Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/19643a3b-57c0-390f-9a4e-b3cd7c8d9e86.roa
File:                     19643a3b-57c0-390f-9a4e-b3cd7c8d9e86.roa (raw, json)
Hash identifier:          mnLdJ7QLhAe1XqGYzWAeLX7ybkmyXWa8hQDXgw6z8pQ=
Subject key identifier:   23:2F:AB:20:DB:31:F3:F8:1F:52:B4:53:16:22:4A:51:1A:90:E0:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858484D7582FC439D3D7451EDA580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/19643a3b-57c0-390f-9a4e-b3cd7c8d9e86.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     400536
IP address blocks:        142.252.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:82:fc:43:9d:3d:74:51:ed:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=86b2ec2f-93ff-4eb3-b9f1-8df853e5f8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:69:be:32:cb:75:5d:8f:d1:93:7d:3f:22:
                    5b:dd:c2:e5:02:8b:ce:12:63:dd:43:06:d4:b7:5b:
                    d5:f0:48:c9:de:7d:fd:f5:6e:9a:92:4c:4c:a9:c0:
                    d9:80:9a:77:03:0e:b0:78:5d:0b:7e:42:3f:63:67:
                    5d:00:4c:ed:3c:88:cf:c5:50:10:db:b6:32:bd:6f:
                    d7:ea:68:80:06:5f:a6:99:ec:dd:07:55:be:d5:2c:
                    d8:52:63:cb:86:6f:da:c4:5e:3e:cd:ee:4f:17:d0:
                    b6:f2:49:34:e1:01:0e:82:4a:f6:1e:ed:7a:5f:a1:
                    70:e8:21:47:9c:af:3d:6c:16:5f:22:49:15:d7:ad:
                    e0:6a:e5:b4:06:bc:fb:be:ce:4e:a9:da:28:e4:19:
                    63:33:0b:8c:fe:85:5b:7d:d3:91:06:4c:73:02:83:
                    c8:96:e5:9c:28:71:b9:4a:a8:64:30:8f:b8:8d:c4:
                    76:36:96:7b:55:e5:69:33:58:e3:ce:6f:73:92:50:
                    53:10:b6:af:8b:8a:60:66:8d:ae:da:25:d2:c7:14:
                    2f:92:a1:05:90:2f:cb:01:b8:2d:ed:42:97:87:65:
                    87:89:ca:b2:27:46:63:e0:f7:fb:ea:90:9c:b7:f0:
                    3f:76:b3:0f:35:db:95:ba:87:3e:4a:49:83:e7:cd:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2F:AB:20:DB:31:F3:F8:1F:52:B4:53:16:22:4A:51:1A:90:E0:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/19643a3b-57c0-390f-9a4e-b3cd7c8d9e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:92:37:4e:6f:98:6e:ce:f5:63:75:1b:04:49:68:29:0c:7b:
         83:e5:7e:86:ca:ee:6f:ba:7b:43:1b:d5:e9:3b:8a:3d:fe:9d:
         29:b6:9e:29:44:20:20:c9:da:7d:60:2a:2f:c5:e2:e8:13:a5:
         db:9a:30:0d:30:5b:b3:70:c6:eb:3a:8d:7c:61:71:84:9c:36:
         54:58:db:58:b8:67:86:da:a1:07:ec:92:02:59:c4:6a:00:51:
         29:88:9f:30:31:a5:18:ca:54:55:96:c0:f4:18:ec:da:c5:0a:
         40:f4:53:4e:6b:da:3b:01:06:62:b3:7a:48:00:b2:ca:49:e9:
         7a:f7:eb:4c:9a:52:94:5d:92:fc:20:12:ac:84:8f:ec:b5:6c:
         0c:b5:0e:5c:0a:79:ef:83:d8:ec:38:8a:e1:84:f1:7f:ee:c9:
         ac:e0:07:a4:b5:25:9c:db:8f:02:a7:38:63:81:93:a8:f1:53:
         71:8d:d3:21:67:d0:25:39:66:ee:9b:a5:d1:93:4d:09:dc:90:
         36:4f:00:cd:c6:36:ab:e1:8b:69:b8:73:f3:69:6d:42:b3:a4:
         4e:f4:58:73:2d:31:eb:c9:41:4d:60:a3:77:a4:ac:5d:b5:54:
         b9:0e:e3:ad:b8:97:d7:a3:06:5d:af:dd:ad:22:0b:3a:c6:d6:
         11:99:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:30 2025 by rpki-client