Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/1cb745ad-dba4-37a9-a27d-e1ee5eb84626.roa
File:                     1cb745ad-dba4-37a9-a27d-e1ee5eb84626.roa (raw, json)
Hash identifier:          IA759bfkHQo/Kb5aMSfmHdzyoB1mRlgLb+LxleqZv1k=
Subject key identifier:   AA:E3:FC:01:3A:81:E3:99:A4:19:60:8E:E1:63:F1:58:2C:A0:C1:AF
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F432858494733E27BE1AF73C394B8BB00
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/1cb745ad-dba4-37a9-a27d-e1ee5eb84626.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     23154
IP address blocks:        148.164.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e2:7b:e1:af:73:c3:94:b8:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=805b2426-be27-460e-9730-4e2ebaee86c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:3c:da:f1:2d:b3:9b:61:1f:29:64:ca:e9:
                    12:66:53:1c:81:1e:17:ab:f5:14:6a:4a:06:40:c6:
                    e6:ce:65:87:65:43:ed:e5:f8:4a:af:bf:2b:59:42:
                    70:ca:0b:64:3d:06:14:55:0d:18:19:97:80:cc:19:
                    3c:53:cd:ab:2b:38:38:6b:cb:1b:3e:90:96:cb:a1:
                    5b:b2:c6:2d:64:93:d1:9c:d9:42:86:79:48:78:33:
                    98:4c:38:26:be:d5:8e:8e:65:c5:97:ad:dc:33:ac:
                    99:14:da:ed:3d:68:a3:c0:90:57:a2:a1:12:af:b3:
                    06:31:51:52:1a:52:84:8c:81:8e:c3:1e:14:4b:df:
                    96:44:f8:b8:76:3e:37:3e:be:51:4e:a3:a2:65:39:
                    8c:2f:04:f0:fa:11:1c:8a:99:ed:52:a5:d7:43:c8:
                    ec:15:ea:1c:a8:b0:ac:fb:d5:70:d1:a3:e8:e3:1d:
                    21:5c:7e:f1:d9:17:f9:70:d5:ea:9f:8c:bd:64:c2:
                    80:20:3e:af:b7:32:99:9c:0a:33:bf:9a:a4:87:e6:
                    4a:9d:1c:17:4e:12:7b:60:79:92:74:44:62:93:f4:
                    e5:ae:7d:68:ff:f1:ae:ea:8c:30:7a:9a:a9:4c:6d:
                    8e:38:0d:f9:44:ae:ef:bc:7b:18:30:92:02:da:db:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E3:FC:01:3A:81:E3:99:A4:19:60:8E:E1:63:F1:58:2C:A0:C1:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/1cb745ad-dba4-37a9-a27d-e1ee5eb84626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:8a:96:85:fc:f5:10:67:5e:bb:fc:25:b0:6f:22:b8:bd:
         20:50:36:01:4a:ed:07:0f:cc:ac:af:3b:d7:3b:4d:82:9f:d4:
         ae:2b:f9:de:e4:e9:92:c6:7f:71:62:7f:67:1d:38:d1:b8:da:
         1a:04:94:44:1b:88:82:bb:c6:0f:7f:a0:ed:36:97:ae:11:3c:
         ed:87:33:e2:0d:6e:dd:73:c7:e1:5c:f4:1d:d0:02:4e:b4:44:
         64:8c:89:e6:3e:3e:c1:79:33:94:b9:0e:f7:73:d8:0c:e3:fd:
         a0:66:8c:a7:36:7b:87:8d:9e:35:34:7b:4a:90:27:ae:7f:ec:
         58:91:7b:dd:04:37:c8:3b:ed:d5:b4:b0:5d:ca:4f:3e:cb:e2:
         f4:c9:fc:29:7e:13:99:99:5c:33:8c:3b:34:69:00:30:20:5f:
         7a:b5:d2:41:b0:46:dc:98:8e:55:61:9e:48:a6:c9:00:38:64:
         2d:d1:b4:27:d6:e8:d4:d7:bb:d2:29:fa:bb:e2:86:0a:09:3d:
         24:ad:69:91:03:30:80:48:ea:1e:6b:4c:52:7c:ad:18:c7:64:
         88:54:8a:53:ef:cf:78:93:77:11:6c:da:35:3a:e7:07:95:31:
         11:12:5d:98:73:84:b4:8b:9a:81:42:bc:7e:b7:da:0a:43:94:
         dc:83:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:28 2025 by rpki-client