Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa
File:                     dadb8667-9016-3ed9-aec9-53a09735cd1a.roa (raw, json)
Hash identifier:          ZTeXqiXPow56LOOEcSYH/NS6ZMMZd66Rda1I1jyeqGk=
Subject key identifier:   B3:EE:AB:78:C6:31:17:5E:F3:80:9B:F5:5C:50:AF:A1:AF:74:E0:CF
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858482D5A8CB85A00FFB3E08D2000
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     396073
IP address blocks:        140.228.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8c:b8:5a:00:ff:b3:e0:8d:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=159e6ebe-18a9-4c2c-94ce-483dec3fd666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:37:09:7f:dc:7c:e7:68:48:c2:a2:97:d4:
                    5e:3f:c5:e1:ec:30:d5:6a:68:95:a5:c5:16:fa:45:
                    1c:06:09:0a:a2:c5:38:0e:0c:8a:d7:81:dd:e2:18:
                    cb:32:21:75:db:cf:bb:77:4b:56:58:dc:77:b0:96:
                    70:71:94:56:e8:43:46:7a:51:5c:fe:a0:be:03:48:
                    ee:74:f3:4c:11:a4:a2:37:6d:c4:38:7f:86:a8:4b:
                    ae:03:f3:7d:75:10:c0:c1:a5:1a:d3:cd:7e:4f:f3:
                    e6:bf:04:fa:38:83:ab:c3:72:4d:4f:68:a6:e0:5c:
                    9b:6c:15:6f:ee:e5:ca:54:68:7f:86:05:a5:3d:93:
                    0f:cf:22:15:2c:ad:4a:f1:d0:bf:b9:8a:48:2b:50:
                    c6:39:30:4d:92:93:a0:f7:97:29:47:ea:e7:f2:d2:
                    ab:7c:85:d1:b4:4a:c1:7b:9f:c4:dc:2a:3f:3a:0d:
                    ea:9a:9f:11:23:fb:21:4a:53:61:32:15:67:78:37:
                    54:a2:b7:55:0a:90:47:f4:a8:f5:fb:af:56:0e:31:
                    ab:d2:4c:35:5b:c8:ea:98:4a:c0:e7:53:39:27:ee:
                    f5:f7:77:a4:bb:74:be:a0:33:43:ce:7d:34:5f:2d:
                    d1:59:de:f0:7b:d2:45:63:01:9f:77:20:0a:7b:26:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EE:AB:78:C6:31:17:5E:F3:80:9B:F5:5C:50:AF:A1:AF:74:E0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3a:f2:61:20:ba:74:3f:20:f1:a1:f0:ba:07:0e:f9:be:7b:
         78:30:c1:c3:01:ad:9d:9c:ab:c1:3f:7a:0e:d5:c6:86:e7:03:
         b7:00:a6:75:1c:25:7d:fd:06:5a:56:b3:c9:4e:bd:44:a8:31:
         9b:cc:be:47:2f:23:4c:15:9e:a9:c0:f6:bd:50:56:ad:38:0a:
         7d:b3:ea:8b:35:26:e7:f6:ca:57:2a:a0:51:6e:97:b4:a7:eb:
         dc:60:3b:70:94:d1:c1:26:89:3e:4f:a4:e2:e6:67:18:12:b0:
         05:cf:80:ae:4d:ab:a5:16:b1:27:59:27:1b:48:3c:90:12:e9:
         b1:be:28:59:c6:5c:af:d6:9e:d3:04:62:20:5f:cc:7c:48:6c:
         ee:7a:65:21:f9:67:5f:2b:80:18:33:a0:5c:61:76:47:73:1f:
         7c:d0:d1:28:96:b4:dc:ae:6f:8f:54:3c:a6:8c:c7:c8:0e:27:
         95:7d:83:cd:e8:e0:1f:2c:7f:a8:7a:6d:22:04:38:16:f0:fb:
         90:18:25:e8:2a:49:fb:9d:41:2f:3c:95:cf:b8:54:a3:1e:98:
         26:33:fa:7b:39:ee:57:09:25:f8:62:7b:75:82:a5:76:b6:bb:
         40:97:f6:77:fc:b7:24:b5:08:80:a5:71:c1:c2:fb:af:f2:22:
         c4:c7:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:11:39 2025 by rpki-client