Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/bb1281d1-e460-37d2-86c6-7963176a95b0.roa
File:                     bb1281d1-e460-37d2-86c6-7963176a95b0.roa (raw, json)
Hash identifier:          jS4BO1lXYH70hKqQuFP9t57AQfUuBDtfDrahmQbYxZw=
Subject key identifier:   09:BA:A6:5D:75:17:1F:12:59:0C:2D:CC:9F:AA:EC:2D:DB:1A:01:8E
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858486695C88DCF3E6B3E064EB440
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/bb1281d1-e460-37d2-86c6-7963176a95b0.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     984
IP address blocks:        209.142.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c8:8d:cf:3e:6b:3e:06:4e:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=45f9b655-fe0e-4e88-baaa-0574e2f8a8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:c5:c5:ef:00:f2:a7:a2:b9:43:e1:40:e5:
                    55:26:08:ee:43:51:9e:93:37:34:9b:c7:d9:83:4d:
                    ad:4c:5b:b5:db:dd:da:14:10:4e:0a:a9:c3:23:b7:
                    32:ec:67:5d:c6:5f:c5:d7:0d:b8:b7:47:d4:13:88:
                    82:40:10:15:e8:20:9d:5f:bd:8b:57:59:bb:9d:eb:
                    01:ca:20:37:78:ef:a9:0a:46:af:d5:95:50:35:e9:
                    f0:64:d7:a5:b4:7e:10:41:52:cb:5b:b3:3b:da:25:
                    98:79:6b:74:6e:6c:84:20:8c:2c:9e:30:10:ec:42:
                    ca:41:a8:72:df:93:64:3a:e7:b5:56:5c:e8:a4:c0:
                    fb:24:65:6e:f3:8f:91:9a:14:94:f2:3d:1e:38:47:
                    10:40:88:31:26:ea:f2:91:c6:9c:a9:1c:fe:05:be:
                    a4:6f:73:f0:82:24:2e:80:37:66:42:44:aa:6a:4e:
                    d1:d3:f3:76:e4:53:71:b2:b5:d5:49:d3:80:d1:48:
                    c5:62:09:a0:d0:e5:d3:7f:64:02:01:69:28:a8:8c:
                    d4:54:19:90:f3:3a:d8:c8:6c:60:be:43:b3:bb:c4:
                    c1:f5:dc:6b:59:8c:06:be:89:08:32:18:f6:75:6b:
                    2e:13:dd:cd:bb:d8:b8:91:ab:17:90:37:9b:e0:c0:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:A6:5D:75:17:1F:12:59:0C:2D:CC:9F:AA:EC:2D:DB:1A:01:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/bb1281d1-e460-37d2-86c6-7963176a95b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:26:e5:a7:e4:99:59:3b:d6:bd:10:2f:76:0f:bd:26:3a:d6:
         a8:ed:4f:ca:b2:30:30:da:dc:96:6c:f2:c7:6b:11:09:e8:8c:
         8d:9a:95:9a:d3:dc:c7:37:6c:ff:d7:0e:cd:4c:d1:64:72:e0:
         44:2b:7a:cb:ec:9d:02:53:39:c4:c3:d2:59:ca:ec:df:2b:c1:
         b9:a4:5e:35:5e:69:4b:0f:c4:8f:c8:78:c8:5a:d3:f3:60:38:
         d0:ae:f2:7b:0c:1a:9d:b8:b4:f0:1c:c1:4e:48:c8:b0:f0:20:
         f0:53:7c:fc:d2:a6:32:56:21:19:45:96:0c:16:08:79:01:b7:
         01:50:c8:0d:e0:4c:b8:6c:ad:1c:d1:e8:5a:6e:02:64:be:53:
         ba:7d:30:c1:f8:84:02:08:a9:e3:ac:5b:3a:10:5f:dd:d1:be:
         91:14:ea:a7:08:fc:d8:83:7f:63:f1:eb:cb:87:8f:2d:1c:28:
         74:f1:0d:b6:58:39:7b:c7:1e:bb:65:a7:bf:b9:ea:05:9f:f5:
         ec:cd:13:b8:1d:17:07:6f:37:61:bb:f1:ba:3a:66:a4:d8:f7:
         e5:d0:e2:43:59:a5:a8:e8:85:48:26:bc:5a:ca:cc:b8:e6:d0:
         73:d5:29:e6:2b:14:6c:4e:f9:6f:a8:63:40:bb:fe:93:79:70:
         b3:18:d9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:07:22 2025 by rpki-client