Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5eccdb0e-4f8c-35c6-9c14-c726ec7fea62.roa
File:                     5eccdb0e-4f8c-35c6-9c14-c726ec7fea62.roa (raw, json)
Hash identifier:          BHBCRiNLVAQAqfEh/Rf4I2+I81kLGK9Z93T7TBY5sqA=
Subject key identifier:   94:A7:A5:61:7E:3D:E6:FE:21:8B:00:83:87:FF:04:34:5D:B5:40:9F
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490CB168CD6BDC722AF69BB9B0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5eccdb0e-4f8c-35c6-9c14-c726ec7fea62.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     19181
IP address blocks:        131.153.56.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:68:cd:6b:dc:72:2a:f6:9b:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=1777aef1-603d-422d-8290-533715d0fe60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:25:07:c1:50:d7:eb:8a:07:44:50:8e:aa:
                    47:40:b3:a9:f2:3a:25:6b:14:d9:0c:17:80:38:40:
                    26:1c:3c:69:74:6a:69:54:2d:0f:8b:e6:5d:3b:28:
                    95:fb:91:ec:a1:d5:f4:f3:65:85:2d:92:34:4d:6f:
                    6f:44:4a:88:90:5d:c6:7b:8f:7e:7d:8b:21:c7:3b:
                    7e:75:7a:79:43:d2:f2:aa:83:3e:f1:a3:00:2a:ed:
                    d1:27:66:3a:cf:3c:eb:65:40:52:d7:1e:d5:18:83:
                    e8:94:55:96:23:f5:5d:26:4d:11:4c:a8:4c:3c:ea:
                    31:b9:c9:88:7d:bd:d5:a6:9a:ef:c0:cd:26:72:01:
                    a5:d4:24:ad:3d:3e:4d:ed:03:ce:32:de:63:fb:49:
                    00:41:2a:90:55:f5:bb:79:fa:6e:b4:84:50:37:a9:
                    26:84:90:28:24:f5:de:0d:46:d6:51:49:73:e2:cf:
                    fe:7f:30:e3:23:89:0c:a0:91:0b:37:29:b6:45:bb:
                    75:d8:5c:21:4f:08:a5:57:1b:43:bb:3b:42:48:83:
                    bd:61:da:ab:3b:ec:07:4e:8e:8c:f1:c8:ee:fb:97:
                    45:36:34:b3:71:7e:d1:7e:44:3f:13:8a:c8:10:c6:
                    43:18:4b:e8:1a:62:79:f3:8f:5e:82:88:20:c9:10:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A7:A5:61:7E:3D:E6:FE:21:8B:00:83:87:FF:04:34:5D:B5:40:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5eccdb0e-4f8c-35c6-9c14-c726ec7fea62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9e:0a:1a:44:c3:7c:63:4c:b5:27:4e:ed:a9:2a:e1:b5:5c:
         b3:3c:f3:1e:b6:8b:4d:65:37:73:0b:d3:5a:a6:64:2f:fa:5e:
         5d:cb:7a:97:49:4b:29:47:95:07:6b:86:e5:f1:34:4b:bf:ce:
         00:34:0c:43:6c:b2:a9:a9:ad:17:10:72:8f:29:c3:c6:aa:25:
         5e:84:95:2d:79:53:62:e2:61:3a:24:8e:bc:3b:60:8a:7e:fb:
         41:b7:1f:b4:d8:03:12:98:1e:95:23:fd:d8:36:4c:10:0c:e1:
         03:67:2f:6d:31:d4:30:32:db:e8:53:5b:9b:34:5e:22:2b:a4:
         72:6f:f4:d3:06:df:b7:dc:fb:bf:87:e4:a9:5a:6b:f3:ea:d6:
         ab:af:3c:f9:1b:bc:06:e3:86:31:1c:1c:e8:e4:f8:82:81:eb:
         91:a9:65:8f:b9:ba:ef:07:5b:39:85:80:87:80:93:bb:81:3f:
         6a:b1:f2:66:ca:94:36:ff:23:d7:6a:08:0e:d8:e0:ef:18:c6:
         6c:7d:12:00:86:78:0f:e9:0c:c5:95:70:cb:32:12:f1:b6:dd:
         fe:2b:d3:42:7b:5a:cb:66:ba:ce:99:67:35:26:54:e1:0e:3b:
         d2:3c:ed:29:1b:7e:d4:37:24:0a:35:bc:52:6e:0f:92:f4:35:
         60:f3:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:35 2025 by rpki-client