Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac6dbdf9-6191-30ad-80e7-724a86f78d7e.roa
File:                     ac6dbdf9-6191-30ad-80e7-724a86f78d7e.roa (raw, json)
Hash identifier:          0rFb4/ZrT/xz6SsRDGgYbfqra/FBSPzsWePRm5EuRMg=
Subject key identifier:   F1:C5:78:5E:8C:2E:BD:2C:CF:F0:FC:C7:D0:2B:9E:F2:AE:B9:27:2A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581E29B7B4EC9C5592AF800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac6dbdf9-6191-30ad-80e7-724a86f78d7e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.20.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:e2:9b:7b:4e:c9:c5:59:2a:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=154882f8-15d6-451a-9b8f-1ce4f98ba487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:a0:8a:3b:8a:8a:bf:aa:81:a7:23:2a:96:
                    ad:5d:28:09:6c:11:fa:ff:cd:d5:22:0c:f4:34:e8:
                    6e:b8:78:97:be:77:44:59:46:40:bf:93:03:54:fd:
                    17:d0:c9:b2:93:c8:ad:72:6e:e8:63:6b:ff:f1:aa:
                    db:c7:4c:91:bb:03:9e:21:cc:c8:4a:70:73:b5:0a:
                    70:d2:69:2b:dc:f4:7d:73:70:a3:46:b7:4c:eb:be:
                    99:49:44:17:6e:34:5e:d6:fe:20:7c:0a:0d:b3:3e:
                    71:41:b9:7c:df:39:0f:7e:aa:4c:a2:d6:d7:3a:dc:
                    e7:8e:ee:0e:96:7c:85:52:56:08:db:50:13:4f:71:
                    0e:9c:da:9b:e3:44:e8:85:d8:28:64:fe:71:f5:e0:
                    35:e0:77:7c:56:41:4e:47:e1:c0:8d:31:cd:23:b1:
                    e7:e9:3a:be:69:2b:f8:cf:a6:b0:34:a9:6f:c6:f3:
                    3e:19:61:b4:1d:72:05:02:5d:d6:50:cf:f7:f2:7f:
                    2c:0b:98:57:32:2a:6e:f2:dd:f3:39:39:40:c4:a8:
                    33:03:9a:fd:22:9d:9f:76:4d:91:54:93:69:40:8a:
                    53:70:e5:dc:68:81:cb:c4:e4:ed:51:82:bc:dc:8b:
                    03:86:95:7e:c5:79:76:99:aa:61:a6:f6:e7:ea:62:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C5:78:5E:8C:2E:BD:2C:CF:F0:FC:C7:D0:2B:9E:F2:AE:B9:27:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac6dbdf9-6191-30ad-80e7-724a86f78d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:28:f2:bc:dc:06:63:9a:b8:b6:84:4e:21:da:a9:a2:4f:66:
         77:93:2d:a6:6c:71:f9:7c:75:dc:2f:d8:4b:17:04:21:e6:eb:
         ee:7a:82:72:f1:e5:1f:0c:5d:ca:d9:9d:2a:65:38:dd:17:3f:
         00:cf:cb:22:0a:00:fb:9a:ca:27:88:6c:cb:a1:ee:4e:0e:37:
         f0:5e:66:a8:89:4e:df:2e:36:47:ec:53:ad:b5:89:1d:0b:90:
         0d:be:5d:a9:8d:ca:3d:ea:de:c8:c7:10:37:ce:f9:8e:46:80:
         02:8d:6c:ef:67:32:3d:e8:df:4b:e8:b6:6d:35:b0:2e:f6:e5:
         02:a3:1f:62:f7:8c:0a:fc:ae:b6:48:f8:a9:b1:2c:75:5c:ac:
         22:f1:fe:55:7d:e8:8d:e6:c0:49:22:59:f4:fb:96:7f:a1:46:
         62:45:24:03:ee:d0:d2:13:0a:80:9e:4b:96:52:eb:a9:3e:dc:
         c3:33:56:cd:01:87:36:52:c9:aa:34:65:24:af:6b:db:00:96:
         ae:df:52:af:9c:bc:2f:16:30:f6:51:6a:83:b9:3f:67:b8:74:
         04:e4:80:37:d1:28:ae:48:77:43:b5:a2:6d:f7:38:fe:58:82:
         5f:5a:c6:1a:36:1a:e5:a0:a9:a8:8d:07:58:3a:10:0c:25:eb:
         4d:e5:f2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:18 2025 by rpki-client