Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0931b9e5-114a-3478-ab0f-5385fad0313e.roa
File:                     0931b9e5-114a-3478-ab0f-5385fad0313e.roa (raw, json)
Hash identifier:          TbmcbzNQuOyfT5FsHWszB2LB1uXIlXPuP+odrYOOo6k=
Subject key identifier:   2C:9B:D8:AB:8C:2A:CD:B1:42:99:EC:34:85:52:10:8A:24:1E:39:4A
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F43285848A400C0DEF7E2319D9E432A40
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0931b9e5-114a-3478-ab0f-5385fad0313e.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     33548
IP address blocks:        195.155.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c0:de:f7:e2:31:9d:9e:43:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=1f5b9bc0-5836-417e-92b3-af50d74caf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:69:f9:24:bd:34:b2:55:93:e4:a7:27:e8:
                    32:ad:9a:c1:e1:7d:34:0f:b1:de:74:a4:7e:3e:0a:
                    b5:34:22:02:6b:fe:91:c8:3d:8f:3c:a0:55:21:87:
                    c1:50:9d:cd:ef:f4:5b:98:91:ec:65:71:b6:c8:4b:
                    5b:3a:4f:66:24:ec:0a:e8:6b:34:12:d9:91:8d:61:
                    5e:ba:22:ea:3d:e0:67:41:cc:d7:35:5f:8a:c7:89:
                    48:d4:2e:8e:c8:1c:6d:9e:55:d4:7c:98:45:4d:29:
                    1f:a1:47:34:92:1a:36:bf:df:a8:84:6f:dc:7e:12:
                    b8:df:24:e7:74:df:1f:f7:76:34:89:68:67:fe:54:
                    d4:58:f0:f0:bd:76:bd:9b:df:14:0d:85:03:bc:53:
                    5b:d9:6e:49:c3:eb:b9:ed:ef:c7:7a:ff:d1:99:03:
                    fb:da:f7:fc:11:0b:09:c0:14:04:e5:d8:36:0e:85:
                    2f:db:c4:25:9f:fb:48:98:94:08:46:e9:52:79:10:
                    cc:44:67:36:6b:2d:56:51:7f:30:d6:a7:e4:7a:2c:
                    4a:d6:fd:ad:40:88:e6:07:6b:3f:90:06:20:ce:90:
                    e2:0f:31:e5:a5:1e:74:7f:c1:63:54:c2:e7:36:7c:
                    c2:16:0e:ca:80:b5:41:fd:22:4d:c3:3d:c4:c5:18:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9B:D8:AB:8C:2A:CD:B1:42:99:EC:34:85:52:10:8A:24:1E:39:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0931b9e5-114a-3478-ab0f-5385fad0313e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.155.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4f:80:3f:f5:ad:61:5f:d7:02:8c:06:87:25:1e:45:cb:9a:
         9c:61:ad:d6:78:30:9d:85:97:f8:c5:cf:c6:c2:76:a0:dd:e0:
         6f:88:6f:ea:a7:84:66:f5:f7:7e:0c:d2:e1:da:f0:45:d8:a3:
         0b:6c:de:d5:8c:84:02:d7:e0:40:f2:6f:91:0c:c1:85:2e:7b:
         f7:92:53:4b:ae:00:49:0a:e7:06:05:6e:62:ea:1b:98:95:36:
         9e:e5:d5:9e:06:27:7c:30:b0:4b:b4:be:13:2b:24:3d:8f:35:
         ae:5b:0b:23:44:8e:17:27:75:f1:b9:02:f6:13:37:f1:cb:b7:
         63:4a:04:19:f7:87:a0:f1:7e:24:dd:d6:86:4d:3b:14:4b:34:
         91:d7:82:1e:df:58:52:86:32:04:d5:f5:93:4b:4c:ac:bf:39:
         c3:e4:2f:20:f9:b0:fb:5e:b5:89:72:4d:47:15:9f:75:2e:1d:
         82:0c:f6:e7:7b:3e:be:ec:dc:4e:16:1e:00:a8:88:39:bf:b8:
         39:1c:fe:7b:66:eb:90:f0:40:20:58:9d:68:47:9a:50:f8:ec:
         99:e8:4c:b7:44:88:b3:80:3b:1b:dc:f6:35:56:e0:c1:76:81:
         1e:ea:ba:af:5d:8c:be:c3:f8:7f:ab:37:6d:bd:92:b7:69:79:
         af:aa:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:22:48 2025 by rpki-client