Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/9a4037b2-8eee-396c-9018-b5b3bf590edb.roa
File:                     9a4037b2-8eee-396c-9018-b5b3bf590edb.roa (raw, json)
Hash identifier:          O8GycZ8wLUdjNjJqAOrCkwdmSuXnpPx88kgi+ELKsKE=
Subject key identifier:   AE:32:F2:29:EC:9E:C8:DE:DC:1E:0B:95:16:4C:F5:DF:A3:D1:A3:DD
Certificate issuer:       /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial:       010D0C9F432858483E1ABC953AB84BA78EB4F0C0
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/9a4037b2-8eee-396c-9018-b5b3bf590edb.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     395480
IP address blocks:        192.154.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:bc:95:3a:b8:4b:a7:8e:b4:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=7348e2a1-5791-4652-97a4-0f88042caef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:f5:2e:96:ca:b8:12:4c:a0:de:33:07:a7:
                    e3:a8:2a:13:90:d6:40:e3:d4:3c:ca:0a:8c:f0:46:
                    c0:a8:14:e5:77:82:c1:d8:27:36:28:ec:ef:e7:b2:
                    52:cf:f7:bc:03:2c:f5:44:7d:b8:6f:cc:e1:51:ca:
                    2f:71:89:04:dc:d8:6d:2e:51:72:53:9d:c1:4c:2d:
                    67:ba:dd:d8:e6:c5:63:75:b7:42:6c:1e:62:af:e5:
                    a2:2f:d6:8b:dc:51:b4:44:5a:f6:ef:5a:34:8e:91:
                    06:8b:85:27:6b:c6:06:57:0f:32:12:17:05:d4:31:
                    8a:2b:9e:c3:03:65:d4:c0:a6:c2:10:1e:7e:1d:9c:
                    95:48:07:c7:1d:6d:d5:9e:c3:96:f3:46:d5:02:12:
                    7b:ba:95:f2:4f:a1:02:13:74:e8:b0:11:6b:36:8a:
                    fb:9d:1f:99:b4:21:49:b4:4a:6c:49:76:a9:f8:f5:
                    33:ea:18:e4:96:4b:a7:da:0d:aa:60:df:82:48:5e:
                    0a:48:d6:37:46:16:a2:10:30:79:d0:c2:a5:85:19:
                    7f:13:8c:f0:34:e6:c6:c2:46:e0:97:47:80:be:51:
                    6b:f2:43:41:7e:d9:f2:e3:ee:df:d4:6a:63:7f:b2:
                    d1:e8:37:0f:b6:4c:cf:fa:64:86:21:dd:e6:5b:2a:
                    23:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:32:F2:29:EC:9E:C8:DE:DC:1E:0B:95:16:4C:F5:DF:A3:D1:A3:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/9a4037b2-8eee-396c-9018-b5b3bf590edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl

            X509v3 Authority Key Identifier:
                keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:5e:9d:b7:1f:0a:af:3b:1b:fe:93:f0:d1:bb:0a:e2:fd:50:
         3d:e1:12:bc:7a:da:f7:42:0e:34:61:f5:15:81:c2:1d:17:45:
         58:57:71:e2:07:2b:1d:65:fd:15:a8:61:8a:e5:40:75:7a:e8:
         6b:d3:a8:c3:b8:61:fc:10:6d:dc:75:96:54:30:ab:5f:08:1f:
         7d:34:00:ec:ee:60:fb:30:f4:fb:9a:b2:49:a7:1b:8d:36:db:
         e7:6d:f3:78:7d:65:8e:62:ee:46:2c:f0:1e:d6:e1:fe:74:78:
         24:51:d7:9d:d8:0d:37:d4:9a:85:9d:06:28:4b:9c:ba:20:3c:
         dd:5c:05:50:42:f4:2f:0b:98:c5:a2:81:9c:a6:17:2b:21:67:
         38:99:01:fa:72:4c:e8:e4:9b:e7:9a:04:a4:91:fa:73:2e:cb:
         c2:21:95:ef:be:fc:60:13:50:36:c3:da:2c:b5:a8:07:95:d5:
         92:ed:c0:19:37:22:cc:0e:9c:c7:f4:74:c4:36:6e:cf:ab:7e:
         a6:2f:f4:1d:51:ae:af:05:b5:82:15:c7:fe:ef:b5:6e:a4:88:
         30:9a:16:aa:73:df:aa:28:c4:31:82:0e:f4:97:ee:0e:75:d2:
         62:29:25:2c:67:1f:78:64:8d:19:54:a2:9f:fa:6a:be:f7:88:
         ea:c9:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:03:25 2025 by rpki-client