Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/8793c0d5-d5ff-3508-8faa-05841deb3b0a.roa
File:                     8793c0d5-d5ff-3508-8faa-05841deb3b0a.roa (raw, json)
Hash identifier:          kRUiESogmAJVs+pg1EAWG5Pdl9j47m+zsTNWBJot1k8=
Subject key identifier:   1A:22:6D:31:9F:78:D1:F8:B9:A2:6A:8E:4B:0A:C1:F7:2B:22:71:31
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F43285848BBBB8761C381B6AAC32ECE20
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/8793c0d5-d5ff-3508-8faa-05841deb3b0a.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     23341
IP address blocks:        143.55.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:87:61:c3:81:b6:aa:c3:2e:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=98a81308-f9f8-486b-8c6d-b9395dfc69ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:94:63:6b:24:55:5a:ce:d1:a6:9c:b6:ea:
                    49:15:50:f3:18:7b:b2:6f:c2:b9:fe:1a:ad:64:68:
                    21:55:7c:77:64:c7:24:56:cf:6f:ff:56:49:f2:6b:
                    41:92:bd:d9:cd:f8:55:24:cf:2a:ac:10:02:f5:9e:
                    27:03:5e:e2:67:86:3e:91:d0:34:db:43:1f:ec:33:
                    42:88:4a:59:91:20:e3:3f:2a:19:bb:95:ed:30:e6:
                    f7:f4:9f:29:57:55:fb:88:e5:30:4a:2f:04:3e:14:
                    5e:2f:b4:45:19:62:3d:e0:f6:db:bb:08:4b:65:bd:
                    96:c9:0e:7d:6b:7d:2b:74:96:28:9b:9d:37:2c:12:
                    71:86:b5:87:c6:c6:22:54:af:ab:7c:0e:27:88:44:
                    3c:5a:1f:3e:9a:e5:80:d4:f9:52:10:6d:3e:c6:eb:
                    90:70:8f:09:c4:4d:a9:d1:96:89:87:0a:9b:11:ef:
                    fd:d3:97:d2:21:3f:a2:e7:ac:be:1f:8a:47:f1:17:
                    b4:06:9f:90:ac:bf:e3:09:77:be:7a:ee:48:37:99:
                    2c:25:d6:d8:e8:33:dc:90:57:83:42:a5:cb:2b:03:
                    2f:f0:40:49:fd:47:f2:5e:05:8c:45:7d:7f:d7:2a:
                    aa:8e:63:b5:18:8c:e6:2a:57:07:c6:f3:26:ec:41:
                    92:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:22:6D:31:9F:78:D1:F8:B9:A2:6A:8E:4B:0A:C1:F7:2B:22:71:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/8793c0d5-d5ff-3508-8faa-05841deb3b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:38:d1:71:89:38:37:1a:5f:92:ff:2e:94:64:5f:ff:a1:c9:
         bb:a3:78:37:02:99:0a:42:62:0d:52:76:e6:e6:df:c5:35:be:
         15:ea:9d:1c:03:3c:27:5b:cf:19:48:c5:7f:10:6a:de:fa:e7:
         77:aa:67:b1:8d:09:34:e3:b0:3a:33:fb:ee:5f:fb:d1:79:da:
         f3:d4:b1:7d:9c:1c:6c:a3:17:67:27:3d:8d:c8:f2:24:ad:4c:
         2d:e9:1f:f4:b7:a0:50:98:e4:37:b7:b4:95:1d:06:c7:6e:4a:
         f4:8c:50:98:64:f0:85:4c:7c:3c:c0:7c:22:f0:c7:ba:44:8f:
         9a:d1:ed:24:e5:a5:94:0f:7f:33:95:dd:4f:9e:68:e3:45:1b:
         95:13:2d:74:02:a4:d6:f1:99:4c:24:dc:00:7e:4f:a6:93:d3:
         3a:c8:70:39:16:b4:30:37:64:a2:2c:34:28:03:c1:d0:82:df:
         5c:19:2b:5a:3e:ab:e3:2c:97:3a:7d:1b:79:39:ec:a9:1e:88:
         eb:a6:9c:0c:a8:1b:89:c3:1b:49:48:0e:4a:c3:45:12:1f:7f:
         08:e5:e9:6f:34:f7:18:3a:b6:1e:cc:ac:3a:5b:16:69:3c:ab:
         c3:57:fc:eb:47:21:8b:17:c3:f4:e0:3b:d5:54:05:34:18:33:
         79:96:50:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:51 2025 by rpki-client