Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae527469-71ee-3c60-989d-562cf9ad8922.roa
File:                     ae527469-71ee-3c60-989d-562cf9ad8922.roa (raw, json)
Hash identifier:          B4N+z/TWj1FZ1EEhQLblq6qwHlQLrBvoVHL3DmBy//w=
Subject key identifier:   29:BC:51:7A:D0:EB:B0:F5:8A:87:37:7C:DF:B2:73:8C:85:04:42:CE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D01D56E7954CBBEF94F560
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae527469-71ee-3c60-989d-562cf9ad8922.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     55044
IP address blocks:        184.105.194.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:1d:56:e7:95:4c:bb:ef:94:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=37c18a0b-24f9-4758-be2c-399d884e9a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:3b:b5:6b:81:79:ab:ca:78:fa:a3:9e:7d:
                    85:2c:f2:8c:9a:56:61:81:dd:fe:43:c3:f5:31:ee:
                    0b:9b:47:fa:c4:d6:3b:e3:cf:28:01:bf:20:d0:47:
                    07:a0:a0:7e:09:78:60:81:89:7d:68:e2:37:55:01:
                    f8:67:43:66:6b:42:f9:70:d6:5b:95:01:41:da:29:
                    80:5f:b2:59:7d:b2:69:9b:3a:c2:b4:37:86:21:8e:
                    06:3f:2d:8b:c7:b7:60:03:e4:81:78:c5:36:a3:ee:
                    df:08:94:31:25:34:8a:96:b3:4a:35:45:b8:b5:bc:
                    12:30:2b:74:68:bb:64:32:69:8b:00:e5:70:17:2c:
                    55:75:0b:2e:e8:e6:0d:f2:8c:fd:42:dd:31:f9:4e:
                    02:da:8b:74:40:94:77:e0:d7:6a:3d:60:7c:d8:4e:
                    17:5b:4b:03:0e:e3:51:ba:62:e2:a7:4e:d3:5e:49:
                    ce:92:94:24:cc:db:49:45:0b:6f:29:56:65:07:80:
                    81:21:34:56:06:80:c6:7a:ee:e8:db:e1:cc:2b:80:
                    51:cc:88:24:ed:c8:16:c9:c0:c3:43:fe:7f:ee:29:
                    f7:22:06:93:d7:67:b2:fa:6d:b5:1b:21:d6:cc:c3:
                    56:e3:68:69:53:23:87:15:6d:c6:84:e3:ef:fe:7c:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BC:51:7A:D0:EB:B0:F5:8A:87:37:7C:DF:B2:73:8C:85:04:42:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae527469-71ee-3c60-989d-562cf9ad8922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:93:12:99:3f:be:d7:13:b6:4b:fd:73:33:c8:7c:c0:50:95:
         c3:ca:03:3c:a1:94:a0:63:d9:92:b6:e9:4a:c2:eb:0d:1d:27:
         e3:ae:c8:83:3d:b2:b9:bb:22:88:7f:a7:0d:0b:c6:71:e0:82:
         7c:8f:63:40:96:5c:7e:67:b1:90:9d:3a:16:9d:30:f9:4b:ec:
         96:1c:5a:4e:9c:ba:af:81:21:a2:63:99:1b:15:ab:e9:e5:16:
         4d:10:3e:64:b4:06:da:cb:10:69:6e:76:61:d5:f6:aa:49:f0:
         3a:76:b7:44:83:b7:ab:93:88:74:ac:97:8a:82:e0:2d:f7:19:
         d8:e3:33:64:bc:35:03:83:e9:c7:46:d2:e8:c7:ed:89:fb:ea:
         db:93:c2:73:db:a5:07:10:93:b1:9b:30:58:09:b5:9e:61:08:
         34:db:90:03:4f:d0:4c:85:15:e3:95:e5:b5:be:5d:17:8b:d9:
         88:30:1c:2e:fa:5a:2c:7d:ea:8f:63:2d:57:70:3c:c7:cd:bb:
         05:4f:48:b3:15:e9:0c:c1:fe:34:9e:16:6c:03:30:37:2c:00:
         04:5a:8a:a1:83:fa:f5:2a:29:86:2e:dd:9c:df:2e:99:af:2f:
         48:3e:e7:dd:94:14:47:ab:60:ab:ca:1e:4d:98:57:f1:c8:4e:
         6f:dc:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:13:36 2025 by rpki-client