Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a8158f9-9f32-31e4-91ac-c0adf12262f2.roa
File:                     7a8158f9-9f32-31e4-91ac-c0adf12262f2.roa (raw, json)
Hash identifier:          BDTbYbPsWuB0WUyPadRvr8aJj6R8njGpnxkC2He5gNc=
Subject key identifier:   F2:05:73:0D:71:2F:E4:45:43:EF:1E:6D:BF:E4:4B:15:5F:D6:4D:EF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832F0057506C666554613D380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a8158f9-9f32-31e4-91ac-c0adf12262f2.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     12008
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:05:75:06:c6:66:55:46:13:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=f2cedbad-0a92-4fa9-9603-03fd75881fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1f:b5:54:d2:4f:5f:88:cd:a7:6a:0c:54:f0:
                    11:4c:bc:86:70:dc:4c:fc:6c:11:00:d5:a5:d8:91:
                    36:27:90:79:d8:90:17:3e:09:f7:6c:49:96:0a:b1:
                    f0:61:ec:2a:da:4c:cd:1d:e7:06:35:62:fd:ba:b8:
                    57:1f:26:76:35:e9:ba:e5:ae:50:7c:e6:fe:d6:0c:
                    e3:c1:39:b0:ca:06:93:85:f5:60:c2:04:07:0c:c8:
                    e9:20:16:b7:95:ca:5c:4a:f5:92:b6:4b:79:a9:90:
                    8a:5b:30:99:19:b4:2e:58:c6:1c:16:cc:19:ae:92:
                    54:53:78:1a:9a:75:b1:a2:7a:52:d1:25:f4:f4:61:
                    c2:27:af:3c:19:4e:62:0f:84:de:7b:2d:a5:72:9c:
                    cc:6f:29:58:08:e2:e0:ee:33:a3:55:a9:5c:59:59:
                    36:30:7d:c2:f1:a2:7f:45:af:50:32:ff:73:d7:43:
                    01:8b:29:24:c6:3e:05:1d:b2:04:c8:98:8b:3e:3e:
                    67:56:e9:32:e1:54:eb:e8:a2:26:07:8b:11:6d:f2:
                    a1:46:f9:eb:4c:f0:85:1b:82:04:3a:b8:3f:4f:da:
                    0c:77:69:40:1e:30:79:51:fa:92:1f:60:7c:13:41:
                    77:a4:b1:10:4b:cd:15:e2:1c:ba:3b:0d:30:ac:f1:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:05:73:0D:71:2F:E4:45:43:EF:1E:6D:BF:E4:4B:15:5F:D6:4D:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a8158f9-9f32-31e4-91ac-c0adf12262f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1e:f9:70:62:a0:7e:0f:f2:3b:69:e9:55:c5:1a:7c:8e:4b:
         7c:79:03:6d:60:8d:bd:b2:b4:26:9c:f8:45:2b:dd:f3:57:6d:
         81:aa:04:6e:ab:9e:7f:87:72:de:45:a1:d0:75:b5:c7:d7:96:
         df:8a:d0:02:dc:18:00:df:e5:f8:77:9d:07:35:20:02:30:09:
         ff:07:f8:a0:4a:b4:47:61:43:a1:47:a3:66:0c:eb:34:29:ae:
         46:04:4f:cf:15:37:6d:f3:e3:2a:76:63:5b:3c:e9:d0:9e:f5:
         4b:a0:cc:d3:e3:df:90:40:cd:b0:46:2f:25:56:c7:ea:c2:d7:
         5e:6f:ad:2b:27:1b:65:a5:45:85:20:66:1c:93:fa:94:8a:ff:
         72:26:44:bf:af:7c:60:b0:83:fe:07:1f:64:da:cc:61:d4:3a:
         ad:5f:e1:33:8d:a5:1f:f5:98:9b:e0:bf:ba:77:f2:2c:70:06:
         4a:ec:53:04:f8:32:6d:ba:f3:b0:ec:1a:47:b6:5c:0f:f4:b1:
         0a:2f:c2:ee:72:79:38:fa:57:d3:e9:ce:d1:9f:ab:c0:69:6b:
         e4:3b:8f:1d:68:ba:2d:28:33:4c:4f:ae:40:e9:15:e5:41:5c:
         57:05:55:0b:b3:9e:5f:e9:1a:73:9f:21:31:a0:d6:94:48:b0:
         08:e9:22:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:55 2025 by rpki-client