:5b:96:03:9e:c0:ac:f6:b3:df:32:33:6c:
         99:cc:06:66:83:f9:42:44:89:e1:26:17:6b:37:29:42:79:8b:
         4c:ae:41:fa:ae:da:47:83:8e:f0:e3:66:ed:02:50:f1:ad:86:
         0b:1a:20:03:09:fb:fa:6c:95:00:fc:20:4d:79:1a:a3:bd:4b:
         f2:2b:3f:f3:4f:b3:6b:57:21:91:da:1c:0e:58:af:10:82:98:
         d2:34:f8:91:6d:d2:ac:93:2f:49:6b:e6:c1:19:24:74:48:87:
         8c:4e:a3:c4:ae:df:3b:f6:74:d3:08:b8:9e:2a:f8:36:5b:b1:
         94:f2:ca:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:29 2025 by rpki-client