Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/b4dee419-4614-3364-b34d-09b1267b0f1b.roa
File:                     b4dee419-4614-3364-b34d-09b1267b0f1b.roa (raw, json)
Hash identifier:          Fpa3o3Oxxw/ZXS4lgf9qi00Krh+U19rgrD2KSLjfdvA=
Subject key identifier:   88:F7:58:A7:44:7E:97:3F:6C:84:49:6B:8F:30:57:04:8E:6A:B7:FA
Certificate issuer:       /CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
Certificate serial:       010D0C9F43285848345565788F1EC461CE62C280
Authority key identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/b4dee419-4614-3364-b34d-09b1267b0f1b.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     6461
IP address blocks:        136.175.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:65:78:8f:1e:c4:61:ce:62:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=5e33b1d0-c12b-4f79-81f0-62ee5249bff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:a6:fc:00:00:d3:c5:c1:61:47:6a:ce:44:
                    6f:67:7c:40:a5:26:43:4d:35:dd:6d:01:c1:2e:bc:
                    3e:fb:89:ea:ad:32:9e:69:8f:85:e4:d5:59:53:37:
                    86:a9:e4:42:00:64:2c:7c:17:cc:6f:8e:0b:82:55:
                    38:31:8d:99:38:0c:da:92:a8:c9:35:11:91:03:27:
                    51:97:be:1e:ec:f4:23:02:af:ad:0b:48:63:e0:44:
                    c4:55:6a:d1:50:f2:83:60:9c:ad:3a:e0:0a:fe:78:
                    e4:af:41:27:f1:19:f6:b0:10:e9:98:70:32:58:ef:
                    6e:43:f9:6c:10:78:23:bc:2a:71:03:ac:e1:02:55:
                    d1:00:f9:7c:f4:85:47:ce:ce:97:48:be:24:d1:68:
                    e9:7a:68:19:4c:31:6f:e5:7e:93:03:c9:dc:06:3f:
                    de:92:ee:a6:24:57:e6:d2:c7:6a:29:ca:70:dd:25:
                    4c:b6:b2:c8:97:28:e8:6f:34:7a:03:31:2d:c2:bb:
                    3d:d8:b4:2f:5d:02:98:ad:50:88:d2:c8:3a:ab:14:
                    93:a2:95:64:50:29:98:21:a6:29:d2:f5:05:39:c1:
                    45:11:a3:9c:f6:f1:43:df:c6:ba:d3:f8:59:25:ce:
                    ad:03:5f:31:39:59:17:7b:ac:1d:29:dd:c3:38:76:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F7:58:A7:44:7E:97:3F:6C:84:49:6B:8F:30:57:04:8E:6A:B7:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/b4dee419-4614-3364-b34d-09b1267b0f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl

            X509v3 Authority Key Identifier:
                keyid:A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:96:37:f3:22:c5:d6:49:04:f6:d7:aa:b6:71:61:b2:c7:04:
         5a:a3:c2:b3:a0:bc:47:d6:89:6f:ee:3c:8b:b6:4d:58:c2:9c:
         9e:45:f3:0c:19:b3:44:ab:9b:ed:99:02:0f:1f:cf:d4:91:2d:
         9f:1f:0c:3a:32:7f:c4:2d:75:42:f8:42:17:f7:e6:bc:f8:09:
         80:0c:bc:92:70:7e:49:b4:5e:30:a0:82:86:70:75:ea:4f:b0:
         fc:60:b1:98:ca:19:12:e4:60:19:03:62:b6:00:d8:0d:87:f2:
         8d:5f:2b:81:87:72:c3:0e:36:9d:90:44:83:a5:32:b8:9c:43:
         83:0f:7f:16:d8:30:ea:2d:1b:8e:1e:71:09:92:15:51:25:d0:
         78:35:8c:6c:c8:db:bf:9d:b8:74:18:6a:5c:28:7f:b4:fc:27:
         0b:63:88:5e:37:2f:f1:73:66:a4:6d:58:86:d4:58:7c:b6:03:
         48:b8:69:f2:a0:40:d6:9a:bc:d0:2b:de:f0:20:a4:30:0c:66:
         28:67:80:52:7d:be:43:80:fe:1f:68:04:d4:77:8f:9e:ee:1d:
         ac:b3:78:c6:8f:ca:a3:1b:35:eb:b7:41:bd:80:bb:e1:ff:8f:
         d4:8e:8e:bd:3e:da:38:77:3e:9c:3c:dc:a6:18:f6:07:dd:61:
         da:6a:95:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:26 2025 by rpki-client