Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46e286ff-ba5d-357f-b2c0-8ae233476de2.roa
File:                     46e286ff-ba5d-357f-b2c0-8ae233476de2.roa (raw, json)
Hash identifier:          YVznqnbw9RtGHA4SL/rfRN7U1KsTxKCfmqX0tYbU0fE=
Subject key identifier:   31:CC:9E:F9:7B:51:96:AA:1D:5C:60:4A:E9:F3:8F:0F:BB:DB:76:83
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581D51A8151A71CA1165180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46e286ff-ba5d-357f-b2c0-8ae233476de2.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:d5:1a:81:51:a7:1c:a1:16:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=2394457b-cc1c-4955-a5ea-ff8769779cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:a9:8c:8c:07:74:8c:14:5a:bb:83:9b:45:
                    f0:81:8a:40:fb:10:7a:62:15:30:b9:9d:f3:7a:59:
                    a0:59:69:bc:1e:53:9c:a9:5d:9c:19:c6:23:b3:0c:
                    b6:41:07:5b:03:80:ba:bc:11:fc:ff:28:23:95:a7:
                    27:88:ef:56:a3:5e:9e:a8:6c:25:e0:de:54:99:99:
                    68:e3:df:12:8b:c7:6c:77:cf:81:31:35:50:02:6b:
                    30:fd:cc:b9:d3:8e:d5:2f:09:25:53:d5:8f:5a:86:
                    31:45:ce:7a:db:09:64:c6:d8:33:7c:c1:3e:b2:12:
                    09:0f:23:49:36:e0:c6:0b:26:a7:f0:a7:da:38:42:
                    45:6b:66:bc:bf:2b:6e:92:c9:3e:57:80:4e:60:8c:
                    a3:3c:ab:c5:1a:5d:24:38:45:cd:fa:db:a8:a9:a7:
                    96:0f:34:98:f2:0d:29:ff:28:ae:67:7f:96:a6:3d:
                    b3:f0:3d:11:10:0a:65:84:12:8d:5e:39:3f:8d:c7:
                    2a:89:c1:5d:5f:9a:c2:dd:29:0d:1e:9c:c7:df:ab:
                    50:30:b9:c3:a0:1f:4b:b2:ef:17:bf:79:25:19:be:
                    be:df:78:90:95:27:ac:fb:89:b3:30:7b:7d:19:03:
                    fc:7b:60:4c:89:82:01:0e:ee:c8:fc:10:a3:29:8f:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CC:9E:F9:7B:51:96:AA:1D:5C:60:4A:E9:F3:8F:0F:BB:DB:76:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46e286ff-ba5d-357f-b2c0-8ae233476de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:54:58:d1:bf:4d:48:5f:ba:4e:5c:ae:18:ee:a4:68:a6:4a:
         78:5f:17:3a:a1:6a:0b:a5:c7:8c:8c:52:26:ca:5e:db:64:cd:
         7b:8e:b6:03:c9:b8:40:a9:fb:27:2a:c5:5d:32:7a:42:74:0b:
         ae:73:93:86:25:92:d8:70:2f:0a:07:a8:bf:d8:32:4d:15:79:
         85:24:af:68:b9:78:b0:eb:7a:a2:4e:bd:04:7d:6d:b9:d8:3a:
         f2:f2:0d:c8:39:13:61:cd:2e:52:78:33:b4:88:da:2e:09:b8:
         cf:60:a8:b4:ac:d7:4d:40:09:fe:4b:40:ae:f4:1f:95:a1:09:
         4f:74:a1:9a:24:62:e8:96:47:99:0d:52:b5:c8:c5:13:fd:9d:
         ea:f2:5d:cf:ef:c7:cd:3c:be:82:7c:ae:ce:ee:32:56:8d:6f:
         b8:51:b0:e9:b7:00:d6:20:5f:96:8b:97:ad:30:d4:96:49:c5:
         3f:e4:2c:23:f3:de:11:b5:60:01:2f:f9:e8:69:96:90:70:30:
         63:bd:c3:d7:d8:5d:ba:91:b2:3d:8f:99:7d:e0:aa:ed:15:d4:
         7a:42:d6:39:6e:11:13:95:01:fd:97:de:2c:d6:ee:fc:b6:82:
         86:11:04:aa:67:c5:36:0d:0c:69:d1:bb:b1:90:1f:ff:ff:46:
         69:7a:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:58 2025 by rpki-client