Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ca75a64-58c8-37d7-93cf-4ceed8941310.roa
File:                     2ca75a64-58c8-37d7-93cf-4ceed8941310.roa (raw, json)
Hash identifier:          Ziw6YZyRbA7kZJiiYuFJsP/ETChCh+3kJDPssUmN8Ec=
Subject key identifier:   5C:C5:83:E9:A4:F1:5E:E8:E2:5C:34:69:42:0F:9A:84:34:C7:96:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFF2896C55CA3D9DF51F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ca75a64-58c8-37d7-93cf-4ceed8941310.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     14979
IP address blocks:        184.105.234.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:f2:89:6c:55:ca:3d:9d:f5:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=acbc10bf-d57e-4797-9f21-1b2bfc8120a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:82:ef:da:d8:7d:1e:a8:81:32:a9:77:af:
                    25:1d:a4:a9:84:2d:85:0e:52:66:c6:d0:ac:99:0a:
                    3f:47:7a:54:2b:17:3c:c9:06:68:8d:08:6b:06:7c:
                    6a:8e:cf:8b:c8:88:84:a9:d0:23:a7:37:a2:2c:69:
                    62:43:b0:21:50:00:ed:89:34:91:da:b3:f0:9e:c7:
                    f3:a9:c8:de:a8:3c:6d:6c:ac:09:b7:84:0a:bb:39:
                    82:ec:0a:a4:cd:50:82:8c:45:32:5c:73:8f:70:39:
                    c0:b1:4e:29:95:e3:c7:94:cb:01:ab:a7:38:c4:1c:
                    a4:4c:2b:8f:f5:61:15:48:b5:19:e6:66:cd:2b:bc:
                    c5:0b:ac:9e:c1:0c:aa:f6:69:52:3a:c7:00:41:d3:
                    37:33:23:31:9f:e9:60:02:26:89:72:b3:55:e3:55:
                    c3:e2:e5:c0:7f:61:19:fc:de:09:8c:55:8c:7a:62:
                    52:69:15:2e:a0:68:8e:3d:83:55:ac:d6:19:46:bf:
                    9a:eb:8e:ca:a8:da:33:a0:b7:8f:3c:4c:d8:ee:47:
                    38:bd:c0:c0:9e:bb:fb:21:ae:cc:de:c0:58:41:af:
                    b1:2e:6c:6e:c1:92:eb:1c:ef:88:e9:14:39:55:a7:
                    33:82:30:bd:f4:c8:c7:e3:fc:af:38:c5:55:ad:c8:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:83:E9:A4:F1:5E:E8:E2:5C:34:69:42:0F:9A:84:34:C7:96:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ca75a64-58c8-37d7-93cf-4ceed8941310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:e1:c8:05:9e:10:64:41:d9:bf:84:8b:b5:90:b0:a2:e7:
         ea:e8:bc:cf:44:33:05:dc:df:1f:bc:e4:cc:ff:08:41:82:75:
         14:9a:35:f6:cf:74:b7:1e:12:47:7a:de:fb:13:d1:cd:78:0d:
         65:20:a3:dc:fb:58:54:74:07:90:25:63:78:36:60:ab:ef:98:
         78:98:29:a7:dd:99:db:e9:93:aa:80:71:bf:c5:5a:d2:ba:c8:
         c6:8d:d5:01:c0:87:a0:c9:80:33:d7:e8:52:3f:01:6e:32:f3:
         a6:c0:56:ae:dc:c8:ec:dc:a9:fc:ff:4d:53:39:5f:b9:0d:35:
         1e:ea:27:09:97:6b:cc:67:85:1f:5d:01:e1:20:77:8e:37:85:
         2b:69:48:7e:eb:61:34:42:6d:57:91:81:b1:7f:6b:96:ca:af:
         c2:53:e9:69:29:4e:01:13:8a:73:73:21:94:b6:e2:c2:0f:f3:
         47:44:c4:e0:9b:74:ea:d6:97:fc:9d:ef:03:eb:4f:84:20:68:
         c0:d2:7f:97:ff:91:b3:01:43:13:48:a3:15:66:7c:0e:c1:24:
         6b:2a:68:09:8b:84:82:fb:e0:8f:23:18:44:92:2c:25:7a:0a:
         12:18:49:2c:b2:ba:c7:8c:88:8f:1d:9f:8b:89:f4:04:26:a0:
         a2:45:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:41 2025 by rpki-client