Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4877cc0-b75c-3996-8f9f-1fafd5ff6c2f.roa
File:                     d4877cc0-b75c-3996-8f9f-1fafd5ff6c2f.roa (raw, json)
Hash identifier:          M+72QbAv13WhLbhTGw2ZsxnOeWWsRXQIzUuj4sjgEP0=
Subject key identifier:   E6:3D:C5:5B:E2:FA:00:0C:E4:C9:B6:F9:37:07:F1:7A:5C:CC:CF:50
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581EDB529EAB1F89668A700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4877cc0-b75c-3996-8f9f-1fafd5ff6c2f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.21.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ed:b5:29:ea:b1:f8:96:68:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=053f9b8d-793f-4110-9125-4eb5f84096bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:d6:e3:df:f9:64:01:33:20:9d:44:66:e8:
                    f3:ed:fc:64:8b:d5:57:7a:e1:61:17:0a:e7:e4:6e:
                    a0:cc:9b:ed:7b:2c:6b:ce:1d:4f:cb:62:b4:2d:6f:
                    02:2d:5c:ca:39:e3:69:87:8d:58:3c:28:27:81:df:
                    5f:82:7e:b3:58:94:c6:18:ba:37:3e:6a:f2:d8:d3:
                    b2:40:e6:b4:3d:61:e5:80:0b:3e:e6:e7:1a:4d:bd:
                    67:c0:58:54:21:d6:2b:03:c8:af:13:d1:87:e3:7f:
                    70:55:a6:ff:16:20:73:1d:c7:7b:c5:9a:c3:fe:21:
                    d2:11:03:ff:74:4a:9b:8e:31:54:85:46:f0:02:f6:
                    b7:0b:c5:5d:89:46:39:df:9e:08:2a:75:e4:eb:c1:
                    63:40:5e:95:58:5b:86:cc:59:29:20:36:6c:e8:4f:
                    da:2c:63:8f:55:87:95:bd:67:6b:db:3e:75:dd:ac:
                    36:a2:26:ca:21:97:2d:59:93:64:76:cc:4f:c7:a3:
                    8c:12:94:7e:c8:28:54:d9:05:ad:f6:15:7e:5f:88:
                    b9:3a:8a:57:f8:79:92:fa:bd:b9:bc:4d:8a:0f:78:
                    f9:90:9f:41:12:14:16:0b:e7:f7:65:2a:05:07:a2:
                    b5:c3:80:5d:d3:2f:66:d7:1d:9b:e0:cd:eb:12:12:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3D:C5:5B:E2:FA:00:0C:E4:C9:B6:F9:37:07:F1:7A:5C:CC:CF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4877cc0-b75c-3996-8f9f-1fafd5ff6c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:00:29:65:1f:15:39:e9:f1:62:12:f1:9b:b6:7f:22:6f:c3:
         44:41:30:5e:cc:78:64:99:af:b5:db:d2:87:a1:c6:e3:27:fb:
         0c:08:c9:ee:a1:ce:e4:f2:66:ce:4b:b9:0b:67:ea:17:c7:68:
         55:35:5e:1a:07:4a:0d:0f:30:c2:7f:44:26:d5:d9:4f:6b:63:
         63:fd:80:d9:b5:b1:02:69:77:d5:95:7a:8f:1d:9d:3a:5b:5c:
         54:62:00:08:2a:f5:59:2c:9d:13:66:af:00:ec:ed:32:5c:ff:
         be:7f:8f:0a:8b:d7:da:a0:3c:83:3a:e2:9a:ba:0c:ef:06:7e:
         73:45:41:79:5e:ce:71:b1:0c:36:05:0e:27:e4:a1:43:2f:44:
         f5:95:77:0c:1b:b4:71:48:eb:1c:f6:73:15:e3:40:48:d6:46:
         83:77:c3:ef:32:27:22:ef:92:c1:a4:bf:a8:8f:e5:38:b1:6c:
         a7:37:43:6e:b3:7c:1e:83:9c:5d:c7:6a:b4:9f:70:fe:91:f5:
         3c:91:4e:69:e5:b9:50:0c:2e:06:d6:9f:01:e9:12:7b:ca:72:
         19:2e:88:88:4d:40:d9:34:51:2a:68:86:4d:00:a3:66:50:07:
         97:ec:11:fb:49:91:96:65:de:4c:30:d8:eb:db:9a:86:93:68:
         b8:5f:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:06 2025 by rpki-client