Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/01931882-d387-3ec6-a3c6-4763b99968a5.roa
File:                     01931882-d387-3ec6-a3c6-4763b99968a5.roa (raw, json)
Hash identifier:          Y3+mNFFV2T5XB+6VEKM0jHL1/bcQ0NpflXrfbbx/omg=
Subject key identifier:   FC:2B:5F:34:EA:B3:52:B2:DD:4E:ED:23:2E:45:8D:96:EB:23:CC:6F
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858487FB5D6BEDF67109518EADBC0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/01931882-d387-3ec6-a3c6-4763b99968a5.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     398463
IP address blocks:        24.38.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:d6:be:df:67:10:95:18:ea:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=d08ce662-3d1c-4be2-acf3-0b61144a79cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:6e:f9:dd:70:aa:69:3a:8b:19:fd:db:83:
                    cd:58:20:26:0c:e7:cf:ce:11:66:0b:fe:4b:2c:35:
                    82:0b:a0:9a:4b:f0:96:e4:b0:fb:0e:a9:88:29:df:
                    2e:52:26:04:c1:d2:ee:1e:3c:64:a4:dd:ce:65:82:
                    2d:cd:8c:83:c9:3e:a9:9f:35:df:4d:5a:7f:92:06:
                    a3:ba:fd:98:5d:e8:69:d8:4b:b1:ee:ae:cb:5f:30:
                    a0:bf:58:7b:39:80:5a:88:71:0c:11:c6:3e:e8:92:
                    99:03:f7:0a:8b:48:42:9e:9e:0d:ed:2d:d5:91:80:
                    49:77:d6:14:d1:66:5d:fa:70:06:64:b3:05:0c:a0:
                    f4:88:0d:2b:73:5d:04:f7:47:5b:14:97:d1:bd:80:
                    c5:f0:99:6d:8c:82:3e:62:4b:7d:58:be:68:2b:9a:
                    8f:39:f9:a2:32:41:db:c4:e3:7e:ec:b5:22:c0:e4:
                    e7:6f:bd:5b:56:8a:16:4c:09:b7:2f:7c:99:99:13:
                    74:09:7c:b9:88:f7:a4:87:47:07:73:32:19:a5:34:
                    c0:9b:90:29:62:ff:bf:99:68:10:49:29:89:0b:5a:
                    11:77:42:22:3e:96:4e:02:d4:7d:a9:0c:85:f9:c8:
                    6b:04:78:3b:47:5c:b7:b1:91:5c:3c:e1:0f:c0:39:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2B:5F:34:EA:B3:52:B2:DD:4E:ED:23:2E:45:8D:96:EB:23:CC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/01931882-d387-3ec6-a3c6-4763b99968a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:e7:97:75:a9:b2:cf:a6:d9:6f:88:ae:2a:ac:ce:65:d9:67:
         c0:84:40:74:8b:cc:86:5a:5e:f0:3a:ef:18:d6:af:e2:8d:f4:
         08:ef:41:3a:a8:8d:3a:1c:7c:b0:a9:87:ae:c2:e1:cc:76:ac:
         3b:b1:0d:3b:1c:6f:73:56:2e:99:89:d8:3b:11:14:9a:c4:e7:
         eb:cb:67:14:e5:95:5c:cd:3d:05:e5:2f:12:28:55:88:cc:af:
         15:5b:36:07:86:7b:e4:7f:82:02:0c:70:86:62:50:10:d5:65:
         f6:7c:e6:cb:90:3e:5e:f7:53:9e:24:75:74:66:ca:20:9c:ff:
         36:36:06:71:29:51:0d:47:42:1e:68:b6:88:80:8b:8d:26:36:
         99:dd:fa:15:c6:47:49:52:03:f0:01:d5:33:ac:4f:be:cd:ec:
         c2:a0:f2:82:88:a2:5b:61:c7:2b:ba:51:0d:e3:bb:06:47:90:
         a4:52:60:26:64:e4:76:44:db:85:7d:db:99:24:19:db:db:29:
         b0:50:0c:a5:41:e9:3e:4c:1f:e7:fe:a5:4f:d5:26:f8:fb:1f:
         5f:c4:26:9f:72:ee:3a:46:2b:64:e9:0f:7d:e0:94:d1:81:21:
         82:23:e4:08:c7:f1:7c:1d:07:79:c1:e4:84:7e:ee:0a:e6:86:
         bd:c9:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:15:05 2025 by rpki-client