Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d813a30f-7c6f-3784-bbf1-69517a391010.roa
File:                     d813a30f-7c6f-3784-bbf1-69517a391010.roa (raw, json)
Hash identifier:          Q5J0U1NjbAQvxKY4b0zEsPf6XWTZiqxzVmwLpIgqs9k=
Subject key identifier:   E9:5E:AC:78:02:65:89:28:72:02:36:A1:78:7A:FF:3F:C9:03:6D:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C55847B650070459FA0F5680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d813a30f-7c6f-3784-bbf1-69517a391010.roa
Signing time:             Tue 04 Feb 2025 12:39:00 +0000
ROA not before:           Tue 04 Feb 2025 12:39:00 +0000
ROA not after:            Mon 05 May 2025 11:39:00 +0000
asID:                     30036
IP address blocks:        150.195.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:58:47:b6:50:07:04:59:fa:0f:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:39:00 2025 GMT
            Not After : May  5 11:39:00 2025 GMT
        Subject: CN=d3c96c46-343e-4823-a34c-77ba018f457a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:08:f7:d6:ad:10:a5:83:39:7b:52:8b:d6:
                    8c:44:05:73:79:81:bd:df:27:34:90:87:2e:f8:09:
                    69:cc:e0:f5:1e:ef:e0:97:8b:5e:00:f7:fd:53:dd:
                    32:c2:14:1e:cf:06:d0:4b:99:6e:18:1e:46:a4:eb:
                    b0:27:a3:02:74:5f:a9:16:7a:75:35:ec:ca:a8:36:
                    24:28:22:1b:06:42:25:93:8c:c8:f0:9f:db:9b:81:
                    aa:e8:6d:7e:88:87:b7:17:62:81:4f:4c:d4:f5:8b:
                    8c:7c:88:eb:85:f1:5d:4c:67:69:37:b8:54:f0:9d:
                    52:7c:07:f5:ad:1d:6c:a5:6b:a2:25:f7:54:9c:37:
                    b1:aa:55:fa:21:8e:69:63:64:b9:f0:a3:ac:24:57:
                    0f:18:2f:51:75:7d:69:92:7c:35:30:cc:93:62:db:
                    f5:85:76:dd:1d:b5:3d:2a:be:d2:a2:1f:63:30:27:
                    10:7e:fb:cd:21:5f:ac:44:f8:9a:eb:72:66:2e:5b:
                    8a:c9:f9:24:21:23:91:b6:8b:00:1d:4b:2b:c8:87:
                    d7:c3:ff:e1:1e:7b:bc:5e:13:24:77:a9:68:8a:a1:
                    c4:ff:45:48:13:0f:76:0c:bf:66:11:1a:c7:0e:27:
                    67:78:dd:0f:ac:38:93:c8:e0:7e:55:98:10:67:b2:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5E:AC:78:02:65:89:28:72:02:36:A1:78:7A:FF:3F:C9:03:6D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d813a30f-7c6f-3784-bbf1-69517a391010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:69:ab:78:64:93:00:95:c7:00:bc:cd:9b:9c:3a:8a:d1:
         e2:ac:09:be:0c:a6:4d:03:1d:a5:3c:b1:11:9d:6c:04:cd:51:
         c2:43:05:47:ff:9d:15:9e:1f:82:4c:9c:38:95:41:35:95:1f:
         79:70:e8:31:78:2e:3e:82:86:3b:28:39:99:0d:70:8a:18:4a:
         a9:24:1a:80:d0:42:6b:0e:ef:40:07:40:0f:34:6e:3d:45:68:
         f9:cf:f9:8d:9a:ae:4d:46:4a:4b:25:eb:00:1d:86:c4:9c:c6:
         ad:f7:cd:95:53:bd:02:57:73:d1:46:b9:a5:d4:6d:95:ac:b7:
         0e:e3:17:0d:55:e0:65:89:ab:90:a6:bb:23:cc:d5:e4:63:c3:
         12:9b:35:9f:32:14:80:5a:0b:20:63:a9:b1:3e:30:3a:ae:a1:
         52:53:11:e7:c8:e3:c9:8d:21:20:f8:9e:62:79:5a:ea:28:c5:
         62:ee:64:a7:28:4f:50:89:0c:c3:95:8a:f1:e5:67:de:06:ef:
         9c:39:48:e5:3f:26:bf:23:f9:cb:48:c4:09:61:fc:77:7f:3a:
         2c:77:79:e0:1e:70:b0:0c:39:f5:32:03:6e:52:8e:9a:5f:7f:
         39:de:3a:1b:e4:19:bb:d6:8b:bd:fb:2d:90:75:ff:fd:ba:5d:
         65:b5:ec:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:18 2025 by rpki-client