Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27ed4d17-c3dc-3cba-b1e5-752e88b077ab.roa
File:                     27ed4d17-c3dc-3cba-b1e5-752e88b077ab.roa (raw, json)
Hash identifier:          vAk7317d/BiiJOaZLb9b4ype3tXFqeHfTwSVdtFVQgY=
Subject key identifier:   93:AF:1D:56:A3:00:6E:0C:DA:D9:9A:B0:D9:E4:D2:A1:6D:94:67:46
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F4328584839EAC5DB0A95F017BB58E180
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27ed4d17-c3dc-3cba-b1e5-752e88b077ab.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     400544
IP address blocks:        104.156.128.0/24 maxlen: 24
                          2607:76c0:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:c5:db:0a:95:f0:17:bb:58:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=8a38d2ff-1e35-450c-9c0b-a601eb411144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:55:b8:8f:29:b7:c1:38:06:7b:15:aa:8e:
                    dc:7a:38:18:c2:cf:69:9e:61:7b:52:ca:c8:ea:8c:
                    54:49:ed:77:ff:63:ed:10:56:90:59:de:74:45:11:
                    f6:58:91:86:39:7e:ea:d0:18:89:ac:5b:8a:86:d1:
                    a2:d1:c8:f7:7a:79:ca:e0:ce:00:33:d4:32:06:f6:
                    60:62:08:0a:f2:b5:19:f3:e9:d4:67:f7:14:30:cf:
                    58:57:15:1b:4c:38:22:b3:3a:18:ba:39:ba:5f:db:
                    dd:3c:c2:11:87:3f:3a:7c:83:37:f0:77:dd:5f:18:
                    23:07:93:c4:12:fc:0c:35:e9:bc:6e:56:af:eb:f1:
                    2b:be:01:80:32:83:84:6e:d6:52:00:f5:68:31:f8:
                    40:2b:c4:ec:e0:f8:7d:c6:01:3d:31:fe:be:38:c7:
                    91:98:a5:f5:86:e1:9c:b5:e1:ea:89:27:ac:74:38:
                    98:b6:4f:a1:4d:6b:0f:b0:99:fe:09:81:9b:b0:f2:
                    ff:d8:82:a0:a0:ed:ed:d0:ae:40:53:6c:cc:47:c1:
                    a8:8c:e2:74:8f:c5:48:eb:97:e0:43:a8:7c:a8:88:
                    a1:3f:ec:f3:74:07:3d:a2:e1:62:ce:b8:07:22:5e:
                    25:66:08:6f:f4:69:50:f2:2a:96:2a:82:69:fb:8d:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AF:1D:56:A3:00:6E:0C:DA:D9:9A:B0:D9:E4:D2:A1:6D:94:67:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27ed4d17-c3dc-3cba-b1e5-752e88b077ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.128.0/24
                IPv6:
                  2607:76c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:08:36:81:d2:93:22:a1:10:bb:d7:2f:e6:2b:e2:c0:d5:a5:
         f9:e0:79:b5:57:18:f6:7b:e0:eb:7a:00:3d:84:43:70:79:ee:
         00:db:7d:fc:89:c3:3c:58:0c:d2:b2:62:ef:ca:e0:a5:ff:8d:
         e8:99:54:42:0b:19:f8:4a:6e:92:4b:d8:e6:c4:bd:8f:f7:b5:
         4e:cf:21:f4:88:c7:03:ca:d8:3f:54:6d:27:18:e7:1a:d9:6f:
         94:63:0a:f6:f8:09:08:34:d1:87:c2:bb:ae:00:06:15:e3:f8:
         c7:50:d6:83:e2:46:5e:9f:9b:65:00:e5:fc:1a:54:86:c7:50:
         65:bf:db:23:a1:6a:6e:67:d8:b1:60:e6:7f:16:34:bb:19:86:
         5b:a1:c7:59:f3:39:95:08:83:5e:9f:66:f1:12:4f:4f:45:90:
         29:4e:2e:e8:69:fc:cd:32:60:ea:be:a1:54:75:cc:a3:a7:98:
         89:a3:86:ae:33:b5:fd:54:87:5e:31:f7:04:db:86:02:fe:dc:
         3d:bc:99:af:64:45:d0:82:07:0f:2f:3f:b6:cf:75:c5:ae:f4:
         97:64:79:04:bd:cd:dc:0b:ff:00:85:85:65:fd:47:da:44:90:
         82:32:5e:f4:ed:34:7e:3f:07:ad:3f:0a:a1:e5:a0:93:96:dc:
         cf:5a:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:55 2025 by rpki-client