Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/508022e0-cf77-3153-8e8c-fbf8efb42b3c.roa
File:                     508022e0-cf77-3153-8e8c-fbf8efb42b3c.roa (raw, json)
Hash identifier:          6mp9ql3D6dy6mkP4FhYnsA58rLaCoxAbUATNQhFw6c0=
Subject key identifier:   FC:A0:0F:AF:1D:57:1E:46:6B:04:1E:37:BD:5B:CB:26:F2:ED:D3:C6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858487CEB6AB04B5DF970A6FD4400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/508022e0-cf77-3153-8e8c-fbf8efb42b3c.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     397215
IP address blocks:        156.154.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:6a:b0:4b:5d:f9:70:a6:fd:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=0daac05b-7306-4808-a4bf-f5b63bec3363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:fd:8a:b2:b3:e9:27:b3:e1:0f:7a:a9:81:
                    b9:11:1d:31:fd:3e:a7:b6:88:71:13:d6:6d:1e:35:
                    91:c7:ad:f1:59:48:1d:f8:47:05:fe:0e:06:6c:7e:
                    66:da:58:0d:fe:f6:31:fe:79:90:04:ee:23:d2:d4:
                    16:88:2f:1f:6b:ab:53:92:9b:fb:32:b5:da:10:61:
                    26:db:dd:88:39:72:b4:fe:d3:13:d0:d3:c6:77:e4:
                    57:67:3c:58:e0:2a:d8:59:42:3f:12:8d:5b:80:e1:
                    b0:f1:27:19:3a:00:3e:ea:b0:72:78:c7:ee:1e:0a:
                    58:ae:5e:d1:c3:e1:e2:9a:54:2e:0b:6e:2b:98:ff:
                    1e:71:af:10:4b:3d:44:6d:3e:3b:bf:d6:9f:3b:74:
                    b7:47:78:85:a1:68:79:cd:26:1d:10:42:0e:6e:dd:
                    cd:fd:5d:c8:a7:23:26:ce:2c:f4:09:1c:b1:9b:fa:
                    05:06:30:9d:56:c3:07:c8:cc:b9:92:f9:bc:c6:d7:
                    2c:d3:d0:57:9b:24:19:3a:85:31:27:b4:ed:b6:88:
                    76:03:8f:cd:35:17:27:df:d5:16:b2:99:49:6b:8a:
                    ed:98:63:9d:c3:da:0d:5c:c6:d8:8d:3a:aa:0d:e5:
                    92:0a:91:4c:1f:fb:75:57:de:e0:ac:d7:56:b4:db:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A0:0F:AF:1D:57:1E:46:6B:04:1E:37:BD:5B:CB:26:F2:ED:D3:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/508022e0-cf77-3153-8e8c-fbf8efb42b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:7d:c9:11:9d:d9:64:42:c2:05:e5:e6:ac:e6:e3:81:61:
         5f:d6:ff:7f:9e:ee:8c:2b:01:a8:7c:a1:80:2f:3c:39:07:39:
         85:b2:29:8b:d8:1c:78:db:c2:b2:37:44:25:7c:5c:ec:e8:13:
         5d:2a:ec:a9:ef:d3:b6:e5:18:91:11:41:53:24:11:f7:26:7f:
         74:cf:02:99:65:61:2e:06:13:ae:b0:b7:28:8c:e2:37:74:c6:
         2c:2a:96:df:f0:83:26:3c:c3:9d:11:2d:4f:cb:34:92:e0:4b:
         ce:46:b0:9b:69:a4:50:9e:58:34:10:f5:0a:9a:1c:a7:a7:2c:
         85:aa:5f:0a:d8:9e:5d:d1:d7:f0:e3:30:d4:ac:40:72:d0:58:
         93:d4:b9:fa:8f:5c:38:f8:13:7c:23:18:6a:7f:1a:d8:ad:de:
         45:c1:29:65:11:01:d6:6f:2b:4c:35:d8:1e:fa:08:f2:a4:50:
         15:72:58:de:0c:2a:bd:97:53:7e:f4:5a:12:6e:af:de:9a:05:
         cb:7c:d6:2b:93:04:d1:ce:77:b8:af:9a:54:20:17:7e:fb:80:
         e3:32:98:40:a2:c9:b7:f4:67:a7:9c:7d:a2:e4:c3:43:47:9a:
         f6:cf:4d:04:2d:3f:ab:ff:c4:35:60:95:ce:35:ca:8b:4a:5c:
         0e:9a:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:25:59 2025 by rpki-client