Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa
File:                     84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa (raw, json)
Hash identifier:          vyrMzOkj9auiOsNKMTeH0imIrQW/qtCV9zIrtriHCec=
Subject key identifier:   08:A7:B1:A1:73:DD:3F:15:BD:73:DD:B9:B9:FA:9B:CA:20:34:0C:C3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848159FFA42F151AC177053DA40
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     7203
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:fa:42:f1:51:ac:17:70:53:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=6a778969-4532-4824-9298-977334ac1d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:ad:55:47:dd:41:6e:24:74:90:06:0c:65:
                    1d:60:d6:3e:21:e6:72:6e:1d:17:3a:47:c8:1e:a0:
                    3a:51:35:d5:03:21:06:83:9b:55:9b:97:4e:da:6e:
                    2d:8d:24:52:2c:bc:9f:ef:e4:de:6a:e2:82:60:e1:
                    47:6e:9c:c3:22:30:65:07:35:45:6a:30:77:0c:b5:
                    86:c9:15:dc:29:77:95:58:7f:5e:b0:41:f4:d4:5a:
                    26:8f:bb:0e:cf:c3:5a:56:dd:80:c6:a9:01:20:2d:
                    7e:9d:df:81:8d:c0:5d:db:69:95:f4:0c:d7:94:76:
                    10:4f:a2:0c:b5:c3:26:eb:08:c6:c5:6a:a6:43:1a:
                    ca:8a:81:14:2d:a2:68:b7:ac:2b:ce:c3:90:df:fe:
                    60:f4:e7:5e:02:2d:9b:b0:53:a2:fa:22:02:2d:74:
                    57:de:f5:a7:ab:ac:ef:75:a6:62:f3:2b:2d:98:51:
                    62:bc:52:38:08:05:ce:32:67:40:89:96:d5:bd:cf:
                    72:1e:a1:92:ee:6a:f6:c8:f9:b0:4f:58:7b:22:cd:
                    70:f5:26:97:8f:06:67:1e:a4:22:0c:17:9d:c7:fd:
                    32:4e:7f:e6:77:19:e6:f8:5f:a8:d7:5a:5d:e9:c9:
                    7a:95:82:e4:5c:21:17:df:de:43:06:3c:f1:b2:51:
                    46:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:B1:A1:73:DD:3F:15:BD:73:DD:B9:B9:FA:9B:CA:20:34:0C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:7a:db:d9:9d:9a:d7:7c:7b:29:e8:01:3e:af:09:2f:b8:
         c0:c9:e3:b9:59:55:9c:34:bb:c3:14:2c:1e:b2:57:1e:37:62:
         31:82:7c:7e:ce:d3:aa:8c:96:b3:99:fb:ce:2f:df:1e:4f:c3:
         98:b9:cd:c1:fd:98:73:c9:15:f1:93:46:94:5e:36:a6:d9:01:
         33:cf:57:c1:b2:3e:3c:9f:ef:13:d3:2b:e9:94:a0:ca:03:c9:
         d5:fd:01:bb:c4:35:1b:87:d7:e8:ee:50:fb:e8:5e:bb:cd:61:
         9a:ac:05:f1:59:9d:b7:8e:aa:70:d0:3b:9d:b3:eb:47:e4:a0:
         77:d4:0a:33:cc:75:14:ec:d0:ed:aa:4d:69:e7:fc:56:04:b0:
         26:21:11:63:08:fe:ae:98:d7:2f:17:d0:79:8b:8e:41:6c:79:
         7f:ec:fb:0c:ec:62:54:3d:37:fc:d2:10:b9:ea:26:13:75:3b:
         21:00:b2:18:49:91:7e:1a:43:ab:2f:5d:ab:f2:4f:cb:a6:14:
         e2:a2:51:27:21:ca:9a:60:49:fc:02:e9:9f:ef:19:a6:af:77:
         27:bd:b5:9e:1d:12:b9:4d:6d:c5:78:84:28:93:0b:4d:cd:bc:
         72:ce:f8:5a:8a:29:2f:5b:e9:28:58:64:7b:ad:95:e5:44:ca:
         f3:50:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:38:31 2025 by rpki-client