Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0d2fc2c-0289-3215-b564-23d42d5f24dd.roa
File:                     e0d2fc2c-0289-3215-b564-23d42d5f24dd.roa (raw, json)
Hash identifier:          ZL494QNF5VUyRFCrCBs76bThyt/tPfhrXlB5015iJx4=
Subject key identifier:   FE:77:3B:D6:8A:D9:60:0C:1C:36:C6:5E:16:2E:EA:3A:74:98:6E:89
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584890760BDEDEDE0A8D69031E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0d2fc2c-0289-3215-b564-23d42d5f24dd.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     397232
IP address blocks:        156.154.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:76:0b:de:de:de:0a:8d:69:03:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=681ce665-1834-4b75-b2f3-565399d351e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:4a:e4:5b:88:02:7d:44:58:e0:f2:91:2d:
                    c2:f6:8e:94:d4:3b:0d:e2:34:9f:a5:0a:6f:9d:95:
                    3d:a9:3f:85:20:47:2d:9f:84:e1:25:fb:81:6d:07:
                    1f:fd:d2:0c:08:2b:95:63:26:5b:54:c2:37:78:6d:
                    ac:55:7a:6c:a7:c8:99:df:c0:fe:55:e4:1e:a6:a0:
                    93:61:29:73:38:8a:df:f9:b6:b1:b8:48:45:5e:0a:
                    74:7e:26:71:56:ab:19:74:3a:d8:d8:f3:61:9f:8c:
                    65:9a:e9:d6:08:5b:1d:14:79:e9:67:f8:3a:d2:0c:
                    b4:39:37:b0:21:c4:5e:b0:fb:f1:50:a3:5f:d3:7a:
                    7d:b9:d0:bc:5e:2c:fb:79:59:df:29:e5:f2:46:81:
                    22:78:62:d0:f2:c5:e5:b4:d5:63:61:34:39:8a:a5:
                    6e:f8:20:d4:de:43:3c:52:0c:ae:c7:2c:13:c9:b1:
                    5b:cf:41:48:93:c3:06:c9:49:39:b5:9c:60:70:24:
                    36:0b:0f:72:a6:54:5f:c4:a7:53:67:01:ee:91:5b:
                    f8:41:c6:60:c1:6d:8e:5e:bc:75:9e:ef:c3:75:c9:
                    a8:9c:d8:1a:73:73:fc:70:0e:60:df:93:40:15:6a:
                    1f:df:59:ba:eb:2b:fc:27:d7:9e:a1:6c:92:07:d6:
                    23:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:3B:D6:8A:D9:60:0C:1C:36:C6:5E:16:2E:EA:3A:74:98:6E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0d2fc2c-0289-3215-b564-23d42d5f24dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2d:48:32:5d:bf:60:29:a0:ef:3b:e4:2b:6c:88:a7:69:9b:
         8c:7c:42:37:e4:34:d4:f3:e3:66:39:54:20:b6:69:cc:e5:32:
         a3:10:18:3a:d6:d7:2c:d8:6e:db:47:17:44:2d:73:e4:74:15:
         c6:84:ca:43:7a:74:2a:44:15:c4:d7:92:97:ae:07:18:af:4f:
         09:a7:6d:ca:17:e4:e9:34:95:ca:5b:e6:e6:72:b0:2b:9b:fc:
         61:29:0c:de:cc:54:49:3e:2c:44:73:17:73:e5:f6:a5:ff:a8:
         af:43:9e:fa:29:09:ad:27:a9:19:92:f7:6d:a0:1a:5e:d5:5c:
         98:e1:f7:70:b6:8b:b6:8c:fc:8b:32:32:cf:6e:d4:0f:5f:fd:
         9d:1c:ad:0d:b5:ad:7b:ff:f2:33:b6:b2:6b:6c:3e:75:71:ac:
         56:0d:be:a4:40:8e:3a:8c:fb:09:99:dc:c9:ef:da:ec:33:f7:
         df:bb:41:45:68:08:9a:af:51:90:4c:01:d8:8b:73:3a:29:7c:
         9e:e7:7c:6e:cd:42:d8:fa:f0:8b:3a:2a:7e:34:72:0d:02:f5:
         14:55:67:33:44:78:f7:dd:da:0c:86:1e:7c:08:bc:1f:75:ea:
         61:aa:84:50:ba:45:dc:c9:c5:7b:41:26:87:d4:fc:3c:b9:06:
         eb:db:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:10 2025 by rpki-client