Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa
File:                     d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa (raw, json)
Hash identifier:          AfKZK+d7tyNkWoPnrvrYZX89nL5BSaOFnsxt7quwEKw=
Subject key identifier:   9F:14:1E:C5:57:7F:95:F9:D0:D8:67:5F:9A:AC:F7:A1:A7:CD:6C:57
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285848ADC6166149EE7CA750D33A00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     137409
IP address blocks:        173.239.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:16:61:49:ee:7c:a7:50:d3:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=717bba14-9dcb-41c4-9347-240812a7f72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:42:66:9b:7b:a5:3f:4d:1c:e6:ef:6e:0b:1f:
                    1f:17:14:a6:4f:bf:3f:5c:74:4a:91:38:39:fb:31:
                    db:8e:8d:8a:1a:7d:20:c1:2e:da:ad:3e:d1:f7:08:
                    6f:db:94:e8:30:7f:82:70:8d:c8:29:b1:9e:36:46:
                    38:e1:de:73:d4:5f:a7:0a:ef:d8:93:14:f6:05:30:
                    6f:41:d3:58:65:e7:e9:f8:b4:94:09:13:f5:b5:be:
                    ff:2d:64:f8:c2:06:05:33:de:1c:98:37:77:ef:d9:
                    6f:a6:c9:46:c4:36:40:3c:fb:7c:bf:2f:fe:c6:ad:
                    8c:64:ce:0b:2a:c2:c9:94:21:79:c5:2f:23:15:98:
                    9f:e0:07:39:5a:e4:3a:6e:61:da:ac:e4:0c:4d:78:
                    40:5d:c9:27:06:4a:0a:48:e7:80:0a:9b:2b:10:92:
                    22:51:de:87:95:1a:8e:41:f4:5b:49:0d:c6:d7:76:
                    72:e9:ac:1b:b9:ae:eb:f3:5a:65:a8:f0:d5:ff:2d:
                    60:8c:bf:b6:77:e2:e8:2c:78:90:e8:d4:00:0c:65:
                    f1:90:19:5c:f3:4d:1d:ab:d8:5f:46:69:e5:05:de:
                    14:4d:f5:af:f8:9f:c7:c2:98:76:93:a4:dc:7a:0a:
                    25:43:63:d3:b0:1e:5d:e0:0e:19:29:2c:ce:83:5a:
                    7b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:1E:C5:57:7F:95:F9:D0:D8:67:5F:9A:AC:F7:A1:A7:CD:6C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/d164de3e-4cd4-3bbd-9d16-1e2f9785cdbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:ac:f0:d0:bd:3c:91:8c:3d:0c:82:dc:45:60:51:f3:cb:0b:
         8d:86:8e:45:43:0e:04:30:3b:54:75:47:40:c4:da:6a:37:1b:
         86:a7:4e:14:4e:3e:1e:d3:e3:b3:30:c4:3a:0b:16:03:26:09:
         b0:3d:99:f3:a2:ab:d2:f8:10:9a:3d:9d:4f:4b:81:52:f5:ed:
         07:e7:c1:8a:47:56:82:32:a1:e2:c7:ca:40:34:2f:ba:8a:8b:
         73:4f:85:7f:b7:77:40:bd:75:2c:de:88:f1:94:d8:af:86:17:
         22:90:2a:a1:0b:48:e8:25:d5:bf:dd:6f:fc:aa:da:0e:dc:57:
         6b:1e:bd:56:5d:13:39:c5:d6:96:45:7a:a3:85:29:ee:c5:ea:
         52:a4:b1:e1:a5:ad:35:48:82:c6:19:96:90:8b:25:a9:ef:e6:
         a1:b1:b0:36:37:6b:8d:f0:e2:50:13:8b:57:51:32:89:8a:77:
         8a:a5:c1:8c:2e:ec:27:63:ad:94:c0:14:8b:68:90:b9:ba:d3:
         cc:e3:a8:10:64:c1:b0:fc:a0:51:6c:db:8e:e3:3b:68:e7:6f:
         b6:80:f7:09:f1:c2:83:7d:71:0e:eb:d9:0c:99:4e:50:1a:c1:
         de:6f:6f:78:68:a5:40:58:ca:72:0b:87:1a:a3:b5:fa:ec:43:
         71:90:21:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:02 2025 by rpki-client