Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c115a53c-291e-3c8e-b7ad-b270f6127737.roa
File:                     c115a53c-291e-3c8e-b7ad-b270f6127737.roa (raw, json)
Hash identifier:          itRKpCmT3OOnkirt8myi6D5q2vkxbPRCXpUXMZk+R9w=
Subject key identifier:   CD:7F:76:BC:EA:D3:C0:FF:CC:15:EA:94:0F:31:73:D3:41:8D:15:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848424B1316AF66F406452D6140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c115a53c-291e-3c8e-b7ad-b270f6127737.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        184.29.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:13:16:af:66:f4:06:45:2d:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=5e47cfc2-a510-47d8-af82-aad816de71e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:37:ce:5c:f6:26:6a:98:a2:b2:dd:79:8d:
                    fb:39:cd:df:45:98:d2:f0:0d:a1:dd:e0:03:4f:90:
                    73:5d:f1:05:21:b9:3f:8b:01:b6:93:a5:e9:7a:5e:
                    4a:6d:32:63:bb:ca:78:f3:e5:0c:39:5f:ea:eb:d3:
                    7e:25:1d:59:69:95:df:9c:85:9c:68:a6:f0:31:d0:
                    59:13:6a:3d:3c:aa:b3:43:8b:1c:58:92:38:d4:bd:
                    ce:61:51:7a:11:86:ce:a2:a9:40:8c:60:1d:d1:ca:
                    da:66:31:ae:43:8d:1e:15:1a:99:f8:5c:aa:53:f6:
                    4c:4c:49:6c:c2:63:f2:4b:81:02:94:8d:3d:d7:89:
                    d4:29:65:9e:9b:0f:d1:25:62:58:48:55:2c:e6:dc:
                    74:01:74:0c:04:1b:c8:2b:3e:16:58:c5:cb:dc:38:
                    e2:64:b3:48:94:fb:f8:d0:ed:af:04:a2:c7:3a:72:
                    e1:d7:d2:35:95:91:62:23:b1:53:19:bb:42:dc:8a:
                    c8:75:97:66:07:95:b8:3e:75:13:07:0d:e1:70:68:
                    4f:b8:83:a1:d2:8a:03:d3:ba:1d:d0:82:70:f1:72:
                    8b:ef:72:aa:7c:16:51:36:73:c2:00:00:b7:41:41:
                    08:03:34:aa:99:e1:c6:e9:bd:4d:e1:93:74:c2:fe:
                    2b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7F:76:BC:EA:D3:C0:FF:CC:15:EA:94:0F:31:73:D3:41:8D:15:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c115a53c-291e-3c8e-b7ad-b270f6127737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:72:59:34:fd:91:b3:36:ff:05:c7:6a:89:09:43:d1:e3:
         ce:ee:77:0d:ae:3d:0f:a1:0f:0c:2e:eb:3b:15:ac:5d:e5:eb:
         66:21:6a:ce:e6:f8:be:95:46:79:c6:5b:1f:8b:aa:fd:0e:8e:
         97:cb:04:92:c4:14:02:51:63:1b:f9:62:33:63:29:fe:e5:74:
         55:e6:40:ad:54:de:2d:d6:7a:ec:44:89:5b:2c:29:49:49:c3:
         02:37:23:f4:16:b6:89:2a:10:42:c6:cb:5a:cd:be:98:56:91:
         8e:ad:da:5b:ac:fa:73:fd:9a:1b:18:c7:ba:87:e9:e9:14:25:
         0a:a1:c5:d6:81:27:b8:5d:23:21:86:cf:4d:b3:01:b3:53:f4:
         cc:f9:15:a4:70:d7:40:c5:f8:2f:c4:90:ff:74:94:44:a6:e3:
         d9:67:7d:3b:54:1a:36:3e:df:3e:b1:52:38:8c:6e:57:39:1b:
         5f:f3:e7:bb:1e:ed:e7:6e:af:74:5a:7f:90:31:c0:cc:19:21:
         30:f6:d3:03:04:5c:5f:d7:78:76:2f:07:7d:26:0a:ee:fd:af:
         55:51:f2:22:ad:64:64:ee:c1:29:83:46:4f:01:1b:49:7f:f4:
         69:1c:41:b5:a6:6a:59:55:82:65:9b:49:20:8d:f8:6c:06:8a:
         6c:77:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:42:59 2025 by rpki-client