Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cbdd5127-a5e8-37e8-9cde-67c845b538b2.roa
File:                     cbdd5127-a5e8-37e8-9cde-67c845b538b2.roa (raw, json)
Hash identifier:          X6FiSPRZI/NP0dbpyc+sUNZuqVV18Eo+nCP9inLXSVE=
Subject key identifier:   DF:9B:55:5B:C0:CF:06:92:06:09:BD:FB:53:2E:E2:58:9C:39:87:44
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD20ED389C5ABED2624F8A08
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cbdd5127-a5e8-37e8-9cde-67c845b538b2.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     12008
IP address blocks:        156.154.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:20:ed:38:9c:5a:be:d2:62:4f:8a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=12c6f837-fb02-434f-a3f8-4d1a44e54dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:fa:50:f8:91:30:a2:ad:cf:e8:43:3a:6c:
                    38:38:df:e9:77:fe:6f:b7:05:6f:1d:04:e7:da:13:
                    13:04:a7:a1:70:0f:6f:a8:17:09:0e:af:10:85:ca:
                    45:6e:45:44:03:e1:6b:23:f6:4d:9c:10:b2:f8:06:
                    2d:99:c8:da:03:cb:3b:e5:2a:a3:c1:9c:81:3e:9b:
                    e6:03:0e:0e:28:0b:f9:74:54:30:6b:0c:63:4c:27:
                    ab:6a:71:0a:5a:dd:46:39:f6:3a:f5:4a:a7:eb:be:
                    45:3e:44:19:18:a4:42:23:48:36:51:10:06:fb:e0:
                    10:df:00:31:1b:f5:26:e3:c2:1e:c9:06:86:6b:a3:
                    4c:a8:99:31:1f:50:0a:14:ab:61:98:c5:71:c3:f7:
                    0d:c3:eb:29:cc:10:7a:34:f5:44:52:a4:8f:b3:6c:
                    4a:65:dd:70:90:97:5b:71:6d:45:3e:a3:47:c3:5a:
                    84:82:1f:4d:51:d2:fb:1f:3c:32:45:33:3d:a2:ea:
                    c7:1d:57:46:3a:26:ff:5c:ae:d6:af:ef:37:42:09:
                    77:f8:9e:0e:c4:53:21:bd:75:86:5c:fb:38:6a:f8:
                    2b:be:48:05:6c:e2:ed:b7:6c:19:0a:80:69:cf:1a:
                    46:cc:5b:3a:cd:8e:be:7c:7f:fb:e0:22:24:5b:f8:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9B:55:5B:C0:CF:06:92:06:09:BD:FB:53:2E:E2:58:9C:39:87:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cbdd5127-a5e8-37e8-9cde-67c845b538b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:00:69:c1:3f:7b:ed:fe:3f:87:ee:04:4f:d3:08:64:57:
         2f:71:59:93:1f:a5:32:09:33:91:e2:e8:bd:44:df:2d:ba:3c:
         2c:28:cd:00:c0:ae:77:72:1f:7a:4f:7d:c4:79:d5:37:c3:1d:
         40:94:81:d8:85:99:75:3c:1e:39:63:cf:f0:45:a1:fa:6d:c1:
         42:17:d2:6e:6c:cd:67:05:b6:ab:65:f2:82:6c:f9:e2:7b:1e:
         15:10:88:29:f1:01:92:a4:1b:dd:6e:32:b2:58:21:c9:03:9d:
         da:bd:2a:a6:ba:f0:90:c9:a5:e0:08:89:43:bf:b0:16:c0:17:
         35:c6:99:36:7d:85:7a:17:7d:bb:96:fe:93:fa:3a:60:a8:c7:
         b5:eb:fd:fc:18:3e:89:34:a0:80:ae:58:09:41:7f:ba:0d:b4:
         58:ec:96:47:a4:61:d9:4c:f6:1a:c9:3a:ab:52:9c:29:f4:4c:
         08:f2:0f:2b:34:75:b5:0c:d3:15:1e:d9:19:24:3b:d4:a3:1a:
         a0:ea:8d:b7:e8:28:28:ee:72:9c:ac:7e:5e:59:16:bb:d3:f7:
         b6:bd:dd:b1:e6:80:6b:07:2f:43:d9:62:5a:f9:48:54:61:90:
         16:13:0f:67:94:bd:d0:52:09:6e:f1:8c:74:88:2d:b8:68:7a:
         f6:4a:f0:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IO04nFq+0mJPiggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
MTJjNmY4MzctZmIwMi00MzRmLWEzZjgtNGQxYTQ0ZTU0ZGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3n6UPiRMKKtz+hDOmw4ON/pd/5vtwVvHQTn
2hMTBKehcA9vqBcJDq8QhcpFbkVEA+FrI/ZNnBCy+AYtmcjaA8s75SqjwZyBPpvm
Aw4OKAv5dFQwawxjTCeranEKWt1GOfY69Uqn675FPkQZGKRCI0g2URAG++AQ3wAx
G/Um48IeyQaGa6NMqJkxH1AKFKthmMVxw/cNw+spzBB6NPVEUqSPs2xKZd1wkJdb
cW1FPqNHw1qEgh9NUdL7HzwyRTM9ourHHVdGOib/XK7Wr+83Qgl3+J4OxFMhvXWG
XPs4avgrvkgFbOLtt2wZCoBpzxpGzFs6zY6+fH/74CIkW/jjVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+bVVvAzwaSBgm9+1Mu4licOYdEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2JkZDUxMjctYTVlOC0z
N2U4LTljZGUtNjdjODQ1YjUzOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbNAGnBP3vt/j+H7gRP0whkVy9xWZMfpTIJM5Hi6L1E3y26PCwozQDA
rndyH3pPfcR51TfDHUCUgdiFmXU8Hjljz/BFofptwUIX0m5szWcFtqtl8oJs+eJ7
HhUQiCnxAZKkG91uMrJYIckDndq9Kqa68JDJpeAIiUO/sBbAFzXGmTZ9hXoXfbuW
/pP6OmCox7Xr/fwYPok0oICuWAlBf7oNtFjslkekYdlM9hrJOqtSnCn0TAjyDys0
dbUM0xUe2RkkO9SjGqDqjbfoKCjucpysfl5ZFrvT97a93bHmgGsHL0PZYlr5SFRh
kBYTD2eUvdBSCW7xjHSILbhoevZK8DU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:12:55 2025 by rpki-client