Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa
File:                     8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa (raw, json)
Hash identifier:          hwpCVNjXrBVgkgwoIt3JqKIanqOtmVdyUdvTgri7UTw=
Subject key identifier:   CB:25:D8:D3:DE:41:E9:88:FB:BB:5A:AC:AF:6D:BF:F5:82:AA:18:E3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584883E5C911000EEA0D3258E780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa
Signing time:             Sun 12 Jan 2025 02:00:38 +0000
ROA not before:           Sun 12 Jan 2025 02:00:38 +0000
ROA not after:            Sat 12 Apr 2025 01:00:38 +0000
asID:                     203
IP address blocks:        170.30.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:e5:c9:11:00:0e:ea:0d:32:58:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 12 02:00:38 2025 GMT
            Not After : Apr 12 01:00:38 2025 GMT
        Subject: CN=fae5f6a7-2884-4446-90f9-ca898c18565c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:e7:ae:66:7a:d5:3e:bf:e1:b4:f3:81:62:
                    81:ec:48:15:e9:a8:64:8b:fc:5c:dd:27:b0:22:01:
                    36:2a:53:32:1f:b4:f3:b4:87:76:b8:7e:e7:16:05:
                    d0:c0:14:91:98:36:db:d8:e8:fe:8d:6a:71:97:bf:
                    ca:83:7f:e9:d9:50:3b:c1:a0:6b:d2:0c:db:de:96:
                    7b:79:34:7b:c9:13:a3:30:ca:21:b2:f6:48:84:47:
                    6a:e9:3d:5d:01:01:09:0f:1b:d5:c1:db:03:80:bf:
                    49:21:77:f0:7d:cc:69:c2:f3:6f:63:f9:90:c8:2f:
                    fd:21:7f:03:3a:ab:b8:63:74:2c:a0:d8:e6:9b:7a:
                    57:91:a9:e2:5b:b0:ae:e1:94:df:95:7b:63:71:df:
                    83:2b:3b:79:95:99:d0:8f:c9:c9:20:94:1a:67:19:
                    25:e0:69:c5:e2:38:2d:57:8a:c9:8e:76:52:e6:c9:
                    12:e7:0f:40:67:ab:65:bf:fb:90:c8:94:db:c9:27:
                    99:f7:03:79:f3:73:42:28:31:70:f2:0d:a9:a5:81:
                    67:01:5c:f5:74:8f:d6:29:21:19:b9:34:c2:ab:0d:
                    f0:fd:d1:3c:42:ec:e5:fb:6d:3d:a4:d2:5e:59:b8:
                    98:90:a8:67:24:6d:53:e1:93:9a:99:d5:33:d6:2a:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:25:D8:D3:DE:41:E9:88:FB:BB:5A:AC:AF:6D:BF:F5:82:AA:18:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:9e:90:a0:da:b6:26:09:33:ae:6b:bc:74:66:c8:fe:35:
         29:7f:ac:5d:21:3e:c4:ad:94:6b:5e:1d:ea:75:9e:0b:cb:5b:
         4d:3e:8a:9f:3b:8b:6d:d8:e6:75:2b:42:8f:1a:92:09:d5:bc:
         05:ef:3e:8f:47:5d:6c:14:3d:9e:e6:8e:3d:45:9b:b6:17:b0:
         d2:aa:a7:c1:f7:a2:21:8c:27:33:6e:9b:51:7d:08:a9:6b:79:
         39:cc:2f:e8:93:ea:b5:21:1f:ec:12:ed:77:88:07:38:be:d9:
         9f:c8:26:86:59:6f:c5:80:91:34:a5:4a:f5:c4:66:b5:63:c3:
         6d:c5:e2:0e:fb:af:de:8a:5f:fb:5f:11:8e:eb:39:b1:2d:b8:
         5c:1c:1e:a7:f1:85:7d:92:df:9c:48:b4:31:61:eb:0a:d3:80:
         26:da:5d:df:ec:27:63:62:7e:61:74:97:e8:91:ce:2b:8c:c9:
         60:bd:69:bb:f3:3c:60:ac:c3:ef:b1:00:2b:34:7e:43:96:7e:
         33:b0:ff:51:7f:c3:9f:51:54:55:fa:07:fc:0a:14:b3:ff:b5:
         ac:4c:3c:f8:f0:d3:c7:ee:62:f9:d7:d7:54:b4:20:bc:b0:f3:
         81:c3:0a:db:41:37:ce:fc:c8:19:2f:39:90:a7:df:a7:5e:53:
         78:6e:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:17 2025 by rpki-client