Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/037fc556-352d-3887-b64f-865c72077791.roa
File:                     037fc556-352d-3887-b64f-865c72077791.roa (raw, json)
Hash identifier:          WODlqHcF6IA3FQhpIe7WXaL21K+kYnwHHiLy8NNkLK0=
Subject key identifier:   D4:96:19:64:43:23:AB:BA:E4:9B:DC:37:AF:43:A2:94:2D:D0:33:29
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482EC003B1EEB060DF3B147800
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/037fc556-352d-3887-b64f-865c72077791.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     19437
IP address blocks:        131.153.0.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:03:b1:ee:b0:60:df:3b:14:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=8736d9af-9a4e-4d3a-8cb0-b87d116a8aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d4:53:ff:18:a1:90:bc:3f:14:b9:07:cc:2e:
                    9b:83:64:83:a2:b6:75:08:6b:89:8a:8f:c1:04:bf:
                    d1:f0:52:07:58:24:87:be:69:42:4a:e4:2a:1c:74:
                    e3:fb:6d:d4:3e:dd:68:a1:fe:b4:bd:00:75:51:d9:
                    08:81:8a:2b:d5:48:d9:20:03:56:0b:8a:88:07:e1:
                    04:12:5a:17:7b:4d:be:1f:ad:61:ed:fb:c0:35:89:
                    5c:75:ac:6b:2e:b3:b8:c1:6d:0b:88:2e:fd:4e:cc:
                    0a:77:8d:7d:4e:4c:c3:2d:3d:d9:79:04:2f:56:89:
                    8b:86:de:3e:47:7e:b8:71:9e:68:11:15:ac:d8:32:
                    01:f9:4f:30:94:10:64:dd:2f:32:08:9b:5f:92:1f:
                    50:1c:5b:2d:02:0f:da:25:19:0f:f6:c6:9c:57:e7:
                    a9:00:09:71:c9:d7:67:91:02:44:6a:fe:3e:56:f8:
                    16:90:6c:c8:03:d8:97:a6:f4:8e:9a:50:de:82:98:
                    9e:70:45:37:1b:6e:f9:d9:fa:63:0d:8f:30:ea:10:
                    4e:bb:70:02:3a:06:f8:ac:66:42:1b:12:95:70:be:
                    4b:09:3f:86:08:44:9b:2f:33:96:1f:a8:36:be:de:
                    1b:4e:ce:62:74:59:ab:54:62:e5:d7:ad:93:a9:9c:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:96:19:64:43:23:AB:BA:E4:9B:DC:37:AF:43:A2:94:2D:D0:33:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/037fc556-352d-3887-b64f-865c72077791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:bf:d9:f3:5a:e5:80:37:00:c1:5b:49:17:99:8e:d4:4e:
         c3:45:1d:67:b0:99:15:88:36:5c:a3:43:9e:05:97:88:11:f0:
         48:2f:f9:08:ff:07:e1:74:ee:de:06:c4:eb:f6:94:16:8d:e4:
         a1:a1:79:ec:0a:18:d7:dc:f1:2f:00:31:6a:d9:69:2f:b6:b3:
         22:6b:af:91:00:bb:fc:77:b5:28:ff:79:b6:bd:b4:a2:62:55:
         ba:5b:0b:43:9d:d7:88:78:fd:85:dd:76:6a:06:7f:be:83:ff:
         71:e0:03:b5:f5:1a:b9:5c:12:44:19:f2:42:c6:b3:ac:3b:e0:
         82:42:bf:dc:9a:d1:d7:52:cf:95:b1:fa:a3:4f:2b:ee:d5:5d:
         60:56:37:8e:ab:ac:71:e0:78:a5:f8:a2:ae:e8:bf:46:7b:0d:
         57:4c:99:65:43:28:5a:b9:c3:6c:f4:9c:d1:be:52:f1:67:b4:
         68:a2:0a:4c:da:a4:cb:2c:92:ae:19:10:ae:dd:33:44:fc:ba:
         84:02:92:4b:18:d3:d0:2f:08:33:b0:18:3b:6c:00:af:9d:4e:
         d0:b8:3b:93:e1:3a:e6:2e:4e:31:46:0a:2e:06:29:16:c5:be:
         50:4b:1f:f2:11:eb:2c:a8:74:4a:81:85:c8:74:c7:ac:04:e8:
         67:8e:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:33 2025 by rpki-client