Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa
File:                     16593986-f3e0-304f-86f1-14b7a09e9c5c.roa (raw, json)
Hash identifier:          2Q36PUr3z79S3Aakv6y9npbcwTclUNHmMJF6olN9bdg=
Subject key identifier:   46:D4:B9:FD:44:DF:F6:28:62:2F:79:08:84:4C:80:0B:50:91:CE:C4
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285848562F3544052EE9DFAF4B2380
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa
Signing time:             Thu 26 Dec 2024 17:01:31 +0000
ROA not before:           Thu 26 Dec 2024 17:01:31 +0000
ROA not after:            Wed 26 Mar 2025 16:01:31 +0000
asID:                     8069
IP address blocks:        20.153.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:56:2f:35:44:05:2e:e9:df:af:4b:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Dec 26 17:01:31 2024 GMT
            Not After : Mar 26 16:01:31 2025 GMT
        Subject: CN=15b95fda-bff3-4db6-8bf0-2d2ee65757c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:3d:be:b1:1d:8b:7a:93:68:c7:41:bb:09:
                    de:61:8e:b8:a3:64:5f:22:9c:bf:f9:50:60:be:c2:
                    ac:3b:70:24:af:58:81:f9:ac:59:52:81:f2:f3:25:
                    43:27:50:7f:af:df:e5:c0:fe:6f:52:ef:25:30:c9:
                    19:cc:56:3c:6f:b4:d6:6f:b1:d6:85:27:8f:50:25:
                    aa:4d:31:d0:9b:41:3d:8e:b0:cf:f8:6b:4b:ea:76:
                    fd:13:6e:ed:5c:89:af:1c:29:dc:80:e6:2e:5e:c9:
                    56:e4:7b:fe:88:26:e9:5e:d7:5e:49:e5:79:27:2b:
                    5a:82:ea:3d:f5:23:a3:51:96:79:31:72:69:68:3e:
                    53:6b:36:d1:ba:13:b1:87:30:29:57:e1:63:17:da:
                    dc:b6:74:7c:c4:61:2a:b3:aa:d4:1c:0b:c5:79:ca:
                    df:29:5e:19:fd:8d:fe:cd:bb:2f:34:af:f6:fe:bd:
                    ef:96:7d:74:8f:b1:8e:fb:99:27:a7:21:1a:fb:96:
                    ce:45:33:2b:7b:df:26:bb:e1:16:11:75:30:e7:ee:
                    b9:38:a7:78:cf:c2:1e:00:96:89:d5:8d:d0:8c:38:
                    68:e0:50:8c:fa:e4:31:77:96:ec:39:fa:93:dd:73:
                    f9:f9:b4:a9:03:25:0a:8b:97:d6:2c:96:f1:23:a4:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D4:B9:FD:44:DF:F6:28:62:2F:79:08:84:4C:80:0B:50:91:CE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:40:35:5a:e7:ad:39:02:36:8b:b9:46:b7:fa:54:e7:2d:2c:
         d1:76:a2:34:bd:fe:85:ac:dc:25:c3:54:ec:81:f5:0f:d7:59:
         65:c3:51:14:61:87:cc:2c:59:a7:59:f3:09:70:91:21:ee:98:
         4c:cd:1d:0e:1b:ef:8b:6f:95:22:89:2e:ec:6f:3c:2f:79:71:
         bd:c1:f2:c5:3f:a7:ae:da:36:92:b0:2b:ba:ca:6a:05:1c:26:
         e0:03:aa:be:cb:39:40:af:d2:2d:5d:38:24:52:4e:0f:cf:fa:
         74:50:38:79:5e:6a:37:a6:71:de:67:12:2a:ae:e0:99:68:3b:
         8e:4f:50:b2:29:eb:64:3f:95:18:8a:65:b0:85:6b:57:2a:4b:
         29:20:50:d7:49:6d:a7:c3:a4:a2:81:48:d8:b8:c0:67:9e:5d:
         d3:be:ea:4b:3a:14:66:1a:03:19:23:c2:ef:12:6d:6e:d4:1a:
         b2:76:8f:ef:f5:ad:b2:c5:04:5b:5c:8d:03:ae:0b:f4:3b:4f:
         4a:7a:72:e9:fc:83:97:25:44:0a:c2:8b:4e:9e:c7:24:91:f1:
         7f:9d:88:cb:f3:ff:64:a8:6c:f4:7d:d6:7b:0d:67:5a:b9:6d:
         5b:82:d8:c6:48:46:43:52:e7:11:77:f8:bc:51:86:4d:4b:34:
         f1:10:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:13 2025 by rpki-client