Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9fd32855-40cd-3f5d-8971-b28c978814cf.roa
File:                     9fd32855-40cd-3f5d-8971-b28c978814cf.roa (raw, json)
Hash identifier:          MVl/Uel2wixxE1MTPS1dyo1PLob63Z7ydx3RkWIFxZ4=
Subject key identifier:   96:C7:5D:59:CA:F4:09:8C:BC:7E:17:28:33:B1:D8:4E:09:9A:0A:3F
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858482D5A8A511315F129C6FCB500
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9fd32855-40cd-3f5d-8971-b28c978814cf.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     50389
IP address blocks:        131.153.73.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8a:51:13:15:f1:29:c6:fc:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=ae1f06c1-f0ce-4c9f-9f3d-e76c237b370f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:54:57:cb:25:84:f5:36:22:01:a2:8c:a2:
                    ce:3d:3e:89:5b:0f:9a:74:c6:53:99:ae:a1:7c:a9:
                    3d:87:32:d5:7d:8a:db:1a:04:68:5c:22:2b:9f:40:
                    23:fb:81:5c:f2:3c:cb:57:1f:d2:07:b6:dd:e0:0f:
                    aa:f1:d1:d0:11:11:f4:71:e1:3a:9a:42:51:4b:ba:
                    8e:dd:7e:08:21:a9:99:9c:7f:e6:b1:52:9b:78:80:
                    80:68:a7:a9:df:bc:1f:ab:e1:11:12:10:ac:23:ca:
                    00:e8:86:c0:e5:57:31:15:e5:80:62:98:92:e2:2f:
                    9f:5b:98:9d:f8:5f:82:a2:ce:cb:6a:fb:18:12:93:
                    86:ff:60:68:3a:dd:c2:0c:43:99:ed:76:46:43:e3:
                    08:b6:ec:7f:93:51:93:63:5a:17:6d:1c:30:1e:ec:
                    3d:90:46:0a:87:52:73:62:d0:05:b0:e5:97:5a:b4:
                    a8:8c:e8:f6:7c:a9:64:c4:c7:48:0d:3b:e5:84:6e:
                    b3:a5:5b:60:f7:d3:f3:97:86:59:d8:22:6b:e8:29:
                    0a:d0:35:93:35:31:79:b5:bd:36:d0:81:58:38:fb:
                    a0:86:28:73:a8:be:81:26:17:8c:ec:f2:e1:84:24:
                    36:f8:d1:3d:b9:dd:d2:95:6c:60:80:0b:d8:58:57:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C7:5D:59:CA:F4:09:8C:BC:7E:17:28:33:B1:D8:4E:09:9A:0A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9fd32855-40cd-3f5d-8971-b28c978814cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ed:2d:c0:74:e2:1a:ea:01:5f:80:d4:27:83:d6:4f:70:a6:
         50:4a:34:c4:69:0e:55:91:8a:c6:a9:10:b5:25:d9:79:de:87:
         8e:01:5e:26:88:2c:ea:e8:b6:81:dc:70:b5:f1:a3:70:de:b3:
         50:8f:cd:e2:11:f6:b3:90:ed:67:aa:2e:d5:57:de:7d:76:e7:
         8f:6d:97:be:2c:9a:63:59:00:c2:42:4a:a8:6f:2f:ca:1c:18:
         14:98:cf:1d:5a:28:0d:ac:cd:03:af:11:52:23:ad:1f:ab:07:
         09:33:4c:66:f0:e8:ab:a4:fe:d9:56:70:4f:bd:67:de:fe:eb:
         f6:49:0a:e5:dd:9c:86:8c:e6:75:8c:1e:10:44:1e:39:6f:06:
         a7:1a:6b:e4:d5:71:b8:54:06:79:7a:89:b5:99:64:96:0a:9a:
         b5:f2:b1:55:e0:48:92:c7:eb:53:28:be:bc:2a:24:02:b2:69:
         d4:0c:84:75:7f:29:df:c5:03:5d:ec:d0:69:03:9b:57:3a:68:
         2d:84:07:15:57:dc:d3:f6:f5:dc:c2:e3:d3:ea:54:d2:0a:cd:
         7c:41:f7:24:85:a3:bf:73:c1:43:11:f9:1e:e3:22:c1:97:b5:
         5d:77:ea:65:8a:80:09:3e:82:19:8a:84:f7:53:af:a0:d0:b7:
         6a:c3:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:12 2025 by rpki-client