Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01890826-4350-31a2-86f7-a2891e603ae0.roa
File:                     01890826-4350-31a2-86f7-a2891e603ae0.roa (raw, json)
Hash identifier:          4kBBxSqMTJ7mkAXPepkG+SnrA1TErMCMoG/Ke3TLWes=
Subject key identifier:   1F:45:EA:6E:A3:9D:6E:4A:3B:8C:CC:4D:97:48:F3:40:C2:8C:87:24
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848AA274EE0D178B8A4C3985100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01890826-4350-31a2-86f7-a2891e603ae0.roa
Signing time:             Sat 25 Jan 2025 18:53:30 +0000
ROA not before:           Sat 25 Jan 2025 18:53:30 +0000
ROA not after:            Fri 25 Apr 2025 17:53:30 +0000
asID:                     30036
IP address blocks:        173.19.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:27:4e:e0:d1:78:b8:a4:c3:98:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 25 18:53:30 2025 GMT
            Not After : Apr 25 17:53:30 2025 GMT
        Subject: CN=84037ad9-e97a-465f-8d03-d5bc30658862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:1f:a2:84:6e:90:0c:21:15:d2:82:15:1b:
                    ca:5b:6f:a7:1b:2a:8b:1a:ef:b2:59:63:51:f4:e9:
                    99:d1:79:ea:bf:63:14:88:b1:c6:99:07:44:c7:5a:
                    00:a4:82:ed:d7:87:02:65:55:30:a5:cf:2d:54:84:
                    d8:af:87:50:be:a3:58:8c:0c:fd:1d:72:11:05:e6:
                    fa:d6:74:80:be:08:b8:fe:d7:ad:a2:5c:92:e2:21:
                    2a:f8:7a:1e:7d:cc:20:b9:ec:95:4f:6a:88:c9:2f:
                    ff:2e:8c:b3:64:15:f7:62:4f:50:01:8e:87:0f:57:
                    82:ac:ec:7b:99:02:15:3a:3b:0f:54:5b:c3:ff:67:
                    25:05:52:78:57:4d:48:37:37:dd:bc:36:81:6c:01:
                    e9:a5:2c:7d:2d:8c:77:a5:a9:22:67:db:9f:b2:dc:
                    c5:69:8c:38:85:e5:b0:56:8e:42:41:67:1b:e6:85:
                    64:e6:44:e0:dd:95:9f:fe:66:89:67:a7:47:34:11:
                    01:41:5e:96:e5:87:19:8b:37:7b:0f:d9:d5:6e:c7:
                    d6:31:15:91:77:b4:ec:8c:1a:c8:ce:c4:5a:82:81:
                    13:f8:9b:66:1e:fc:d6:13:30:07:77:ec:8a:2a:57:
                    cf:91:48:45:82:b4:a0:06:ed:f9:a3:9a:e1:68:96:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:45:EA:6E:A3:9D:6E:4A:3B:8C:CC:4D:97:48:F3:40:C2:8C:87:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/01890826-4350-31a2-86f7-a2891e603ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1f:d8:89:ec:fc:87:2c:e1:f9:9b:e4:33:c5:36:92:cc:eb:
         46:49:94:ca:af:a2:b3:a7:03:bd:eb:f2:79:af:77:b8:f0:8e:
         f4:19:1c:6c:86:92:79:78:f6:e1:53:21:d3:5d:d2:43:b5:68:
         58:5b:e7:68:c8:49:b2:eb:4e:4c:36:17:7e:8f:0d:65:e9:82:
         87:20:90:e7:16:cc:a1:9b:77:bd:7d:63:ea:9b:18:49:b5:f3:
         fc:12:62:0a:6f:f3:3f:78:51:06:4c:ee:c1:88:fb:ed:d8:78:
         49:a9:e1:7a:76:c0:75:50:cd:17:9c:c2:e6:0d:ab:c1:26:57:
         91:e1:ba:66:15:f4:2d:51:ac:db:bd:6e:f2:f9:1e:b3:ac:fc:
         f3:dc:03:c3:86:dc:97:1e:08:e0:e0:7c:3b:5b:44:65:33:06:
         fb:f1:ee:06:10:72:f5:51:29:57:da:b5:7c:42:09:02:22:bf:
         54:a5:54:a2:13:81:cf:f1:05:00:7f:b5:e2:20:e2:8a:b7:fe:
         32:cd:e4:0d:54:13:05:db:10:60:d6:22:11:2e:2f:d5:4c:ee:
         dd:09:dd:2a:92:95:94:1a:81:79:0e:02:66:fa:f7:a7:e4:7d:
         2a:39:a2:be:3d:fd:43:6a:09:3d:ef:a5:0d:78:9a:5a:5b:01:
         2e:16:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:36 2025 by rpki-client