Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa
File:                     61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa (raw, json)
Hash identifier:          S86Wr0Of3B4klLnNrOdS3k6IQ82ZIUzf4qm1gWsdWs4=
Subject key identifier:   46:3B:26:D7:81:5F:18:86:2A:9F:4E:FF:C2:3E:7E:DB:24:65:41:BA
Certificate issuer:       /CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f
Certificate serial:       010D0C9F4328584902EC1499939AD07CAE52D860
Authority key identifier: 9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     55082
IP address blocks:        162.252.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:14:99:93:9a:d0:7c:ae:52:d8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=c57a6115-0ee9-420f-90f0-635a8c735b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:2a:eb:44:aa:f0:45:e4:a5:62:ee:61:d2:
                    09:8d:86:b6:51:ef:3b:95:0a:c8:c9:15:fb:db:ab:
                    23:f0:95:b0:1d:ca:f6:6f:98:7b:20:25:68:17:38:
                    ef:40:88:c0:6d:a0:36:6e:49:73:9a:52:dd:31:4e:
                    e9:88:79:66:e6:c4:f4:17:9e:26:26:1d:99:96:38:
                    1a:c5:63:ad:93:2e:40:dd:f4:cb:38:ca:7c:dc:d2:
                    5d:0f:a9:db:cb:bb:a1:b1:09:d3:c0:d9:7d:33:bd:
                    1e:ba:33:75:39:8f:35:31:0f:a2:82:7c:23:89:93:
                    3d:00:98:f6:d8:b6:92:36:0e:cb:0f:f3:e4:5b:6d:
                    2c:c1:e4:54:65:d3:64:c9:f8:21:dc:32:a5:c4:4a:
                    cb:73:9a:93:82:c5:e0:5a:28:d2:60:99:6d:d8:0c:
                    2f:4a:18:07:73:3e:4a:23:45:6e:32:75:9d:d6:c7:
                    5d:85:97:26:e1:59:29:41:a6:19:ab:fe:31:63:3d:
                    5a:bf:b3:7f:ea:19:bb:ad:25:aa:39:25:c2:64:0e:
                    64:2c:67:d2:d4:24:83:6a:f3:9c:6d:d0:bf:0f:57:
                    d4:3c:ce:ea:59:37:90:dd:2c:02:3f:2c:dc:06:95:
                    cb:84:50:f0:43:b8:f4:4c:0a:c2:02:10:bc:00:59:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3B:26:D7:81:5F:18:86:2A:9F:4E:FF:C2:3E:7E:DB:24:65:41:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.crl

            X509v3 Authority Key Identifier:
                keyid:9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:e5:69:7c:ab:73:63:a4:8e:02:ba:70:b0:10:e8:7a:a6:
         4e:a2:9e:b0:5f:9a:64:61:91:67:f8:6a:98:26:7b:90:2f:98:
         e3:da:93:5d:c6:2f:8b:c2:06:5b:11:73:0f:5b:9d:34:b4:90:
         7b:5d:fc:75:ed:ce:bd:62:a7:48:1b:27:b4:f8:ae:77:0d:49:
         e6:44:4b:0e:67:2a:ce:3b:36:09:35:8c:35:d4:99:a5:33:27:
         a4:56:5f:39:01:d0:09:09:04:3e:cf:bd:37:cd:71:31:fe:43:
         cb:7a:c1:dd:50:3e:ae:f2:d8:9a:41:f8:d7:31:7a:79:06:f6:
         2f:25:e2:7d:f4:4b:1b:d8:8f:9d:81:5e:30:b8:a5:ca:15:30:
         41:be:2a:ab:7c:64:c0:4d:db:03:30:a3:42:2f:d0:c9:38:ab:
         20:42:28:60:e9:59:c0:71:8a:76:c2:f8:0d:0f:ec:e7:8a:9d:
         aa:63:11:a9:a1:01:a4:df:ec:54:64:29:2a:94:5b:4b:e5:af:
         b9:08:0f:fc:a0:24:62:f7:be:c8:67:93:a0:22:69:34:44:9e:
         3f:d2:05:a6:a6:2f:b8:de:af:45:e7:28:81:8a:ff:9d:b2:85:
         24:3f:6b:9d:93:84:41:bd:7e:17:fe:b5:16:5c:08:69:8a:42:
         64:9e:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:17 2025 by rpki-client