Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2d109612-24a6-3961-8022-1e38651ade66.roa
File:                     2d109612-24a6-3961-8022-1e38651ade66.roa (raw, json)
Hash identifier:          PIBSsYD5dT81JrNG5ddRI3wRoNPFDOnIdFbl1RzeDmw=
Subject key identifier:   B0:D0:B2:AB:D5:5C:1C:96:C8:EB:DE:0C:CE:92:21:7B:B4:15:3F:89
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285846E69AA976CBF112608F3D0100
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2d109612-24a6-3961-8022-1e38651ade66.roa
Signing time:             Sat 17 Aug 2024 01:00:30 +0000
ROA not before:           Sat 17 Aug 2024 01:00:30 +0000
ROA not after:            Fri 15 Nov 2024 02:00:30 +0000
asID:                     17916
IP address blocks:        20.154.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e6:9a:a9:76:cb:f1:12:60:8f:3d:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug 17 01:00:30 2024 GMT
            Not After : Nov 15 02:00:30 2024 GMT
        Subject: CN=951a9187-ef0f-42ae-bd5c-e0fd7b49f09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:20:e7:c1:bc:ff:4e:b1:a1:fb:ce:a6:ac:
                    b9:a5:d6:a9:18:03:ad:86:29:6d:9e:01:41:07:34:
                    9d:fa:21:27:a5:f9:69:f6:4b:a4:ca:5a:1f:6a:37:
                    06:32:4f:18:cb:46:a4:9d:6f:51:4d:7c:09:72:18:
                    6c:2f:89:c3:f6:b9:21:d2:09:75:bb:4c:7a:11:f4:
                    89:94:fe:67:6c:1d:70:19:25:24:6b:04:f8:2d:d5:
                    22:d3:7d:6f:c0:39:a2:0c:08:00:83:23:2a:54:dd:
                    83:1f:85:ca:07:8c:7c:70:f1:51:50:53:7a:bd:6e:
                    95:4f:6c:63:b1:23:bc:a3:43:39:dc:3f:d9:80:01:
                    b8:28:4f:dc:14:e7:58:b4:b5:87:eb:d6:29:86:79:
                    b7:bd:37:5a:e6:84:33:d6:c9:bc:50:47:bd:56:02:
                    49:0a:54:17:e0:b4:7d:c8:bc:54:0c:b2:e6:bc:30:
                    3e:9f:58:e9:84:77:7a:44:a3:7e:5f:79:15:64:29:
                    a7:52:96:04:b5:e8:6c:52:eb:6c:3b:cb:a6:7b:ff:
                    44:bc:5b:c6:0e:3f:e0:30:da:ed:fe:33:75:6c:b8:
                    68:0f:73:38:b3:cf:1d:73:03:09:ca:7d:5a:e8:42:
                    11:36:ac:3c:d6:56:39:b2:e4:83:fd:32:4b:61:6f:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D0:B2:AB:D5:5C:1C:96:C8:EB:DE:0C:CE:92:21:7B:B4:15:3F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2d109612-24a6-3961-8022-1e38651ade66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.154.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:5b:ab:c0:49:4e:d9:ef:8d:c6:b1:6a:a5:73:0a:7b:c8:
         56:41:c1:5b:04:95:0f:eb:c2:7c:c7:ed:1d:aa:51:a9:95:38:
         bb:66:b2:b1:c9:3e:4e:ab:ed:c2:3a:7a:f1:06:81:00:5d:25:
         3a:11:db:ff:a6:ad:28:54:b9:67:da:6a:6f:1e:c7:3c:69:3b:
         ea:e7:6d:2a:f3:a1:82:9a:17:59:4a:cb:88:7f:39:6c:74:cf:
         89:2e:a8:b2:9e:12:dd:46:43:9c:ee:ee:21:f2:88:9e:65:79:
         6a:1b:03:2a:a3:b9:d7:a9:59:05:c2:55:d1:4f:60:d8:e9:7e:
         5c:71:5a:c2:b3:4e:2a:91:2e:d9:de:6b:1c:d1:ea:f8:59:9c:
         a8:c9:1e:f4:ac:da:5e:00:0b:ba:41:ac:fd:80:87:d9:33:14:
         13:5d:48:21:80:12:a6:2b:32:09:03:e1:a6:7c:15:ea:15:79:
         16:bd:39:c0:7a:02:3d:c2:82:46:ec:41:82:38:24:87:b0:13:
         33:c6:a2:14:c7:ef:e6:36:63:9c:a6:30:52:d2:92:5f:18:8d:
         ba:18:f3:36:54:13:8e:49:e0:89:82:54:59:40:22:53:35:71:
         e6:bf:da:e8:c2:66:91:50:a8:a7:d8:ef:74:57:d6:44:db:3b:
         14:12:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:58 2025 by rpki-client