Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa
File:                     8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa (raw, json)
Hash identifier:          9aUAhzizJZVYxjCf8yHakY39iWAUabYefH0jPGyMFgw=
Subject key identifier:   8F:BE:71:2C:36:8C:95:8C:40:C5:72:FE:07:5B:69:5C:3B:19:59:93
Certificate issuer:       /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial:       010D0C9F4328584800AFC9B205622CF477E66C00
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     16509
IP address blocks:        64.29.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c9:b2:05:62:2c:f4:77:e6:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=73c35c19-9ce9-4dd1-a4f2-47a1250f6fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:48:62:f0:fa:77:88:63:15:d6:29:c4:3c:
                    17:e4:fb:7a:fe:e2:18:4e:bc:f1:82:6c:6b:4c:16:
                    31:62:05:2a:2e:58:05:04:8a:c1:11:50:6a:26:b1:
                    8c:a6:08:bb:a3:b5:45:fc:c3:87:00:56:d7:f3:b2:
                    74:92:a3:52:48:2e:a8:0e:57:cb:65:0a:e9:ca:e2:
                    ab:f1:e6:b5:9e:f9:10:57:ff:ca:61:e6:e9:27:42:
                    c2:7a:34:09:45:0d:56:8a:64:2d:f0:d3:34:ff:fc:
                    a7:20:00:01:11:1f:00:20:9c:49:5a:2b:26:17:4c:
                    63:41:71:ef:fe:60:47:46:71:16:33:52:55:73:af:
                    35:c6:91:b4:12:13:6a:67:d6:7d:3f:1b:e0:51:6e:
                    9a:94:4e:44:5d:a6:7d:4c:00:93:b1:f2:56:a5:71:
                    dc:07:55:96:65:c1:c5:d1:73:cf:ac:02:04:10:05:
                    15:47:29:80:96:05:82:f5:45:e4:76:f1:a5:9e:ec:
                    37:e8:f5:b9:24:6e:d3:a2:04:23:51:74:b9:68:14:
                    18:e9:69:be:03:3a:26:03:4c:75:ed:c7:bb:7f:f1:
                    d0:17:5a:0c:e0:cc:2a:42:82:fe:ce:75:ad:6d:59:
                    05:3d:d4:73:b5:4c:07:b2:49:65:f3:43:c0:63:24:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BE:71:2C:36:8C:95:8C:40:C5:72:FE:07:5B:69:5C:3B:19:59:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl

            X509v3 Authority Key Identifier:
                keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:f1:d1:51:3b:3a:3f:12:18:91:93:8e:41:5e:93:7f:b7:
         28:0f:ed:63:d0:b0:58:72:00:70:eb:f2:15:a7:68:c8:77:8e:
         c9:68:1e:1b:b0:fb:43:cd:c5:83:47:d9:63:8a:31:10:d8:73:
         0f:8b:ec:b5:a5:14:ff:04:22:28:71:7d:0c:e1:85:52:17:15:
         62:20:0e:bb:db:f2:c5:af:2c:da:24:ce:8c:c0:50:a0:a9:d8:
         c8:21:c0:4e:fc:1f:e0:11:3e:68:c8:6f:2c:8c:33:c5:6f:59:
         2b:85:08:ea:28:89:b9:ba:77:83:ad:3a:34:42:83:63:78:d4:
         b1:2f:64:c2:c3:a2:4b:9f:21:9b:92:64:d3:52:1f:a9:09:23:
         8e:bb:a7:0d:6a:ed:65:99:bf:f3:57:f8:bf:d0:59:54:a7:3a:
         d0:40:91:c5:ae:5d:35:0a:4c:c6:f4:54:b1:6a:d0:0d:f2:a6:
         ca:cd:bc:21:98:27:81:37:15:d9:dc:8d:de:3b:b5:e0:85:07:
         32:3e:df:7d:fb:5a:ee:87:04:6a:c7:0b:09:26:b5:0d:d4:0d:
         d7:43:1b:38:20:75:5d:19:10:9e:78:4c:83:65:13:51:ec:e5:
         89:4c:13:8f:2e:e2:66:f7:d4:45:12:7d:43:49:d6:89:02:b6:
         5d:24:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:28:40 2025 by rpki-client