Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/292ff941-8199-3c57-a8fe-0cb33d7d45a2.roa
File:                     292ff941-8199-3c57-a8fe-0cb33d7d45a2.roa (raw, json)
Hash identifier:          kMHycsR5Ajd+V9ikOcbkiGaNc9TLEuNgIrgPE2ieUgE=
Subject key identifier:   02:CD:99:AB:40:91:80:11:78:42:37:B6:A3:76:77:E8:C2:4B:BF:B6
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858482395435ECC9618E1079A2A00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/292ff941-8199-3c57-a8fe-0cb33d7d45a2.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     398395
IP address blocks:        45.61.143.0/24 maxlen: 24
                          144.172.66.0/24 maxlen: 24
                          144.172.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:43:5e:cc:96:18:e1:07:9a:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=e5d165ad-7132-4906-9a3f-f16423991c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:31:fd:d2:4f:ea:63:36:80:0d:a4:70:2c:
                    f2:f7:5d:fa:93:62:b9:69:b1:f8:c3:95:f3:83:15:
                    8b:50:09:03:14:17:39:79:dd:df:d4:7a:ad:8e:c1:
                    55:11:f6:80:23:8c:71:73:24:d8:a4:a8:8a:a6:e4:
                    db:a0:15:ec:9b:1e:4f:e2:a5:ef:ef:ef:1e:77:b1:
                    f4:e3:22:d2:7b:da:6f:47:25:38:6e:76:0c:17:b4:
                    f9:53:c9:57:07:29:64:82:28:b1:fd:a0:15:7c:77:
                    25:8d:b7:e3:a2:e9:eb:9b:d4:5d:30:4f:96:97:3a:
                    f7:63:1c:22:22:e6:17:ac:e2:e0:d2:98:f2:a9:eb:
                    41:04:af:f3:8f:4f:f7:9c:0f:ae:5b:df:42:2e:29:
                    5c:ad:6f:15:07:2e:f6:02:d3:89:4d:95:3a:43:2d:
                    fc:f7:7b:b8:66:95:75:f8:0f:c3:1a:62:bd:25:c7:
                    8d:fa:a6:f0:2e:fe:74:71:53:5b:d4:02:2a:c3:d4:
                    12:5e:09:00:9d:bd:c4:c9:3d:85:cb:aa:02:ae:1e:
                    9e:04:79:ac:fd:2d:25:e0:da:6b:be:ca:1f:c0:71:
                    69:b8:e4:73:d8:b9:f1:26:81:e4:23:d1:72:c0:7c:
                    1a:a5:a9:cc:6a:34:02:03:e4:d5:4c:c0:01:65:9d:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CD:99:AB:40:91:80:11:78:42:37:B6:A3:76:77:E8:C2:4B:BF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/292ff941-8199-3c57-a8fe-0cb33d7d45a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.143.0/24
                  144.172.66.0/24
                  144.172.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:92:a7:04:fd:cf:bb:b9:20:9d:b2:ad:79:f5:bd:b4:7c:c7:
         e3:ab:87:9a:bc:e5:ba:43:67:40:02:c7:b5:ab:75:f5:1d:69:
         b1:b8:64:2d:16:3f:95:5f:21:f6:8b:11:2a:cc:4b:3c:16:76:
         72:87:a9:5c:90:31:17:f5:8d:d9:bc:61:4e:29:91:fd:58:e2:
         64:a4:77:8a:42:df:54:f4:df:5e:f2:7c:f3:83:27:fd:9b:e5:
         80:35:0a:f2:0c:cb:48:b7:0d:d0:8e:b6:4a:48:8c:80:a2:af:
         01:d9:0e:15:aa:7f:90:ea:85:27:27:f3:bc:33:0e:46:2c:ad:
         4e:1a:ee:35:72:79:c6:04:2c:38:1f:fd:11:58:a8:ae:88:fc:
         9a:36:15:08:a1:7e:6c:66:cf:c3:7b:19:30:18:54:89:ab:42:
         30:0f:6a:81:73:49:1c:27:48:26:d3:61:45:13:0b:fb:bf:e8:
         c7:fa:82:0e:60:a2:34:e2:3f:b0:84:84:97:32:ec:d3:cf:bc:
         bd:17:d4:73:7e:09:e4:c2:64:f8:fe:3c:c8:b3:13:eb:58:1b:
         eb:d0:b0:88:12:0e:dd:0f:b7:58:95:df:ee:64:ad:22:b4:48:
         da:dc:2e:b1:54:85:0c:46:bd:c6:4e:9a:0b:df:a6:7f:59:d9:
         80:04:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:58:14 2025 by rpki-client