Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/d60fdc5a-378e-367d-9d61-db73276455c0.roa
File:                     d60fdc5a-378e-367d-9d61-db73276455c0.roa (raw, json)
Hash identifier:          gtvMRjxhUOT3N5CufTghPVY16Jeg5ZwbZHrfcsHjYEg=
Subject key identifier:   4B:C8:CF:24:3A:F1:C6:9B:93:03:03:95:64:F7:B2:A7:F9:CE:FB:94
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F432858486EF5C2B7F2987EA7D250E780
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/d60fdc5a-378e-367d-9d61-db73276455c0.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     13389
IP address blocks:        216.179.154.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:c2:b7:f2:98:7e:a7:d2:50:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=d42d4309-f0c6-4820-853d-26b55f0ab699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:37:06:0c:e7:0c:f9:8f:c5:63:2f:e3:10:
                    28:de:3b:95:04:8d:45:4c:b6:6b:52:fb:e8:8c:84:
                    96:ba:6c:21:58:1d:0b:23:2d:21:d3:49:97:fb:22:
                    41:b5:16:f0:61:58:67:4b:a1:ee:35:03:e0:8f:33:
                    db:45:4f:ff:69:ee:90:7a:ad:5b:4c:4d:0b:85:ac:
                    e8:90:d8:62:7c:33:71:b9:33:72:c4:8e:86:22:ca:
                    99:cd:24:16:6f:17:96:8f:1b:5d:82:c2:80:99:4e:
                    98:38:99:b8:ac:4b:fc:4b:74:93:23:c3:eb:eb:da:
                    94:fc:bf:44:68:f4:87:26:26:1d:f5:93:d7:c6:bb:
                    cc:b1:17:c0:c6:f0:4b:e4:ee:51:44:50:97:fe:7f:
                    46:61:98:a5:50:25:59:9e:11:98:17:69:17:8e:6c:
                    da:ff:c3:8c:f8:92:51:ec:89:b7:dd:cc:eb:83:94:
                    54:2e:ef:03:f2:85:07:66:c9:69:c2:d0:6e:b1:0c:
                    2a:ad:9c:71:14:91:a3:07:20:b3:c4:0f:a5:56:f7:
                    90:c9:04:00:64:84:2a:14:16:c0:a4:76:56:c8:89:
                    dd:2c:85:3e:85:2a:eb:45:84:27:e5:ab:c3:e3:0a:
                    ee:04:18:8c:d4:48:92:58:32:e4:61:f0:33:65:89:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C8:CF:24:3A:F1:C6:9B:93:03:03:95:64:F7:B2:A7:F9:CE:FB:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/d60fdc5a-378e-367d-9d61-db73276455c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:4a:28:90:21:f4:b1:49:25:58:9b:23:4b:21:d3:b6:2b:
         e0:b6:b3:c3:c8:87:d7:cd:d5:54:69:59:e3:7d:1a:61:0b:cf:
         91:b4:61:67:08:6c:29:b1:42:37:06:1f:83:20:81:ef:00:14:
         50:36:6b:2a:1b:dc:80:33:89:eb:86:87:32:44:91:e2:38:a3:
         30:53:8f:cd:e5:d9:68:b1:91:b5:24:e0:3c:50:1c:82:c1:5b:
         81:d1:16:8d:0a:b7:0d:fb:6a:62:61:75:7e:bc:f7:17:f7:e7:
         81:61:d6:a4:22:06:41:d6:73:3a:53:68:28:b3:f5:92:e8:18:
         56:39:c0:49:b6:f8:c4:31:d5:1c:e3:02:d5:78:3a:fd:2e:db:
         2c:4c:3c:ad:81:1e:a0:10:23:ec:39:5f:7b:c6:3b:56:e5:b6:
         52:9c:ae:55:d4:6f:94:7b:0c:cd:68:26:37:ae:1d:49:27:60:
         51:cd:f9:fd:a0:6c:8b:7c:a4:88:34:96:a7:f7:d2:aa:b0:bf:
         79:5b:be:0d:ff:69:38:43:9e:df:25:7b:42:94:2a:40:68:47:
         2c:91:ac:d1:e6:df:4a:da:99:ab:75:b1:a6:fd:1c:f7:fc:a9:
         aa:a4:f2:be:b6:83:69:7e:4c:db:41:77:d0:a6:44:7b:21:8c:
         b5:a6:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:33:00 2025 by rpki-client