Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/26b35f44-5477-32a0-ae24-7a4e284d8322.roa
File:                     26b35f44-5477-32a0-ae24-7a4e284d8322.roa (raw, json)
Hash identifier:          IZDqa4OKUu99ZdZ8UcRUnUMcv9ROEWlWg9ekzFTY61U=
Subject key identifier:   64:9A:7C:6B:D6:BB:1A:F6:7F:3A:66:39:E3:95:EE:44:A9:89:EC:37
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F432858488DAB423F8E1EA72CC1A0CE80
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/26b35f44-5477-32a0-ae24-7a4e284d8322.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     18994
IP address blocks:        162.134.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:42:3f:8e:1e:a7:2c:c1:a0:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=fa702474-67d9-4525-a8ab-1d217d135977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:99:f4:41:a8:46:9c:aa:c1:6d:4e:21:cc:
                    57:04:57:84:8a:f8:e5:87:8c:09:10:6c:4f:e5:19:
                    67:a3:96:3b:0a:89:f1:89:46:a8:d9:f6:bb:95:e0:
                    ab:00:45:24:b3:ee:a7:40:9d:be:06:75:f3:66:a2:
                    7b:0b:8f:46:46:86:97:b3:1b:da:51:67:29:84:c2:
                    e3:6b:ee:2f:1d:f1:17:9e:64:7a:a8:de:f1:7e:d6:
                    bd:43:7f:76:3b:3a:06:c1:88:10:e0:00:94:1e:3e:
                    cc:3e:4e:4b:2f:24:d6:1e:ea:46:c8:8d:33:4d:42:
                    0e:8c:4c:77:65:ce:6b:a3:85:cc:26:6f:f0:c1:63:
                    c4:21:61:ac:d4:0e:3c:63:94:ca:ca:7c:8b:7e:2b:
                    50:58:ed:08:aa:80:ba:bb:4f:b0:ee:f1:9d:4d:01:
                    ea:0e:b5:32:4c:3d:1b:d2:15:3c:f5:cb:3d:16:46:
                    19:e4:0f:b2:23:23:31:b9:0c:88:e9:ed:5f:92:a0:
                    a7:86:b9:40:88:91:1c:5e:52:b4:42:43:71:b3:af:
                    3a:c7:6c:be:ce:11:8b:38:e7:95:dc:8b:d3:94:8b:
                    02:ea:b4:1c:ec:4c:48:21:53:3c:e3:95:01:e4:79:
                    a3:93:0b:48:3c:3e:4c:d2:4c:32:06:5f:39:a4:d4:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9A:7C:6B:D6:BB:1A:F6:7F:3A:66:39:E3:95:EE:44:A9:89:EC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/26b35f44-5477-32a0-ae24-7a4e284d8322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9e:ea:c2:d3:98:79:df:25:63:f0:a4:e5:50:70:b9:4a:3b:
         63:de:a8:47:63:6d:2d:02:f3:8f:a0:b4:73:3e:2b:ce:80:09:
         e6:45:99:6c:09:3c:dd:f5:be:c8:11:77:97:c8:31:ea:1e:a4:
         31:19:e4:de:cf:02:8c:cf:22:34:1b:e5:49:12:0e:8c:ca:4f:
         25:70:32:fe:af:d0:42:08:0d:41:c7:64:74:f8:72:5d:0f:85:
         5b:d9:df:a2:d5:94:f2:5d:4c:02:53:72:fb:a1:06:ef:46:cf:
         b5:77:ab:bb:13:2e:1e:39:2f:ec:d5:60:08:bf:a9:7d:82:f8:
         c6:d8:1c:ea:28:df:87:70:e0:1a:f0:cb:c0:88:fe:1b:32:b7:
         40:38:eb:1d:05:38:90:dc:26:34:9a:aa:97:97:f6:26:d5:ec:
         ac:db:29:60:3b:8f:7e:5b:7b:8c:da:30:b9:b7:89:aa:99:74:
         22:be:76:82:31:22:2e:8e:c0:12:a2:68:70:ff:33:75:38:76:
         6e:c2:c2:aa:25:e0:9f:e5:7b:a9:ba:6c:b8:20:f3:7a:66:fc:
         27:40:6b:4a:28:f6:52:82:26:fc:b8:a0:67:dd:57:5c:ae:2a:
         14:75:2b:84:50:10:3e:70:63:f5:37:ec:cd:ac:40:fd:25:38:
         aa:8a:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:02:35 2025 by rpki-client