Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0d887c8-f3a3-3865-898d-da48ba5bd918.roa
File:                     a0d887c8-f3a3-3865-898d-da48ba5bd918.roa (raw, json)
Hash identifier:          UN91ocGQ/0M3kQhXH/NxyFjrrCD9IcTllBtPGhfWZXI=
Subject key identifier:   A0:2F:E9:43:9A:23:B3:1A:29:40:63:B4:7E:D9:AA:BC:A1:A7:F3:49
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848FD106561137D5F005E89DDB0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0d887c8-f3a3-3865-898d-da48ba5bd918.roa
Signing time:             Mon 24 Feb 2025 11:39:26 +0000
ROA not before:           Mon 24 Feb 2025 11:39:26 +0000
ROA not after:            Sun 25 May 2025 10:39:26 +0000
asID:                     30036
IP address blocks:        63.142.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:10:65:61:13:7d:5f:00:5e:89:dd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 24 11:39:26 2025 GMT
            Not After : May 25 10:39:26 2025 GMT
        Subject: CN=705b9e18-0295-402c-a7d7-4be08e3122d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:01:66:04:80:02:ff:64:9c:66:83:9b:ab:
                    5f:3d:e1:10:2b:0d:42:92:78:c0:8d:03:a6:79:ce:
                    99:4c:e3:90:58:4d:aa:57:a2:ae:b4:2d:82:a1:20:
                    0e:b8:4f:d4:6c:a0:89:12:38:f5:06:81:86:60:71:
                    38:92:a1:21:8a:14:18:ba:04:3e:a6:3f:30:fd:00:
                    e3:b9:fe:d9:02:23:19:04:6a:19:2b:84:6d:07:de:
                    71:9f:0f:4b:59:cf:74:0a:67:02:06:ee:57:d7:f2:
                    b1:ac:f9:7e:db:5e:f9:f6:46:34:1d:f4:2d:b2:59:
                    b3:83:94:fc:5c:9b:53:3a:37:cc:15:17:96:71:20:
                    92:6f:d6:49:65:b5:c5:97:5c:f7:7c:0d:9e:6b:2a:
                    f0:3c:f6:d7:2c:1a:58:22:2c:47:29:6d:ec:56:46:
                    9c:13:c6:09:12:81:27:29:c3:dc:29:f8:36:c0:36:
                    c9:b7:26:8a:ef:25:b7:6d:52:d0:49:dd:c9:e3:5c:
                    2b:3e:c2:f5:2a:d8:d4:fa:25:6b:5e:88:db:79:55:
                    20:59:12:59:b5:af:8e:9c:27:cd:d3:89:0a:01:16:
                    16:14:f3:04:4e:3d:c5:8b:be:de:5b:03:71:03:d2:
                    3e:23:1a:2b:3f:14:9e:a8:bd:3d:66:2a:32:ee:fe:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2F:E9:43:9A:23:B3:1A:29:40:63:B4:7E:D9:AA:BC:A1:A7:F3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0d887c8-f3a3-3865-898d-da48ba5bd918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d5:4f:6c:8e:39:07:38:44:8a:17:82:8f:42:56:b1:6c:0c:
         a3:ab:eb:5b:d0:5e:6a:49:02:84:1f:be:a6:52:85:5b:23:cd:
         ac:84:07:ed:bb:47:fe:7f:91:5f:fa:1a:c7:80:dc:7a:aa:c6:
         8b:b2:fd:af:5c:74:95:16:d8:88:48:e4:d1:e1:e3:00:62:10:
         07:70:5c:90:60:eb:d3:94:e9:46:30:cc:f6:dd:83:66:6d:0e:
         b8:7a:d2:8e:8f:2e:3f:ef:00:28:ba:bb:22:e1:ef:9d:8a:f8:
         e9:1a:b9:ac:da:a8:2e:ff:7f:27:91:44:90:e4:5c:91:b5:0c:
         96:68:bb:27:5d:90:5b:f6:7b:cd:26:e3:45:61:1c:ee:dc:c9:
         2a:1a:69:42:fc:49:a0:8e:2f:e6:77:dd:bd:77:cb:bd:6d:27:
         a7:23:36:b1:c1:6d:7d:dc:92:b3:94:a6:cd:fd:2c:2a:0d:78:
         14:40:9e:0e:53:bc:8c:d2:bc:18:a1:5e:88:a6:f7:b0:39:0a:
         0f:dc:16:9d:b1:8a:c2:74:44:0c:b5:58:aa:46:07:44:c3:e4:
         00:09:2a:07:96:70:de:88:17:77:71:77:87:0c:d8:1c:b8:d3:
         9b:ab:0a:95:2b:f4:b7:6a:d5:61:db:df:13:74:3e:0d:71:13:
         1d:3e:e1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:21:05 2025 by rpki-client