Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a217cd8a-9246-305c-9857-c896f4ea4516.roa
File:                     a217cd8a-9246-305c-9857-c896f4ea4516.roa (raw, json)
Hash identifier:          t6p9NB3r0xQlJ1jzN9Q6CXSS9ibTyT8c86RLqOA5oLE=
Subject key identifier:   99:8B:86:93:70:CC:4F:01:12:32:32:5E:39:2F:25:5C:D7:0C:6D:77
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921343841DA8DF7DE6B40EE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a217cd8a-9246-305c-9857-c896f4ea4516.roa
Signing time:             Sun 09 Mar 2025 10:20:43 +0000
ROA not before:           Sun 09 Mar 2025 10:20:43 +0000
ROA not after:            Sat 07 Jun 2025 10:20:43 +0000
asID:                     577
IP address blocks:        184.150.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:38:41:da:8d:f7:de:6b:40:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:43 2025 GMT
            Not After : Jun  7 10:20:43 2025 GMT
        Subject: CN=b97fe887-d573-4ff4-baad-8e770c48890a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8d:ed:03:70:47:5a:9d:18:5a:7a:19:83:81:
                    7d:59:26:4f:70:a1:b3:e8:f2:38:a6:d4:da:3f:bd:
                    91:b5:62:a2:c8:fd:98:7c:71:ce:cd:d0:8b:70:8e:
                    fb:af:3b:0a:ab:ba:5b:08:c3:0e:5c:b7:d6:23:ec:
                    3f:20:65:88:b8:9b:57:7d:80:85:a7:f9:30:27:36:
                    48:5e:9c:e8:a8:75:a7:e3:5f:00:76:ec:fb:02:85:
                    a2:f6:44:cb:55:16:31:b0:d7:d0:33:09:0a:b6:70:
                    7c:08:b9:05:59:fc:75:86:a3:3c:af:ac:aa:f8:d7:
                    0d:26:98:fc:98:42:a6:06:53:26:60:cb:a6:17:34:
                    14:cd:ec:78:84:a9:af:98:4b:d8:ba:53:ea:04:ba:
                    c3:c4:52:1d:3c:e9:29:c2:fd:93:8a:b7:33:5c:6e:
                    d9:c9:f3:02:35:9b:09:1f:e9:bf:4f:c1:2a:d2:d7:
                    15:4b:f6:4f:9e:b9:cb:de:71:ba:96:76:6d:e8:80:
                    ed:79:9e:2d:d3:90:d8:de:34:1f:74:5e:90:5b:73:
                    dc:e8:b6:7d:eb:2d:44:02:2d:9d:cf:a6:6d:6f:12:
                    22:ec:41:33:71:46:42:98:38:af:30:7e:d0:bf:1e:
                    3f:65:67:50:5e:8b:ae:f7:86:0e:34:da:d4:10:77:
                    2c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8B:86:93:70:CC:4F:01:12:32:32:5E:39:2F:25:5C:D7:0C:6D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a217cd8a-9246-305c-9857-c896f4ea4516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:b6:54:ec:9a:f1:f7:dd:6a:f7:8e:58:8d:c4:d1:d3:72:
         ba:65:68:0d:b4:89:f7:31:7c:48:f0:61:28:84:63:bf:f2:bb:
         16:c8:41:85:41:f3:0c:c9:c0:26:0a:cf:f6:fb:4e:2e:ff:4e:
         ac:74:45:72:0e:21:01:fa:e5:4e:08:19:81:74:d0:a9:c5:39:
         80:39:e5:99:4a:9c:10:99:1e:9a:02:bd:ca:f0:20:92:f2:b9:
         8c:a1:02:d2:c4:98:1d:f0:78:d0:3d:78:66:b9:d2:4f:86:9e:
         c8:79:6b:85:92:a4:b9:a8:45:d5:05:f7:51:ca:eb:aa:28:d0:
         5d:84:1d:07:16:c8:17:eb:5b:3a:26:82:68:ea:86:25:16:56:
         d0:ce:f3:1f:7d:79:81:8f:97:02:52:b4:a1:c8:4c:91:f7:9a:
         d9:08:dd:b0:aa:cf:6f:f8:f9:c3:26:af:42:aa:cd:50:51:86:
         a4:78:7b:75:f5:9b:bc:80:cc:b0:bc:fa:96:ed:e6:fa:9d:c9:
         ea:09:34:c5:bf:7b:89:e3:03:6f:70:d5:5c:65:e2:49:49:ff:
         0e:42:b2:f7:c6:f1:ba:08:d3:5f:59:5e:d1:4c:d9:2f:2d:d8:
         7a:09:5a:c9:ce:25:72:41:cc:3f:20:ff:a0:10:fc:dd:66:bf:
         d4:5d:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:25 2025 by rpki-client