Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5964d6d3-888d-3864-99b2-3adf9404632d.roa
File:                     5964d6d3-888d-3864-99b2-3adf9404632d.roa (raw, json)
Hash identifier:          H7ROv5mNhFhegSo2ocB5usCQ+DQ0UkxxZZr2FjxV8Wg=
Subject key identifier:   DE:C4:50:AC:40:62:31:BD:11:34:E1:57:70:DD:DC:33:F2:37:08:31
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B5CBF5A4BD80EFA79BFB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5964d6d3-888d-3864-99b2-3adf9404632d.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        184.151.0.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:cb:f5:a4:bd:80:ef:a7:9b:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=2e6fab71-d300-4151-ae92-232421638f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:66:af:ce:b3:88:80:e0:9f:18:3d:29:e3:
                    88:52:06:8d:d8:aa:b5:2d:34:e2:bd:56:49:d3:14:
                    6e:7e:09:52:6b:37:5a:6f:06:0e:c0:a0:73:2d:0a:
                    db:b5:96:af:c5:18:a4:1f:15:31:83:b8:5c:09:96:
                    b0:c9:5e:b7:a2:bd:60:8c:16:3c:0b:fc:fa:74:91:
                    47:03:14:ef:21:d2:a0:c5:6a:4c:b2:c0:05:2f:9e:
                    63:28:da:06:9a:fa:d8:9b:6f:41:c8:c0:3c:c1:3f:
                    93:3f:c8:a8:5c:46:00:df:80:9b:30:ea:fc:5a:02:
                    c4:80:ea:26:ea:c2:fa:4d:32:ed:f5:e7:2b:50:e6:
                    f7:d5:77:db:37:c6:22:7e:c6:c3:9c:2c:ba:13:d7:
                    51:65:03:4b:5b:46:7b:04:8b:b4:b0:f1:74:56:e7:
                    fd:fa:0b:14:26:a4:e1:1c:d6:09:fa:91:b4:8c:5d:
                    5b:d3:5e:86:26:b4:21:c7:6e:d9:c8:68:18:91:69:
                    00:11:d9:27:78:0d:6e:b9:77:10:b4:87:82:62:ce:
                    0c:a1:de:0b:86:3e:40:a3:e6:2e:5a:ee:a2:3d:a9:
                    fd:48:9a:2a:53:2b:7c:6e:63:64:0b:bd:87:6f:81:
                    d9:63:10:80:32:c3:a9:af:fc:00:53:48:8f:e0:7d:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C4:50:AC:40:62:31:BD:11:34:E1:57:70:DD:DC:33:F2:37:08:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5964d6d3-888d-3864-99b2-3adf9404632d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:ea:02:d4:41:23:56:31:97:e3:4a:45:9e:c3:69:02:df:
         4f:98:9f:a6:51:8a:39:93:af:ff:cf:a5:c7:bb:fc:13:bc:f5:
         d2:7c:34:9e:f7:e1:ab:e2:34:cc:68:9e:4b:4e:94:9f:96:cb:
         44:70:00:d6:8e:0c:0d:e8:09:79:ce:83:96:72:89:06:ea:53:
         f4:4f:91:14:00:79:55:cc:8c:b9:b3:5c:f0:c1:62:5b:a8:88:
         0d:45:60:86:3a:1a:80:d3:a6:c0:b7:a1:d4:d5:0c:ea:7b:86:
         69:e3:9e:0b:c6:de:54:94:b2:9b:f5:92:4a:33:81:07:6c:25:
         0c:63:49:69:69:87:62:04:3c:bf:c9:5f:e5:45:d8:04:fd:5b:
         3a:b6:fc:51:3f:6a:28:67:3b:82:e0:9e:0b:2a:20:b3:48:c6:
         7e:04:0e:d4:d1:fb:33:d7:62:ce:1e:44:44:20:55:59:b2:94:
         6b:d5:4f:87:5f:69:59:5b:88:a0:1a:98:20:ba:a6:a0:d0:6c:
         e3:4b:81:a8:20:47:0a:3b:92:f5:97:23:67:8c:3d:a1:44:45:
         08:47:0b:a9:6f:b3:19:2a:e7:bf:03:8c:4f:f4:0f:e1:64:9d:
         38:a8:b9:f9:65:12:5a:d0:eb:9b:09:09:d0:47:93:38:d8:eb:
         3b:d0:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:31 2025 by rpki-client