Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e70f6741-9470-32f2-850e-fa551ace7313.roa
File:                     e70f6741-9470-32f2-850e-fa551ace7313.roa (raw, json)
Hash identifier:          sVtbOzaOYJDaWHA+84W5S7vOn1NLcm84Z6SPoGpQX2U=
Subject key identifier:   69:1D:2E:19:4D:C1:C2:CD:EF:5E:E1:3D:9C:10:0D:F9:1F:B9:09:46
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246D9BD8CFF70F2AF3B4F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e70f6741-9470-32f2-850e-fa551ace7313.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397221
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:d9:bd:8c:ff:70:f2:af:3b:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=8299438c-e02a-4dad-85ea-5a574d1baabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e1:50:76:0e:03:4a:ce:d5:06:ac:33:ce:1c:
                    a5:f6:38:10:af:7e:9d:17:0a:26:a3:b4:ee:67:08:
                    a6:5c:59:53:ef:4a:1f:18:84:9b:69:b2:ae:54:1d:
                    71:b2:cd:b6:ee:14:b9:55:30:b2:f5:b9:5b:fe:be:
                    34:54:6d:65:5e:1c:4f:94:59:31:fa:61:78:02:e8:
                    ee:77:87:f7:31:1a:e8:3d:61:d1:e7:16:cc:9c:3a:
                    fe:54:70:64:6b:d0:62:c1:a8:10:7b:0a:55:5d:f6:
                    f9:6a:34:00:25:29:b5:6c:cb:41:1f:86:84:b8:53:
                    a9:9d:92:cd:8f:ab:25:8f:35:ec:34:3c:74:3f:53:
                    e3:2c:57:40:40:96:10:c6:3d:e7:81:83:8f:e3:78:
                    52:ac:1e:d4:18:92:07:5e:79:99:a5:9b:94:bf:71:
                    01:e6:2a:3c:16:de:d8:77:50:62:3b:3f:aa:fa:3d:
                    af:a8:5a:02:6b:13:4f:27:97:f1:42:65:6a:ff:17:
                    07:1e:86:20:d9:ed:45:59:58:02:4e:5a:9b:bd:40:
                    b6:8c:8b:da:5d:3b:ba:25:9a:ed:39:68:3b:f1:fc:
                    8e:68:ee:db:f7:9a:2d:6a:45:5b:90:6d:72:e5:eb:
                    81:7f:b7:ec:2e:a8:76:10:7a:87:2b:3a:4d:2a:53:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1D:2E:19:4D:C1:C2:CD:EF:5E:E1:3D:9C:10:0D:F9:1F:B9:09:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e70f6741-9470-32f2-850e-fa551ace7313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:0f:1d:95:68:b5:7b:b9:ad:e6:46:68:40:fb:6c:da:e2:
         ff:fe:a0:65:cf:95:67:d2:99:91:91:60:68:4b:86:6c:fe:d5:
         dc:09:8e:ab:98:18:84:c3:92:a0:34:85:2c:b3:ab:af:0c:c6:
         cd:ee:2d:8a:fc:73:50:8f:70:34:da:1d:26:f7:11:b0:ac:99:
         b5:4c:e2:c1:7a:7d:cd:d5:60:18:be:8a:b2:bd:e6:7e:9c:d5:
         e2:ed:9f:f1:bb:93:ad:91:95:cf:13:6b:5b:7a:df:58:0a:7e:
         e1:8a:2b:62:b5:ae:24:ba:97:49:3d:7c:93:80:73:49:c9:51:
         d6:e6:d5:b0:5c:86:55:33:bd:3d:df:c1:6b:a9:90:89:f8:fd:
         f1:f2:01:9d:38:6e:5d:22:cb:b2:dd:d3:91:c5:e6:d6:20:fb:
         02:b4:a5:c0:5d:76:00:d5:a7:54:8c:a9:94:7e:5d:f7:82:f9:
         d5:46:02:5b:36:66:c0:b8:ce:07:e1:c7:b4:85:b6:ea:8d:01:
         4e:0d:9c:07:9e:63:fc:1e:6f:b0:58:1e:9f:8d:87:a6:b6:6c:
         18:5f:0e:db:7f:3e:15:4b:3c:b1:2c:cb:3f:00:6c:bf:5e:10:
         fe:43:b0:91:50:68:51:a5:c1:71:2f:ab:ad:d1:77:cb:1c:9f:
         bd:b3:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:29:39 2025 by rpki-client