Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa
File:                     fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa (raw, json)
Hash identifier:          irwW7OOFQpn7swUjYI+taUjbtdy1UclCEWSdoxHJiG0=
Subject key identifier:   E2:63:6E:C2:1C:87:F5:85:5E:73:00:20:5C:79:98:C0:93:4A:5D:7C
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285848222FDC9626651A72638EFDE0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     398006
IP address blocks:        24.222.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:dc:96:26:65:1a:72:63:8e:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=1140a630-2a32-4df8-b53a-c9cdb45da5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:5d:61:d0:5f:08:60:1f:34:c8:34:6c:f3:
                    71:1e:f8:5f:89:ca:4a:d4:6d:c0:fa:9a:29:69:f7:
                    6c:87:9d:69:9b:07:bb:1f:e8:1d:68:fc:a2:11:91:
                    eb:19:f3:27:37:c0:c1:37:91:2a:0c:a8:f0:8c:34:
                    7f:1a:a3:10:e7:80:65:25:33:02:e5:76:a1:de:f6:
                    4c:85:c6:9e:0a:fe:15:bb:d1:65:48:44:36:a2:04:
                    08:23:6b:11:05:5e:ae:83:df:26:10:d0:0a:2d:7f:
                    26:8f:69:e5:44:b4:25:26:30:f3:5e:b3:1a:85:e7:
                    ce:77:b7:ec:24:d2:5a:4a:45:a5:7c:3d:fd:0e:31:
                    25:1b:a6:0a:c8:ef:76:86:d7:33:c4:f3:c0:87:6a:
                    35:fc:51:a8:33:a9:58:21:cd:f4:c5:53:7f:c0:6c:
                    1b:16:5f:d9:88:83:b3:9e:48:41:a3:a5:4c:70:34:
                    1e:4b:b4:f5:c5:0c:d7:af:44:7e:1e:8f:33:75:fd:
                    00:61:d8:b6:fb:6e:69:c8:66:09:28:37:e2:e4:97:
                    41:9d:d8:36:f9:90:75:b2:38:1f:05:d0:e5:b9:93:
                    1f:98:d6:dd:f1:18:83:1d:1f:67:58:93:1e:0e:c5:
                    75:ab:7f:60:62:a5:41:3c:b6:64:4d:59:51:b9:00:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:63:6E:C2:1C:87:F5:85:5E:73:00:20:5C:79:98:C0:93:4A:5D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.222.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:af:78:b7:35:8f:69:35:24:98:97:71:a3:72:64:c1:bb:8f:
         4e:45:7d:99:6b:71:9f:f6:ac:2e:b8:35:11:d3:42:d2:64:84:
         3c:36:d6:2c:7d:30:41:48:9b:04:aa:f8:58:53:50:c0:d7:a7:
         6d:b5:d2:42:cb:29:f3:d5:0f:30:4b:6f:27:f6:3d:56:5b:01:
         76:fb:a4:a9:1f:46:dd:7b:86:4c:af:00:e6:21:63:68:c8:82:
         f1:39:30:31:ac:24:15:06:90:3c:c0:55:71:6b:fd:56:a8:5f:
         ea:0d:48:48:c5:a7:9f:0a:b0:7f:8e:e9:ad:c9:ca:8f:c9:b2:
         dd:0e:4d:b1:ed:e5:c8:db:30:cf:ad:5c:5e:cf:af:c2:7f:28:
         31:ad:95:78:f2:a5:42:82:1c:5a:ba:09:27:65:fa:56:3f:12:
         d7:88:8f:57:a3:51:6a:15:08:f3:c5:07:d9:e9:92:21:23:7c:
         24:e8:a7:33:e3:7d:5b:7e:0b:97:b0:1c:17:5a:db:92:fb:52:
         7a:e8:b1:5d:79:73:61:57:8a:25:82:22:2d:a1:c7:e5:42:49:
         cb:7c:43:99:94:09:24:56:c0:5d:62:d3:82:ee:35:9d:6f:ca:
         61:f2:98:6c:34:8f:ab:39:54:8a:4e:e5:10:6e:4e:80:5b:f6:
         9a:91:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:43 2025 by rpki-client