Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa
File:                     4ebe83df-81c7-321e-a9a9-64378ff786f2.roa (raw, json)
Hash identifier:          xaxS18MRcpK0cEdlKVSa75vsZXhQXelvd4v2L8Hl+Ps=
Subject key identifier:   38:1D:59:53:1F:21:E4:95:6E:32:E7:3D:BE:E7:E4:95:EF:A6:44:A6
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482D5A8A8D4893D96F4E561980
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     19181
IP address blocks:        131.153.83.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8a:8d:48:93:d9:6f:4e:56:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=0f5966a3-47c3-41b3-ade9-69b55538ca89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:a2:1e:6f:71:a6:3b:d2:2f:48:79:13:dd:
                    eb:56:5f:79:b6:10:28:45:30:c5:b9:a3:22:e5:52:
                    82:35:49:82:e3:76:62:03:16:0b:57:85:6b:71:bb:
                    56:09:a3:c0:5e:4d:30:60:76:27:96:63:a0:f1:5d:
                    0f:4f:c4:dc:02:3c:20:c7:a7:15:35:28:94:5e:2f:
                    8a:e2:70:72:18:ba:dc:27:39:bb:f1:b3:bf:6c:68:
                    2f:68:45:d2:27:5b:50:94:2d:9f:08:19:3f:dc:12:
                    7a:4b:38:dd:d5:4c:d2:19:83:50:1a:3a:14:b2:83:
                    8c:62:0b:22:db:2a:b4:b5:73:23:dc:d3:06:b0:45:
                    0c:f7:ac:0c:92:c9:fc:4a:02:31:0b:24:81:f5:fc:
                    b2:7c:32:b9:98:19:75:82:ee:4c:ea:02:31:08:c9:
                    8b:63:2f:7b:37:38:46:d7:53:e7:e8:61:d1:b0:e5:
                    ea:0d:24:eb:dd:58:75:d4:5a:2b:0a:3a:7a:e2:e6:
                    1c:cb:7a:d2:4a:4c:46:11:7f:d0:16:58:7e:b3:f2:
                    c7:74:11:81:3b:dc:8b:d5:92:d1:cd:c2:b1:c5:75:
                    3e:8f:14:2d:17:c8:d5:22:73:48:66:9c:3b:39:a1:
                    6f:d0:f1:43:c5:04:50:cb:73:f5:ba:1f:89:81:af:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1D:59:53:1F:21:E4:95:6E:32:E7:3D:BE:E7:E4:95:EF:A6:44:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:53:ca:39:a0:ad:84:bd:a8:5b:a1:a7:8b:a8:db:c9:35:91:
         35:82:1c:ce:10:a6:d9:58:6a:4b:eb:00:69:9a:d5:d4:0b:eb:
         3e:4a:bc:74:f9:18:fb:49:82:d8:db:ca:3d:07:71:75:3d:0d:
         99:b0:cc:53:a3:aa:00:5b:49:c9:fe:54:25:01:27:a7:4f:cc:
         f2:39:96:c8:cb:4b:9e:cd:8a:ca:c7:99:74:bf:05:c6:3c:7a:
         03:51:f0:7f:12:ab:aa:f2:04:f8:99:76:09:d3:00:41:0f:a4:
         e4:18:11:e8:18:20:50:60:84:be:45:b0:ff:40:13:a3:03:55:
         6f:d9:ef:17:05:8b:05:6e:1a:4a:76:ec:ff:85:cf:98:c8:87:
         33:7d:b6:cd:97:90:18:30:00:7f:91:82:60:02:f6:0e:03:2b:
         02:37:89:40:2c:b3:c2:fe:c5:9d:7e:e2:5c:bb:43:d1:f4:44:
         56:e8:09:af:1b:1c:1a:89:b3:be:80:eb:c1:7d:bd:dd:90:b8:
         d2:16:81:ba:08:74:40:83:eb:5e:18:ae:ee:b2:c3:09:95:0f:
         21:72:2a:32:e6:b8:05:2d:93:8c:5a:c6:fa:c9:01:2d:5b:42:
         f5:7c:8f:fe:68:8b:da:e4:58:17:1a:7c:89:06:3b:66:be:eb:
         6f:69:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:13:11 2025 by rpki-client