Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/0c23d664-e08d-36ae-bc28-bc57a72107fa.roa
File:                     0c23d664-e08d-36ae-bc28-bc57a72107fa.roa (raw, json)
Hash identifier:          jrXOUTswkGLcaN7tPjn1W+ndCE7f8eYutp/iSaoplyA=
Subject key identifier:   95:8C:8A:A7:2C:0B:E2:56:66:8A:18:5A:88:40:2B:15:B9:AB:80:F6
Certificate issuer:       /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
Certificate serial:       010D0C9F4328584845159138A47BB7AC7929DEC0
Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/0c23d664-e08d-36ae-bc28-bc57a72107fa.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     61112
IP address blocks:        45.41.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:91:38:a4:7b:b7:ac:79:29:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=df0c10e4-a914-4b6e-9e04-a0d51562ae13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:b5:ef:cd:a2:d9:10:8f:a6:36:ff:42:02:
                    46:9a:84:b8:59:31:36:54:4a:5d:6a:0a:0a:47:ac:
                    75:9e:8d:7c:e8:6c:79:e4:07:71:6c:00:d2:f2:d9:
                    3a:a9:7f:7a:8c:17:3f:29:71:ba:a9:30:45:23:0c:
                    f8:97:33:0f:ba:02:0d:e6:d5:91:7b:5b:b7:78:5e:
                    bd:99:2a:dc:b2:32:e5:1a:07:bb:76:ff:7f:0b:6d:
                    f1:7d:a2:ed:85:59:65:ab:ec:d5:dc:b5:28:70:93:
                    1c:f4:41:d2:35:fc:79:5e:d1:3f:34:16:1a:87:e1:
                    d0:c1:07:16:50:d9:45:e0:b0:de:79:e6:12:1d:72:
                    8c:1a:de:a5:85:4b:b0:bd:05:eb:d4:b6:db:5c:6f:
                    ab:e0:35:fd:70:ee:2a:46:10:05:50:07:85:17:b3:
                    58:1a:43:d5:7a:8b:73:cc:93:f5:fd:b8:a4:dc:20:
                    1f:51:14:4a:fe:0e:4a:07:16:b7:a3:b9:c6:30:aa:
                    d9:41:41:91:7e:fd:87:76:a8:d6:b1:84:6d:56:7a:
                    92:17:63:9c:8e:ca:b5:01:38:d0:69:ec:a9:d3:2a:
                    84:22:c7:30:7b:ce:8c:96:b3:e9:18:fd:ab:29:e8:
                    54:dc:85:16:19:b0:66:0a:d2:75:d2:df:4c:0f:11:
                    18:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:8A:A7:2C:0B:E2:56:66:8A:18:5A:88:40:2B:15:B9:AB:80:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/0c23d664-e08d-36ae-bc28-bc57a72107fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl

            X509v3 Authority Key Identifier:
                keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:ca:35:71:08:a3:65:75:38:dd:99:ae:22:73:1d:5c:4c:
         22:8b:d8:64:f7:fc:b8:f4:b8:9f:4f:6b:a2:07:e2:5a:7c:b4:
         68:ed:a3:c4:ee:49:c7:f7:10:0a:ca:69:ed:8d:a2:98:91:65:
         de:c0:d0:5d:c1:71:ac:d8:63:7c:ca:70:c9:c8:37:08:20:5d:
         6c:35:68:7f:df:b3:61:62:2a:06:09:0b:fc:fd:62:c4:31:23:
         d0:49:b7:7a:ef:12:0b:f7:4a:78:33:86:49:24:4b:fa:68:ce:
         d5:48:74:23:85:3e:e1:b8:e5:9d:ca:b9:15:41:f7:b2:0c:53:
         8b:ea:2c:57:20:23:9d:d9:db:40:5e:90:dc:69:73:c1:9c:17:
         f1:a2:48:9a:a2:66:15:8a:a9:db:27:b0:80:c8:ea:43:e6:bc:
         c5:b0:98:3d:e4:94:75:c6:e1:c0:04:7f:eb:ed:4f:f1:96:77:
         a0:92:a0:40:c9:08:31:6b:78:07:11:df:91:0a:0c:97:9d:c4:
         e3:d7:ef:e6:3f:dc:9e:a6:d3:e0:4d:5b:8e:18:9e:c0:4e:91:
         2f:1d:a3:65:c1:13:a8:f7:8c:ef:33:59:44:37:d2:68:e5:9b:
         db:d4:60:71:f1:56:af:8d:40:a1:c4:70:de:e0:dc:91:01:66:
         de:28:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:38:49 2025 by rpki-client