Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa
File:                     61b43dc6-923a-309c-82be-50a0e60faeb2.roa (raw, json)
Hash identifier:          PyXxxcH21A2STaWZ7jB3jlIRZNte6SSbP+h0iSnSsqY=
Subject key identifier:   2B:3B:96:6D:92:06:84:E9:6C:DB:E2:6C:88:33:25:8E:3C:2B:26:B1
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C2F32B14C7DD45969F50
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     64267
IP address blocks:        149.20.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c2:f3:2b:14:c7:dd:45:96:9f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=75b70798-0268-424f-b311-90f6f76a042e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:d8:a4:9b:f5:24:d9:c1:92:74:ec:9b:28:
                    96:41:0e:74:a3:5b:5b:b7:0b:cc:f8:2d:ea:35:46:
                    ad:68:aa:82:b5:bd:83:b7:76:70:bf:63:45:9c:d4:
                    67:cf:cc:7e:5c:86:0b:3c:d0:17:42:b8:74:64:a7:
                    7d:68:a8:19:51:51:ef:1f:88:6a:d5:dd:0f:a8:c6:
                    7e:64:56:29:f4:fa:f6:89:c2:b9:b0:ea:ff:f5:35:
                    70:ba:8a:b8:1f:59:cb:69:0e:42:8e:69:81:79:bc:
                    9f:2d:52:8a:47:7f:f4:58:b9:43:4b:ad:81:5a:9f:
                    96:fe:3b:de:cf:f4:fa:13:52:d8:91:0b:b1:4f:96:
                    c5:da:cb:bf:9b:5c:39:32:73:6d:7c:bb:80:51:8f:
                    17:37:88:29:ab:62:c0:c7:42:af:17:bd:4a:53:11:
                    85:c4:dd:b4:fd:a9:c7:71:57:e6:90:99:0b:9b:7e:
                    f1:e2:48:b2:52:f8:92:ab:1b:25:07:3d:71:37:02:
                    dc:45:4c:74:ec:2e:22:e1:cb:fb:b6:79:19:f9:55:
                    cb:2f:0f:dc:b0:b8:bb:f4:2c:93:08:a1:5e:96:75:
                    6d:c0:d8:2e:0e:d0:c5:31:1a:cc:f1:a3:48:02:82:
                    49:d8:bf:ca:81:96:07:6d:f2:25:a3:91:1c:4f:15:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3B:96:6D:92:06:84:E9:6C:DB:E2:6C:88:33:25:8E:3C:2B:26:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:df:de:6f:9d:05:1b:25:e2:7a:89:cb:73:a6:28:22:57:c5:
         f3:a0:7a:18:7d:11:46:87:ab:64:11:b9:9e:33:86:04:8b:91:
         ec:b5:c9:25:b6:c3:18:b2:58:64:07:28:41:1d:39:65:e0:29:
         d3:f8:12:9d:18:da:74:40:29:0f:4c:7d:96:7b:0a:69:c0:f4:
         8c:5b:b6:49:ed:52:c2:ed:dc:b8:61:02:53:56:08:f0:74:89:
         a7:4b:94:19:5e:af:a3:29:d4:71:8a:db:1e:f9:3a:48:47:53:
         2b:5f:e1:23:83:71:8c:86:1b:4d:d5:55:a5:47:5a:8e:2c:c0:
         b9:e6:c6:0c:c8:bc:96:e5:71:2d:e6:e5:5e:96:d3:b7:5c:3c:
         4e:0f:f4:59:e7:09:95:14:e5:3c:91:19:e1:04:a4:46:5a:8d:
         21:c9:66:19:1d:c1:24:85:f7:c2:48:4b:65:33:6b:9c:59:c2:
         b7:8b:c2:19:9e:4c:26:df:78:c9:60:f7:82:bc:70:ef:45:ab:
         4a:6e:aa:db:ca:02:b5:82:1f:b1:f0:1c:cf:33:82:1a:fa:16:
         ce:da:b7:cb:94:96:b6:a0:9f:56:c4:1e:e0:45:f0:86:cc:83:
         61:80:10:89:78:0b:4b:a8:3c:68:13:dd:81:24:ee:07:38:c2:
         5d:41:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:28 2025 by rpki-client