Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1c721d55-7e88-3309-8c24-b702b0af5cb5.roa
File:                     1c721d55-7e88-3309-8c24-b702b0af5cb5.roa (raw, json)
Hash identifier:          m3tGEStzU21lokqCpKjew/Lh1Ei9I16EAWmKpLfN/iU=
Subject key identifier:   E8:15:01:7B:07:D4:1F:11:FD:B2:ED:E9:87:D3:60:E1:20:35:DC:0D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848F00C4A098C99223D31D80080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1c721d55-7e88-3309-8c24-b702b0af5cb5.roa
Signing time:             Wed 19 Feb 2025 19:45:39 +0000
ROA not before:           Wed 19 Feb 2025 19:45:39 +0000
ROA not after:            Tue 20 May 2025 18:45:39 +0000
asID:                     204957
IP address blocks:        142.111.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:4a:09:8c:99:22:3d:31:d8:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 19 19:45:39 2025 GMT
            Not After : May 20 18:45:39 2025 GMT
        Subject: CN=46ae65d9-dfe0-4b18-95e3-19fe7cd29f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:03:19:78:54:17:ae:de:b4:eb:81:20:94:
                    20:da:59:df:a8:09:20:c8:6c:50:cc:8f:ec:3f:7a:
                    9e:42:27:18:37:79:8b:d1:35:69:f8:32:aa:95:15:
                    b7:27:30:56:b8:e6:fc:9a:c9:7e:d5:77:10:db:ad:
                    09:17:68:94:67:76:9a:d7:ac:99:90:13:44:97:aa:
                    93:15:66:50:be:eb:1f:e6:b2:26:97:85:c2:17:23:
                    4e:91:af:ab:17:1b:f1:20:91:f9:0e:bb:de:9d:0e:
                    1e:9a:b4:c7:e3:4d:3e:0b:cb:c5:95:4c:48:2e:6c:
                    f8:81:43:99:98:ab:26:3e:ec:c4:a4:39:0b:7a:80:
                    31:68:24:70:62:a2:61:1b:05:ab:52:2d:b1:98:2a:
                    18:27:94:76:0a:a2:07:ea:92:79:5f:a4:44:31:34:
                    ec:68:c2:27:b7:24:2f:ea:60:2b:9b:7a:57:55:8c:
                    f8:a5:1c:8d:6f:a6:6d:d4:28:5b:c3:64:66:82:6d:
                    81:03:eb:65:fc:e5:41:e5:45:d5:bd:64:76:dd:1e:
                    23:7f:11:db:a1:ec:5e:12:2f:d7:60:c0:3e:5b:69:
                    7e:9e:b3:8a:ae:db:26:b3:a9:84:7a:f9:67:72:2d:
                    d5:55:85:9b:74:46:79:9d:a3:c1:98:58:91:4d:ce:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:15:01:7B:07:D4:1F:11:FD:B2:ED:E9:87:D3:60:E1:20:35:DC:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1c721d55-7e88-3309-8c24-b702b0af5cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:aa:54:36:a9:45:6c:0f:b2:7b:97:fe:d8:ef:b9:17:2a:
         79:b9:0a:38:da:56:31:00:bd:dc:5e:fa:4c:84:fd:2c:82:eb:
         75:70:f7:79:60:6c:ac:12:9f:8f:20:f6:13:dc:03:b3:df:5d:
         19:03:71:ba:a7:04:27:a8:ea:60:e6:fb:01:0f:5f:38:0d:dc:
         bc:92:a1:65:6d:9a:df:0d:fe:6a:20:e1:04:60:d4:75:41:b9:
         57:c7:17:ca:04:a4:f4:ff:2d:82:cb:21:c3:3a:69:26:b7:2f:
         6b:59:e4:23:6d:8e:3b:fc:bc:47:a7:44:2f:b8:3c:e6:9d:d9:
         bd:77:ff:ff:f7:5e:21:fd:8a:dd:50:6b:ae:9f:af:a0:dd:92:
         02:a4:8c:b0:98:13:d6:10:88:6b:83:4f:9c:9c:c4:2b:4f:7b:
         38:99:35:f8:32:c7:b3:09:29:ff:c4:00:ff:0c:f8:ad:80:d3:
         14:0f:69:6f:d5:6f:62:e5:8d:d0:f5:59:28:5f:92:26:dc:d0:
         7e:8c:42:7e:45:59:d4:61:dd:f9:3e:4d:05:d0:82:9d:7e:36:
         96:e7:77:81:a3:3a:69:7a:6b:c8:05:ae:fd:c1:b6:83:d1:46:
         dc:3d:d4:3a:c7:0a:4d:14:dc:04:43:d5:b6:5b:64:e3:a6:b6:
         6f:24:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:06:33 2025 by rpki-client