Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa
File:                     21ed9c33-b646-337e-9363-ff7e1a1cf097.roa (raw, json)
Hash identifier:          mgNQLICPKQh94XMRqXRi0FLQEnceL+77Br8IjY3jjXc=
Subject key identifier:   ED:79:DA:AC:19:B4:74:13:6C:7E:F2:59:6B:A7:55:B7:E1:63:90:D3
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F432858486C2B190665599C51B9804400
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     15257
IP address blocks:        173.195.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:19:06:65:59:9c:51:b9:80:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=2a979c33-e3c8-4546-a1a4-0b7f9101ebef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:6e:f7:84:ea:b5:6a:a8:e0:31:fb:f4:84:
                    d2:3c:79:d2:c9:d0:60:48:5a:50:6a:59:b3:f8:a7:
                    6d:76:4f:9e:29:86:36:db:4a:32:26:93:db:da:8b:
                    fb:db:55:ef:49:e1:d0:3f:62:cc:89:0c:50:f7:c6:
                    d8:e1:23:28:f5:85:44:73:27:43:6e:77:75:22:b8:
                    37:8f:7f:54:a9:01:9f:60:3a:6e:57:a3:fd:72:49:
                    cf:6a:71:d3:13:cc:df:88:c4:a0:c6:c5:e1:a2:a6:
                    ff:bb:00:38:e4:fc:13:74:bf:9c:22:de:76:69:f8:
                    c4:4a:ab:30:36:56:66:48:50:c4:44:4f:9c:a2:8a:
                    f1:91:e1:9e:d4:cd:c9:3d:25:b3:b7:3b:8b:62:f8:
                    76:3f:b5:a3:f1:6f:25:0c:f7:80:21:a3:82:08:e0:
                    86:37:30:8e:ad:32:4f:3f:60:59:75:97:37:77:c7:
                    57:8c:f8:0a:00:d2:e1:98:1a:a2:9a:e6:62:c8:15:
                    d4:bd:55:22:e2:c1:8c:66:22:b1:35:89:77:57:b7:
                    aa:57:da:6f:4e:93:bb:bf:14:65:c3:35:cb:b1:d6:
                    e5:2f:14:93:26:a2:ac:bc:86:9f:25:a7:1e:bf:62:
                    7e:a2:9b:c8:37:16:31:e8:99:76:1c:9b:c2:f1:04:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:DA:AC:19:B4:74:13:6C:7E:F2:59:6B:A7:55:B7:E1:63:90:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f4:c3:c5:ed:68:4f:9f:80:61:f0:7c:f9:c1:95:62:75:59:
         7f:aa:2b:84:8b:c5:af:05:6c:2e:4f:03:fd:b6:ca:cb:6c:a7:
         8d:38:65:e5:2a:5c:3b:68:f3:bb:eb:07:b5:23:29:01:49:31:
         e7:be:a3:96:d0:d3:91:d7:49:fd:b8:07:0e:74:61:39:98:65:
         8d:dd:8a:39:2d:61:43:76:34:d0:4d:52:15:fb:c8:4a:dc:38:
         1b:e6:f2:15:65:ca:ea:f3:2e:36:c0:f2:bb:10:cc:6a:be:9b:
         33:ee:68:4f:6d:0f:d9:37:94:9c:68:d8:39:2a:db:09:b1:6b:
         ff:08:6f:b8:df:84:14:76:99:b5:d3:a1:d0:a3:11:dc:62:4a:
         33:7f:cd:13:19:30:f2:2d:8a:d1:db:8f:e7:be:a2:a7:0f:bb:
         00:f8:37:f7:21:54:9f:14:40:b2:b2:43:12:62:0a:56:f5:56:
         73:0b:eb:ca:ee:9d:2c:0a:6d:e2:58:02:69:23:b4:03:d8:03:
         b6:62:04:8d:37:66:ba:2a:49:9c:67:0e:0f:85:1b:ee:62:df:
         06:41:c1:b5:fa:d5:e3:08:dc:b4:6f:c8:df:32:5d:13:0b:54:
         77:38:24:d3:6a:18:04:53:f5:8c:bf:ff:6c:62:c0:a2:48:ee:
         92:69:b9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:27:39 2025 by rpki-client