Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5adb5827-e6ce-3d30-9b00-b6c58c3bca62.roa
File:                     5adb5827-e6ce-3d30-9b00-b6c58c3bca62.roa (raw, json)
Hash identifier:          b6Vb2XxjEmlIkfDWwcLTQBXYH7kd6f4a+Awd3Vpoip8=
Subject key identifier:   58:6A:8C:4C:F3:11:89:92:A6:C6:81:FB:71:66:41:53:7E:43:AC:32
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285848424ACC264FB7369054C67680
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5adb5827-e6ce-3d30-9b00-b6c58c3bca62.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     59210
IP address blocks:        131.153.205.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:cc:26:4f:b7:36:90:54:c6:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=c9932f74-be20-4d7e-8587-d81bd78ef394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:7f:ea:9f:31:20:ac:ac:ee:3a:95:57:18:
                    47:98:fc:21:d9:85:9e:2e:a5:07:e6:33:3d:13:e0:
                    f2:3a:98:39:30:5f:f5:0b:a4:5b:6e:55:af:ed:6b:
                    7e:06:61:50:06:73:c1:d0:c8:20:8f:ae:d4:8e:45:
                    f4:a3:e6:74:3e:7e:e8:f3:b6:5d:81:e1:66:3d:f3:
                    85:13:cb:ba:71:ae:53:b7:23:e0:81:a4:0c:6a:9b:
                    65:62:83:c5:f6:23:f5:96:4e:08:ec:46:5c:6f:28:
                    ae:98:62:bc:cc:c5:93:a2:19:23:7d:d7:19:47:56:
                    89:f3:c5:ec:bb:35:6d:1c:ca:78:18:5a:62:c9:de:
                    a2:9a:9e:15:72:5a:bb:ff:93:70:ad:a6:0f:c5:60:
                    63:03:ab:6e:b8:ec:1a:27:0e:44:58:01:67:d7:67:
                    f5:49:82:a7:83:d2:94:7e:dc:0c:34:da:09:13:50:
                    f0:1d:3b:a5:2c:18:63:a0:ba:6e:d2:15:1c:de:48:
                    da:9d:22:99:f3:a4:93:04:76:d8:c8:6d:03:3a:5e:
                    a1:a6:42:3c:67:fb:8e:10:60:26:c7:75:ad:8f:49:
                    ec:6d:28:f1:55:40:d8:0c:ad:90:2d:6e:28:23:e2:
                    72:a0:12:8e:79:5e:5a:41:61:8d:4f:73:03:cc:71:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6A:8C:4C:F3:11:89:92:A6:C6:81:FB:71:66:41:53:7E:43:AC:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5adb5827-e6ce-3d30-9b00-b6c58c3bca62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:75:61:2c:97:f2:17:7c:9b:b8:86:d0:d7:7e:de:37:5e:0d:
         6d:9b:bb:32:55:9c:f5:d4:46:bc:5b:d2:57:c0:e9:62:c6:2f:
         e1:d9:53:1e:14:25:14:04:57:af:e8:be:d6:55:2a:26:2a:09:
         05:fb:88:7e:af:a2:70:2e:9a:f1:8a:45:8d:f3:17:2a:20:3e:
         94:c1:4a:88:2b:be:54:b7:62:03:00:50:57:74:44:0f:b8:30:
         1d:5e:f1:40:a8:b3:ef:51:64:6f:ae:a1:28:90:e5:42:ef:4c:
         2e:6a:db:70:e3:5d:12:b4:d4:dc:80:f0:c2:ed:bd:b0:f2:6f:
         9e:78:41:db:8a:ec:f4:fc:f7:08:45:55:62:b3:88:0d:c2:64:
         d9:8b:b1:58:ae:04:0c:a7:93:bf:9b:f5:3e:7f:7b:50:6c:5e:
         ad:b8:83:0e:50:b6:14:ae:07:c4:b5:34:91:3b:35:d0:19:6a:
         24:ad:eb:9c:53:ff:f5:5b:f7:3b:d3:2d:89:d4:15:e2:ce:54:
         46:71:ff:b7:ae:58:8f:85:ba:42:78:f8:99:42:16:d0:3a:db:
         5f:9c:d9:e8:43:c4:6d:68:f2:a3:28:0b:bb:20:5a:62:34:2d:
         4d:8a:1f:9c:25:4f:b1:dc:a8:b1:f0:8f:a2:0a:2a:e9:b2:b6:
         42:60:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:02:54 2025 by rpki-client