Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d561e551-7a3e-3ca9-9da7-966a6c4ffff0.roa
File:                     d561e551-7a3e-3ca9-9da7-966a6c4ffff0.roa (raw, json)
Hash identifier:          C2fSrz7MDzN4l6Jzi0KSyCwl/jFF7Ef5N3rkyffoO0M=
Subject key identifier:   27:32:32:01:B1:B5:8B:91:23:2C:2E:11:D1:14:D8:A4:34:0F:65:DF
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858486EF5BEC93F55444A8FE93AC0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d561e551-7a3e-3ca9-9da7-966a6c4ffff0.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        167.234.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:be:c9:3f:55:44:4a:8f:e9:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=6707b480-9fb0-45cc-af9c-625dceee09c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:6a:67:f0:e1:f6:ff:97:b2:4d:5c:e9:fe:
                    4e:84:4b:8a:23:6c:3d:64:bd:29:6c:07:4e:a6:57:
                    83:08:d3:66:f3:cd:eb:13:d1:64:03:01:62:99:23:
                    95:20:9a:d6:4a:cc:f4:99:33:39:92:cc:6e:db:59:
                    c2:03:69:22:6e:27:ed:32:1e:36:d2:77:94:4d:89:
                    05:95:fd:e3:2b:8b:c9:6d:ef:bb:78:31:1f:b2:4f:
                    9e:0c:03:f7:96:fd:fd:11:74:b8:d8:d2:1f:37:11:
                    23:24:c9:e3:2e:ab:1b:b9:f1:2e:c2:6e:6b:4d:37:
                    64:cd:bb:af:e9:a6:81:cc:71:ed:c0:32:2a:39:70:
                    ff:51:e4:81:5e:38:a3:b2:b3:02:0e:1f:54:f8:ad:
                    b9:b0:af:40:78:8e:62:4f:e7:b0:fc:5e:22:54:4f:
                    b9:57:1c:e9:a9:29:03:01:dd:a4:3c:e1:49:58:7c:
                    13:19:b8:23:a0:cd:a7:29:86:ce:87:4a:42:e3:68:
                    97:19:0e:a0:04:67:0e:73:2d:18:6c:d2:4d:56:1c:
                    3d:26:66:cb:d2:35:56:1b:68:64:93:0f:09:f3:28:
                    66:c5:2e:c5:dd:e7:1d:42:f9:9f:a5:44:f7:6c:74:
                    d6:e2:d3:14:2c:58:69:a5:e3:e1:3c:52:40:b6:17:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:32:32:01:B1:B5:8B:91:23:2C:2E:11:D1:14:D8:A4:34:0F:65:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d561e551-7a3e-3ca9-9da7-966a6c4ffff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b8:ab:a5:8d:1b:6c:ff:46:78:ec:f3:7a:d9:71:42:f3:00:
         b0:ff:d8:6f:eb:90:3f:1f:96:2a:70:22:38:61:45:4d:66:62:
         9b:1f:45:4b:0f:dc:cb:d5:e5:06:9d:79:f0:c2:ca:cd:99:f6:
         f8:d2:37:9c:44:a9:61:64:b4:9d:c2:06:68:20:ed:1a:81:da:
         fe:6a:c6:4a:02:8e:06:51:00:b1:f6:66:b1:94:09:a1:c1:c8:
         5b:c1:b9:52:27:2d:46:90:e6:37:e3:73:92:f2:38:e8:2f:d6:
         fa:2d:27:e9:0a:bf:f0:8e:1b:f1:b4:db:be:da:43:7e:64:1b:
         9a:20:46:42:99:b3:40:a4:f5:f6:75:ab:0a:18:63:51:d9:05:
         cb:6e:b1:70:64:77:37:fc:9c:62:de:09:9f:ce:96:36:4c:35:
         a8:bd:dd:b5:21:e4:53:c6:57:60:da:a5:46:7e:6a:b0:3d:31:
         5a:6d:22:df:ed:40:93:95:17:5c:fb:fa:e9:0f:dc:ed:6e:8c:
         7b:d9:f5:5e:18:b9:33:39:bb:1f:e1:85:af:fc:30:8c:28:c4:
         a2:9a:a1:ab:de:f5:95:33:ce:10:97:b9:2c:d4:ea:d3:4f:8c:
         e8:f7:21:39:a9:1b:90:d5:c4:84:69:c9:bc:d4:04:ba:d6:a1:
         6c:e0:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:08 2025 by rpki-client