Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/3b0adfcb-841b-360d-b808-c58d891a93d9.roa
File:                     3b0adfcb-841b-360d-b808-c58d891a93d9.roa (raw, json)
Hash identifier:          8AME9HDSfBQVYIBpQ4zNRQETk4uQ4seNqeqw40aUWtE=
Subject key identifier:   24:CF:DE:89:EB:21:00:9C:4D:C6:4F:20:03:DB:5D:71:99:5B:E3:C7
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F432858494B641216612BEC5438195380
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/3b0adfcb-841b-360d-b808-c58d891a93d9.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        204.77.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:12:16:61:2b:ec:54:38:19:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=1bc9a17d-72e3-4f60-bfc9-d13a3a2cf645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:02:c9:ca:5f:d4:70:9e:c0:33:f9:ee:1b:
                    93:b9:60:ba:e0:fa:8b:46:09:51:dc:11:ed:dc:c5:
                    a6:97:8f:b7:be:e7:18:35:86:23:7a:17:dd:35:d7:
                    9a:77:75:25:60:25:60:41:21:21:6d:c1:f0:f4:6b:
                    3e:17:4a:c8:95:49:4d:54:fa:17:16:1b:a3:d8:b8:
                    8f:06:ef:18:ed:a7:dc:09:77:fd:fa:5c:97:4a:2a:
                    15:8d:10:35:dd:b1:d7:17:e0:1b:4a:95:fe:e0:9a:
                    04:3a:45:d0:1b:a5:da:58:7e:7a:c3:b2:cc:f8:c8:
                    ee:35:c1:31:e8:a1:ad:bc:01:12:17:69:af:ea:66:
                    9c:3c:a8:4d:9c:4d:ed:ad:45:18:98:3b:37:8c:6d:
                    5d:de:2f:0e:23:5e:18:de:81:db:63:e9:52:07:b9:
                    db:75:f5:53:bf:8c:8f:bf:9f:86:61:85:41:83:aa:
                    67:aa:1f:57:a1:73:eb:f8:63:ab:a7:8c:6f:37:f4:
                    83:89:49:de:77:15:48:c4:ac:c1:7e:88:9c:5a:5f:
                    d4:2e:bd:55:b9:07:e3:44:4c:ef:32:75:e3:42:95:
                    c9:0e:02:c0:11:38:fa:2b:b6:1e:32:c9:75:0f:8a:
                    67:d2:d8:88:b6:bd:5c:14:f0:ab:72:c8:b8:c6:78:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CF:DE:89:EB:21:00:9C:4D:C6:4F:20:03:DB:5D:71:99:5B:E3:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/3b0adfcb-841b-360d-b808-c58d891a93d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:43:32:c3:6c:a6:da:2a:ad:53:14:8d:e7:1f:ec:2b:5a:aa:
         b5:ca:df:1f:07:bb:63:c3:de:38:58:0a:47:1f:87:9b:17:4e:
         83:56:e3:27:e0:1f:2e:5b:51:58:a8:9c:4f:57:91:93:b3:10:
         1a:9f:e3:3e:ca:99:53:0b:59:b7:0a:87:22:d0:ca:25:ba:97:
         0f:2d:5b:06:59:0d:c3:6b:27:6f:8b:0a:d5:ed:a2:ff:60:d5:
         e8:fa:17:06:24:a9:e1:9f:ca:bf:ff:c4:13:f3:95:30:2c:77:
         f0:81:a9:59:f4:8b:77:93:35:7b:d7:63:ba:f6:ca:fe:da:b8:
         24:a1:5e:4d:9f:a3:88:09:18:bc:7f:c3:a8:3b:20:88:f9:eb:
         a2:54:1e:3a:65:95:5d:35:f8:a9:70:f1:d4:72:03:62:6e:98:
         12:39:9f:09:79:16:89:be:be:98:1d:9a:03:10:c5:82:70:96:
         a8:41:66:ab:3d:19:23:6c:90:11:9f:26:7b:f1:8b:88:d3:4c:
         d1:28:eb:5f:6e:b1:a2:b1:9d:23:d8:c2:4b:d9:34:66:0a:e1:
         18:34:e7:d4:5c:19:86:56:b1:a1:eb:d2:73:ff:2e:1f:bd:61:
         d5:6b:95:b3:bd:25:36:20:4b:2f:51:66:e2:e3:45:1c:01:a4:
         41:dc:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:21 2025 by rpki-client