Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/175585ac-ff79-3254-952d-a4664f0777dc.roa
File:                     175585ac-ff79-3254-952d-a4664f0777dc.roa (raw, json)
Hash identifier:          bOTrrrmZriUkWQlwhM6eA7x/dTAiyS1vTCCulN8YJ+4=
Subject key identifier:   81:22:91:3A:50:18:44:4E:AC:0B:41:28:7A:6A:AD:D2:1B:AA:18:E8
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E8F4F8E4126D12A9934C1680
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/175585ac-ff79-3254-952d-a4664f0777dc.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36040
IP address blocks:        64.15.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:f8:e4:12:6d:12:a9:93:4c:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=2de961e0-deb0-462e-a611-039cda6fdee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:e5:f9:d3:5e:31:74:c1:e4:62:75:91:52:
                    c7:f7:07:ba:5d:3c:e7:b3:f7:cc:0d:4c:6f:16:b6:
                    5b:cb:a9:51:e2:74:b0:b1:cb:d0:77:0a:67:06:b4:
                    84:32:e9:3f:1f:28:78:7b:a8:89:d4:a8:ad:f4:9e:
                    88:94:1a:65:bb:89:6e:51:a1:c0:94:1a:7e:aa:74:
                    16:72:05:36:4a:b0:4e:06:8f:f7:8d:8a:e4:cb:c4:
                    60:44:a3:76:d4:a0:5a:c6:10:6b:23:26:2f:04:b5:
                    46:ca:2d:d1:34:5f:38:d1:b7:40:ae:5b:ac:ef:05:
                    c5:02:ae:22:53:38:64:6e:4d:cf:c1:fe:33:7c:96:
                    4a:8c:cb:fc:58:16:18:d2:3f:45:be:95:1a:d5:b6:
                    8e:a6:53:12:e1:8a:66:1c:b3:e0:f0:58:9e:db:ff:
                    9c:97:3e:59:c5:b3:c6:d2:0b:32:d3:5d:29:4b:74:
                    a5:49:ce:28:da:cd:c4:cf:2e:b9:dd:70:db:4e:2d:
                    02:49:20:a8:74:3a:92:2c:85:8c:26:3a:18:44:25:
                    25:3c:ef:b9:40:03:6a:90:ff:8b:77:71:83:a4:b4:
                    4a:f1:52:81:0c:eb:a1:9a:a7:e1:be:4d:1d:7a:01:
                    f6:4b:2c:7b:43:2b:06:d4:4f:9b:2b:0e:b0:b5:dc:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:22:91:3A:50:18:44:4E:AC:0B:41:28:7A:6A:AD:D2:1B:AA:18:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/175585ac-ff79-3254-952d-a4664f0777dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:17:63:ca:cd:f7:b6:7e:66:cd:3c:cb:d8:71:61:ab:e9:26:
         3b:8d:2e:0d:2a:23:6a:02:b0:48:27:b1:47:8e:d7:5e:92:f5:
         03:34:06:ea:55:69:fd:b8:58:15:e5:72:89:f2:5f:d4:63:9c:
         24:fa:23:9f:7f:3a:7a:0a:4f:18:55:1c:6d:47:b9:fe:47:97:
         74:8c:92:f8:84:9f:57:61:f8:42:ad:ec:4f:ed:c7:40:92:2b:
         b2:08:d7:9b:93:ad:7b:1d:c3:2a:99:4c:e2:bb:94:32:3d:ff:
         00:2e:1a:47:f6:5c:7f:22:8f:5c:54:cf:b5:c4:f0:9f:9b:53:
         25:b8:97:a6:10:98:09:05:00:70:50:02:e1:7b:56:04:7a:65:
         23:3c:cf:9a:c9:ff:13:1d:4c:36:6c:b0:69:f1:4b:b8:60:57:
         fa:07:8f:65:93:dc:25:66:69:85:f4:87:e1:10:55:81:3f:78:
         9a:86:87:82:98:ed:b8:67:32:5e:8a:f4:c4:95:01:05:fa:1e:
         77:ed:e6:01:95:22:33:86:be:00:7b:e1:7f:ad:b2:83:5c:78:
         3c:ab:33:eb:f1:b0:9f:80:8e:94:c5:23:33:11:f4:0e:3f:55:
         75:d8:07:40:76:ce:03:90:84:7f:80:ed:33:d2:91:17:79:df:
         86:d7:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:31 2025 by rpki-client