Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/620162ba-97b6-3cf0-b68b-70b9a848c224.roa
File:                     620162ba-97b6-3cf0-b68b-70b9a848c224.roa (raw, json)
Hash identifier:          xk+P1eXwNFS/J7G5uk/3ZwqPJ/x0KZfyOd2vZ/5Duxg=
Subject key identifier:   70:39:DF:3C:9A:CF:93:8B:9D:AC:39:9D:D3:2C:99:44:17:BC:08:B5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858489FD09FD02520A4E6EC48F740
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/620162ba-97b6-3cf0-b68b-70b9a848c224.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        142.111.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:9f:d0:25:20:a4:e6:ec:48:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=949634c8-f42a-4f2b-8ba7-34d10dc8a6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:bd:b9:6f:27:3f:a6:d0:e2:97:df:5c:62:
                    72:3a:b3:28:88:5b:ec:25:c0:8d:8c:ab:ce:fc:05:
                    f9:7d:8c:8b:34:d8:5d:f2:6c:50:cd:e1:3f:b2:26:
                    7f:d3:7a:49:26:99:b0:96:1c:ca:44:4a:f4:da:eb:
                    34:c3:3d:c7:c2:8a:63:44:01:6b:bc:d2:8f:d4:71:
                    d0:ae:38:ca:01:e3:ca:40:cc:4b:a1:45:8a:ac:17:
                    9b:b5:b0:5b:25:92:4c:c2:b0:3c:7e:7c:07:0a:5b:
                    70:8f:ac:1c:4f:10:74:01:e6:e7:31:58:f9:87:34:
                    e6:78:32:1c:9b:66:14:d9:67:96:dd:2e:46:4a:a2:
                    3e:f6:2d:38:42:27:c4:66:2b:62:f9:04:64:39:65:
                    1d:97:66:fb:53:6e:74:fd:56:9b:c7:6d:02:71:5f:
                    c4:c7:33:e2:8a:59:f5:e7:1d:52:73:53:ff:b3:b6:
                    74:0d:df:8a:ae:93:cd:78:c3:f0:46:1f:45:c4:d0:
                    62:f0:1e:5c:8f:9a:82:a7:98:9a:51:59:e8:c0:28:
                    91:bd:b3:b1:89:c8:9a:06:05:ae:b1:89:c0:e2:4e:
                    f8:df:38:55:ff:93:83:d2:94:de:b2:3d:df:d9:be:
                    3f:2e:dc:d5:b8:ec:0e:63:b5:09:99:c1:c1:a5:c8:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:39:DF:3C:9A:CF:93:8B:9D:AC:39:9D:D3:2C:99:44:17:BC:08:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/620162ba-97b6-3cf0-b68b-70b9a848c224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:03:9f:bd:35:ec:88:66:f5:a0:ad:49:7f:0d:c8:4e:62:2c:
         52:99:0d:3e:1c:d2:a1:47:e3:f4:a5:29:27:36:8c:0e:02:a0:
         69:92:23:67:31:90:d6:8d:f6:72:3c:88:16:71:aa:04:3b:d7:
         4c:1e:b2:b4:b1:0f:1e:55:c3:89:82:9c:23:fc:0e:34:b6:61:
         78:73:81:96:e8:ed:0f:02:eb:9f:93:85:92:2e:91:9b:05:e3:
         ae:cd:3d:cc:79:fe:be:ff:30:34:fb:44:c4:0e:8f:4c:fb:5f:
         5e:51:c2:84:1f:07:59:c9:f0:c3:37:1c:b4:b9:dd:ea:49:9e:
         d3:1a:e6:98:2d:81:fb:16:d5:1c:9f:19:dc:ff:30:02:8b:b6:
         6a:5b:32:b7:cc:7c:f7:0a:b4:db:53:2f:63:53:c7:ce:cd:93:
         95:ad:1f:a3:b6:19:6b:c2:ba:3e:e2:aa:37:08:7c:1f:5c:5c:
         87:5b:19:be:1f:33:08:8a:a0:87:bc:d7:b0:53:51:ae:04:09:
         0b:bd:ab:f1:6b:e7:79:a9:9f:1f:0a:c7:5a:92:7f:8f:e1:0c:
         b7:9d:4a:5b:45:59:ed:bf:9e:0d:17:8d:43:1a:1f:d0:c8:ff:
         18:e8:d6:2d:db:a5:d8:9c:f3:00:97:2a:ec:9e:87:1d:8d:ee:
         da:94:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:58:53 2025 by rpki-client