Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ad362286-0dd4-356b-8b9f-5772f71df2bb.roa
File:                     ad362286-0dd4-356b-8b9f-5772f71df2bb.roa (raw, json)
Hash identifier:          9ijEaay5gTCr+Wd+Ccgdq8AF4XtDQiuCvubhP8vFRNE=
Subject key identifier:   8B:D4:97:15:B5:33:0F:E6:54:C9:4E:B0:5C:EB:0C:DC:E5:EA:A6:13
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F432858488280880F6AADC2BEE15C5880
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ad362286-0dd4-356b-8b9f-5772f71df2bb.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     62571
IP address blocks:        198.143.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:88:0f:6a:ad:c2:be:e1:5c:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=c472aab5-2116-4e4c-bcd9-476e6402b47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:a9:c6:aa:06:39:67:12:b4:3b:3c:5c:1f:
                    61:06:b7:81:06:12:c4:24:a5:30:ef:a3:ce:f6:7d:
                    43:19:9d:02:ed:ff:fa:44:1c:17:b4:4e:ea:43:cf:
                    f2:3d:e0:d8:91:29:3c:f3:7b:04:e9:c9:62:6a:a7:
                    63:5e:8d:5a:61:52:c3:cc:d9:91:b0:e2:2a:f4:bf:
                    08:07:e6:32:bc:8d:02:b8:de:33:92:c7:09:f2:7e:
                    58:1f:a1:1f:21:ae:ac:4d:41:f8:b3:30:1a:80:1c:
                    1b:cc:a9:b7:bd:31:f2:11:41:03:26:ae:8f:3c:cf:
                    86:f0:f8:16:a3:7d:98:fc:d8:67:4a:a3:aa:36:0b:
                    0a:c1:38:43:e4:d2:c2:12:ff:ed:a2:bf:3f:ff:a7:
                    c0:3d:63:14:11:96:42:bf:b0:34:86:c3:12:02:c3:
                    1e:da:01:c5:39:dd:12:7a:41:f9:99:12:c1:40:7d:
                    79:60:8e:c7:8a:ac:c0:58:b8:7a:7d:f8:ec:17:10:
                    c4:d2:02:40:ae:c5:33:aa:d6:12:aa:64:7d:58:6d:
                    40:58:2f:af:ee:39:bb:68:0a:27:7e:cf:41:04:4b:
                    bc:4a:c7:a7:eb:e5:fa:ed:32:53:53:8f:17:3f:8c:
                    bc:b0:f8:2a:81:66:dd:8d:c1:dd:3c:29:a1:b5:72:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D4:97:15:B5:33:0F:E6:54:C9:4E:B0:5C:EB:0C:DC:E5:EA:A6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ad362286-0dd4-356b-8b9f-5772f71df2bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.143.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:03:60:dd:8c:e8:fb:e3:8f:cc:be:b8:22:7c:11:70:7d:d8:
         aa:11:32:9f:43:98:8a:37:c2:5c:4c:51:01:23:18:e6:36:90:
         45:9d:5f:11:76:95:af:5f:27:7b:d1:ec:01:ea:8e:d4:eb:a4:
         db:92:27:fe:3e:3f:f1:8c:ba:c8:39:3e:30:0d:2f:d6:fb:a1:
         5e:99:16:64:9b:ca:a4:72:8a:9e:fb:0d:3e:cc:02:0a:6c:f4:
         11:d2:39:87:65:33:5e:8b:dd:5a:29:1e:62:62:f9:72:7e:85:
         8e:ba:c7:58:23:2e:eb:aa:f6:1d:e6:f1:e0:a1:33:83:00:5e:
         17:90:18:92:55:97:6d:97:51:c3:14:7a:f2:47:1e:14:33:59:
         66:14:32:35:c4:3c:01:d7:6b:44:8d:98:db:f4:2a:72:9f:74:
         78:4b:b9:c0:ba:00:b5:51:94:4e:10:7b:7e:d2:12:56:85:de:
         41:56:d6:60:20:99:47:59:f2:0a:50:71:cc:e0:75:6f:b9:bb:
         be:f8:68:2d:6a:a9:6b:44:53:04:b3:67:56:a8:79:33:89:3f:
         68:26:f8:01:3a:68:be:b1:a3:a2:14:44:af:1b:ea:e6:63:e8:
         1b:8d:b8:60:e3:fc:cf:fc:52:62:a3:be:5d:97:c5:04:14:e1:
         a6:56:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:46 2025 by rpki-client