Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a05eae2f-ae84-33df-94a2-c5b84374f523.roa
File:                     a05eae2f-ae84-33df-94a2-c5b84374f523.roa (raw, json)
Hash identifier:          5U1ld+LJhIxmB/xNrP4PuvGv2toGqH9fUv4AGVfNpkc=
Subject key identifier:   4A:94:74:D6:13:8B:D7:D1:09:4F:D1:FC:DB:A0:16:BB:5C:7A:28:41
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F432858481B92283A7C890B02D0DE0C80
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a05eae2f-ae84-33df-94a2-c5b84374f523.roa
Signing time:             Thu 05 Dec 2024 17:08:12 +0000
ROA not before:           Thu 05 Dec 2024 17:08:12 +0000
ROA not after:            Wed 05 Mar 2025 17:08:12 +0000
asID:                     54004
IP address blocks:        134.202.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:92:28:3a:7c:89:0b:02:d0:de:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Dec  5 17:08:12 2024 GMT
            Not After : Mar  5 17:08:12 2025 GMT
        Subject: CN=45aff58b-768b-4b85-bb10-f0e0b487bd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:c4:6c:9b:dd:3a:3e:62:0d:d2:80:74:e9:
                    9d:24:e3:e1:6e:11:16:37:81:f5:3a:90:a8:8a:12:
                    ee:4e:24:aa:4b:71:87:d9:33:75:b9:2c:c9:a4:ce:
                    35:d9:5f:fd:8a:2b:19:24:4c:e5:38:57:d8:f6:95:
                    89:ea:9b:d8:a4:a8:63:33:6e:db:85:79:fe:5c:32:
                    d2:89:1c:b7:e7:33:ea:18:07:aa:ba:39:08:ea:a2:
                    d1:0a:14:63:1e:6a:ba:82:89:1d:9b:d3:1c:f6:43:
                    22:1d:56:52:b4:b1:e7:06:29:4f:eb:ad:85:7e:17:
                    01:8e:db:77:b5:c5:d7:cf:14:c4:fd:8e:5e:33:85:
                    05:c9:8b:20:2b:65:70:c0:f8:f9:4d:21:e8:cf:09:
                    68:a1:bc:eb:07:8e:d2:32:f1:40:41:c1:6f:03:25:
                    1e:8a:19:0c:51:43:96:3f:ed:a8:b6:72:0e:a9:cd:
                    b2:d3:86:67:b7:a7:bc:7f:c3:61:c1:99:7b:0f:1d:
                    ff:30:40:d7:c1:78:dc:74:b2:9c:60:c0:aa:09:95:
                    f2:90:88:24:65:ef:74:57:66:9d:c0:2e:59:6b:3b:
                    cf:59:ea:ba:18:76:00:70:3d:0c:60:88:b2:a1:4f:
                    f0:1e:c5:f6:00:3d:b5:a2:5e:87:a9:1a:31:22:c5:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:94:74:D6:13:8B:D7:D1:09:4F:D1:FC:DB:A0:16:BB:5C:7A:28:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a05eae2f-ae84-33df-94a2-c5b84374f523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ee:90:e5:4e:ad:f1:5b:66:38:02:eb:e2:e9:f1:0b:9c:0d:
         02:a6:fd:21:33:dd:24:99:dd:b9:8d:b5:37:e7:96:18:ef:67:
         d7:73:dc:d3:e1:3f:c7:70:0b:60:68:2e:0a:dc:77:c2:f4:65:
         d9:46:a2:bf:10:d9:a8:81:c0:70:eb:8d:e2:1d:5a:12:fc:e1:
         fd:4d:a7:ff:7e:e1:6a:ea:a5:f3:71:5c:1b:61:1e:c3:bc:c3:
         e8:41:da:e0:4e:74:ae:42:a6:ad:11:88:e2:4f:49:e3:43:eb:
         5b:01:70:2d:bb:82:5f:a4:56:08:5c:85:6f:37:c3:8f:76:f7:
         90:3e:b5:06:eb:94:60:e8:8c:e7:6f:ab:4a:03:7c:61:e2:ff:
         19:28:c4:4c:87:ad:27:55:59:94:c5:5a:53:42:de:dc:7d:1e:
         42:70:e2:3c:bc:02:ac:c4:44:a9:2d:b1:2b:92:f1:1d:f5:6d:
         e0:2b:56:fe:06:b0:49:3d:fe:3c:2d:05:b1:b5:6c:0d:6f:b2:
         16:71:48:19:19:d8:f2:96:f6:0f:a5:ae:c5:87:3c:90:c9:3d:
         11:cf:c4:ad:c9:ed:0a:1a:e8:f5:95:8c:7e:be:c2:1e:17:c9:
         a1:66:65:8f:6f:57:79:13:b8:bd:0c:9d:0d:13:9e:e9:ae:13:
         41:02:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:43:08 2025 by rpki-client