Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa
File:                     4fe59b19-c5ad-3d24-8706-946768c99623.roa (raw, json)
Hash identifier:          L2uM87qMfDng/yorJjaNPfVDp/ST6VAs+n8/w7jyMJs=
Subject key identifier:   74:21:C7:6E:5A:43:20:6D:35:E8:F5:B9:10:AC:F2:B2:73:D1:A2:5A
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490CB16C2D8AA77E58B44C9340
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     209485
IP address blocks:        131.153.117.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6c:2d:8a:a7:7e:58:b4:4c:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=f740a17a-6d53-4084-918a-543bc7b96b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:75:c0:1e:2b:5e:5e:02:d7:90:f8:af:d2:
                    f0:28:65:d3:d4:45:e5:6a:73:7e:d6:1f:2c:e8:eb:
                    57:d6:7c:54:88:b4:41:6c:46:9a:fa:13:da:50:b6:
                    6f:38:15:64:88:8d:41:06:dc:18:1e:21:34:34:00:
                    e5:47:eb:bc:53:c9:a7:3c:5d:27:39:92:31:46:5a:
                    00:05:e6:dd:a8:34:5e:6c:46:cd:d3:68:85:03:95:
                    0b:4e:d6:bb:a4:51:ef:34:bf:27:a1:52:81:dd:8f:
                    55:38:86:4a:8e:7b:3d:5a:2e:2d:1c:e6:55:ba:0e:
                    b0:ed:58:1b:dc:81:d1:eb:0f:88:39:d4:97:22:cc:
                    59:47:9a:0d:ad:41:8f:06:b1:fe:12:1b:a4:da:e6:
                    a0:e5:e2:cd:7e:4d:33:ac:f7:90:97:e2:d6:5b:ee:
                    8d:c0:86:de:d6:aa:b7:97:cd:7e:60:57:59:85:95:
                    a9:0f:b6:36:35:f1:b3:f7:6c:b0:29:11:e4:cc:37:
                    f0:9b:18:e4:b6:1c:e5:d1:e6:0f:7e:e4:bc:6e:66:
                    59:1c:35:f5:d1:d3:b8:74:e0:3e:2d:e5:52:e3:df:
                    b6:ed:f9:f4:b5:c7:31:11:61:c3:6b:ac:79:05:e8:
                    a0:0e:42:0a:54:86:28:9c:d7:e7:98:bd:61:34:2a:
                    6a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:21:C7:6E:5A:43:20:6D:35:E8:F5:B9:10:AC:F2:B2:73:D1:A2:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:13:11:76:11:4a:18:6f:df:12:7f:72:ca:ce:40:d6:a4:96:
         ea:77:98:07:2f:bf:2a:03:0d:0b:51:00:a6:d7:6a:84:fc:90:
         df:f3:6f:d1:91:70:d8:4c:53:f8:a1:5f:c3:82:1b:2e:f9:9e:
         02:e5:ec:1f:18:f6:66:01:f3:83:09:3a:92:39:81:ff:07:8f:
         32:60:5f:55:41:db:e6:bc:32:d3:de:5e:8e:23:0c:8b:23:29:
         77:aa:f5:c8:01:32:96:1d:70:77:0a:8f:00:30:7f:66:9b:88:
         8c:cd:8c:fe:7e:b4:0a:7a:cc:e2:69:24:bc:24:a2:66:a2:55:
         b5:da:34:27:8e:8f:2f:aa:48:f2:c7:54:56:62:bb:36:54:08:
         a4:28:2c:85:85:92:a4:86:b8:a9:ef:b1:81:03:ed:77:83:62:
         6b:66:3d:6e:b6:e3:8f:1f:d4:14:c6:91:15:08:0c:10:bf:c3:
         ec:c1:4b:d8:3b:b8:ca:08:7a:6c:3f:26:de:4b:92:40:be:af:
         af:a3:f4:9b:a1:28:5a:a1:86:7f:07:ab:28:80:3b:4f:33:85:
         8f:50:a1:6d:69:2a:d1:34:e3:49:86:7a:2f:78:a7:d6:c0:fc:
         f4:6f:80:59:74:61:9c:58:94:1b:24:50:ba:21:7c:09:ba:ad:
         d0:e6:98:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:22:57 2025 by rpki-client