Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/4231c7b7-c38f-358f-b43c-b41b8e0f9017.roa
File:                     4231c7b7-c38f-358f-b43c-b41b8e0f9017.roa (raw, json)
Hash identifier:          vHq2brCzM9GUihFxDahRWI9XAEEa2GI6vGqebs9PS8U=
Subject key identifier:   CE:06:EA:80:5F:4F:EB:CB:78:45:AE:8A:7B:09:0D:87:8E:62:8F:32
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858485E35B4C55ECD75E88EF63500
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/4231c7b7-c38f-358f-b43c-b41b8e0f9017.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     57043
IP address blocks:        107.182.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b4:c5:5e:cd:75:e8:8e:f6:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=5ca4c7ad-44ff-44a2-94db-6abd6406c284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:08:55:56:ba:07:e7:d5:64:f4:1a:58:77:
                    94:d5:c8:18:54:b0:ee:d7:b4:ab:d1:66:24:8e:20:
                    59:5a:f4:0d:aa:af:16:93:e6:0c:d3:13:c0:05:13:
                    1c:99:db:bb:76:eb:b4:97:1d:7c:79:c9:b3:a6:87:
                    5f:2f:0b:f4:85:2f:13:73:99:d7:10:71:aa:76:2b:
                    c3:b4:5e:74:8a:48:bc:27:5a:77:dd:ed:08:06:d0:
                    47:52:a9:94:0b:2c:33:33:a4:e7:dd:f3:c8:c3:ff:
                    21:8c:0b:ba:f9:68:5a:cd:0a:e4:38:30:46:e6:42:
                    ce:0e:a4:e4:0a:36:c1:d6:a5:fd:4d:4b:dd:bb:b9:
                    0b:e2:a9:bf:fc:dc:ef:99:5a:b7:5d:93:ad:73:2c:
                    7a:bc:a0:af:88:96:5a:c4:fb:2c:e7:c1:b3:fb:db:
                    56:0a:80:10:75:6c:0f:76:3a:99:54:63:a0:6c:88:
                    a7:fd:06:41:78:0e:70:95:9c:c2:b2:56:aa:72:a6:
                    1e:06:73:6b:f5:09:81:01:fd:ea:23:24:6b:bf:6f:
                    06:be:6d:e4:bf:9b:f6:a9:e8:f2:d3:ef:36:b3:d1:
                    85:c3:77:f0:4c:9b:42:a8:68:4f:76:09:b1:36:26:
                    3d:3f:17:3e:69:31:fd:6d:37:fc:65:4b:28:5b:2f:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:06:EA:80:5F:4F:EB:CB:78:45:AE:8A:7B:09:0D:87:8E:62:8F:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/4231c7b7-c38f-358f-b43c-b41b8e0f9017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d8:7e:5d:c4:9e:bd:53:0a:f1:fe:c8:b5:af:c7:b5:92:fe:
         a4:2a:db:41:db:2a:f9:12:99:80:df:af:89:25:f9:fb:07:65:
         fb:70:8f:3b:ea:ad:aa:21:a6:98:84:6c:c0:13:72:e7:6a:20:
         c8:3d:79:fc:10:ed:61:40:85:d4:07:ba:95:91:df:11:62:7a:
         5d:b2:c4:8b:97:7b:4c:a6:73:cb:44:db:ce:55:51:ae:fe:e9:
         93:69:50:6d:2b:cc:63:90:93:46:7c:e1:a2:e0:52:40:84:0a:
         87:74:88:36:9b:e4:c9:11:fb:5f:d0:7f:c2:73:07:f4:f3:10:
         bd:06:b1:24:8a:9c:da:33:94:a6:a2:e7:0c:f5:29:47:1f:30:
         ea:9c:29:4d:27:2d:99:f3:c6:91:9b:82:f4:c9:a7:dd:ca:5e:
         b6:50:9d:2b:ea:f2:bf:23:3c:b0:cc:59:3a:82:3f:a2:8f:2f:
         0e:71:e7:55:3f:7c:b6:2b:a8:d6:90:82:66:8a:77:04:e0:25:
         50:b1:70:39:90:49:c0:41:d0:dc:22:b6:f6:cb:96:fa:8f:8c:
         23:65:2b:8f:a5:49:08:7e:e7:28:8f:49:0a:41:89:e4:aa:36:
         56:b4:47:c8:3b:f8:c8:a0:f4:09:47:f2:38:eb:5c:e0:91:b3:
         73:f2:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:44:55 2025 by rpki-client