Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/324c7f4c-aebe-386a-a996-64b273f056fa.roa
File:                     324c7f4c-aebe-386a-a996-64b273f056fa.roa (raw, json)
Hash identifier:          F7x0a05hn4CcbLPwGW0DXpFH5muaV5c19zhVeaTyCYw=
Subject key identifier:   42:94:6D:A0:29:68:5F:72:69:AB:78:3F:2A:CB:48:4B:DD:3F:6E:4A
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848159FE330BF56E9BC4BDC8580
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/324c7f4c-aebe-386a-a996-64b273f056fa.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     30133
IP address blocks:        192.228.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e3:30:bf:56:e9:bc:4b:dc:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=8c4b5092-ce3e-4abc-ac87-2dfee252413f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:cd:ec:9b:74:ad:55:42:ad:38:86:7d:95:
                    e8:9f:11:32:27:bf:96:f8:0e:a2:6d:b5:0b:18:ef:
                    92:51:ec:b6:12:3f:bd:31:e0:8c:af:6b:28:95:ba:
                    2b:4a:16:46:6c:db:1c:21:5b:76:bf:80:cf:9d:6b:
                    87:34:c4:6c:53:0b:04:12:23:4e:56:60:73:f9:7d:
                    99:13:90:51:98:ba:0e:2e:01:a9:53:ce:3d:92:60:
                    d4:8f:08:cf:6a:fb:df:73:ae:0b:62:76:b1:14:3a:
                    7b:67:07:1b:6d:7f:93:42:e2:76:23:e4:07:a3:ff:
                    03:56:79:eb:51:7d:24:28:bf:65:c6:9e:c6:8c:d1:
                    7c:26:f0:b5:1f:c9:c5:e9:38:ed:96:fa:5c:5c:f1:
                    32:0f:db:85:e6:29:51:fd:c3:94:2b:a9:ff:fd:02:
                    c3:9a:ec:4a:8e:58:ed:05:71:34:78:8e:da:de:fc:
                    c9:de:0e:9a:9c:48:e7:99:af:dc:cc:8a:b3:5a:34:
                    bd:7a:dd:2e:4f:5e:a4:17:57:82:a5:b0:19:57:2b:
                    01:00:54:fa:3f:db:29:a5:f5:17:f4:2d:92:5f:65:
                    8f:99:59:5c:22:bf:3c:cb:15:8d:db:6c:62:75:6b:
                    c5:b2:c6:24:96:17:a0:65:40:50:2f:b7:92:63:eb:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:94:6D:A0:29:68:5F:72:69:AB:78:3F:2A:CB:48:4B:DD:3F:6E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/324c7f4c-aebe-386a-a996-64b273f056fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ee:74:b7:d2:33:48:6d:8d:f4:12:98:34:ed:97:b2:af:e8:
         fc:83:8b:1f:21:f6:c4:3e:e4:5c:c0:a9:f4:98:44:c6:bd:86:
         5e:3b:ed:42:62:47:64:16:6a:fb:24:28:6b:4a:f4:4d:43:d6:
         68:ca:c7:ff:15:e5:e4:12:97:b5:2b:de:42:cb:e2:0d:63:0e:
         01:cf:64:69:b8:9e:7a:3a:70:e9:6f:9f:e3:1f:89:4b:92:02:
         07:9b:fe:67:f0:ee:66:0a:57:1a:a9:3f:af:27:78:5f:e6:16:
         43:dd:fa:53:f3:21:16:7a:7d:c0:0a:bd:de:44:fa:c3:50:c2:
         04:0a:1f:36:64:b1:43:e5:97:f6:b8:cb:7d:a5:5a:e0:ee:58:
         53:53:bf:47:75:1f:fb:03:d8:77:7a:bd:ad:ea:5c:2a:b7:2d:
         e4:6a:6f:9d:23:4d:3c:e9:c6:0e:d5:98:7b:b3:fa:7d:bd:a1:
         be:8e:76:26:1c:43:a6:2a:32:4a:ae:8f:95:42:df:4a:39:83:
         6e:37:a7:cc:d3:33:92:ea:e3:d3:02:16:16:e1:84:59:a0:69:
         20:b5:5f:f1:18:23:c0:f1:b3:69:a6:82:2b:d0:42:36:89:31:
         da:b4:d2:ba:9f:04:d2:97:41:d3:95:c6:1a:e4:a1:f1:7c:4e:
         e6:c1:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:38:57 2025 by rpki-client