Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7e47fb79-747a-33b2-a688-d7290e0afc55.roa
File:                     7e47fb79-747a-33b2-a688-d7290e0afc55.roa (raw, json)
Hash identifier:          4VUqbwSgzf1jdAu9lfoLW5vT6TBq2EvUS2FVwZQwcI4=
Subject key identifier:   E7:32:88:CD:C2:40:2D:E5:A2:20:C9:28:01:83:98:B3:55:15:E3:EC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2BA370630BE3F6181CC580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7e47fb79-747a-33b2-a688-d7290e0afc55.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        136.0.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:a3:70:63:0b:e3:f6:18:1c:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=d4375f6a-39cd-4674-b23c-e08291046531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4b:f2:f3:8a:72:ae:21:70:3c:d0:c7:4a:d6:
                    7b:9d:10:40:37:94:a0:8c:20:80:4a:52:8e:2b:6d:
                    39:c0:da:f4:8a:59:be:92:43:f9:a6:e8:f0:07:73:
                    f1:88:1e:6a:f7:34:5d:e0:41:f7:8c:09:d8:f8:68:
                    88:2c:11:33:38:6d:45:02:b1:8b:d8:1a:7b:d8:b6:
                    d9:53:3c:f4:d6:3a:e2:57:46:29:da:d0:c2:9e:dc:
                    fd:4a:38:46:02:c6:19:0c:26:37:2a:cb:0f:15:a1:
                    d6:8f:f6:8e:19:34:06:a0:14:e2:90:4a:5c:41:8b:
                    d8:21:61:e6:f4:a9:b1:6c:c8:05:81:20:7d:81:b3:
                    6c:49:48:8a:40:f5:55:1b:8d:d4:67:d5:c9:03:17:
                    34:83:da:b1:f6:e8:b2:51:6c:3e:c4:8b:66:3c:56:
                    a5:80:fb:ed:5e:9d:83:17:db:16:ac:5f:df:3b:b6:
                    66:25:5a:7d:23:7c:6d:a8:45:65:4f:4a:84:5d:c5:
                    7d:7a:52:4f:d1:52:ab:cf:e5:f7:fc:a4:4c:73:bb:
                    33:82:a4:c3:dc:73:b5:68:7a:cd:d8:42:76:8d:27:
                    5c:8b:99:6b:13:8e:9f:67:44:d2:db:72:d7:aa:62:
                    75:4b:04:ab:6e:6f:58:cd:2e:79:f0:9e:b9:20:bc:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:32:88:CD:C2:40:2D:E5:A2:20:C9:28:01:83:98:B3:55:15:E3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7e47fb79-747a-33b2-a688-d7290e0afc55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ad:61:5c:56:a4:95:9e:12:36:5c:eb:a1:a8:a1:b0:32:d4:
         d6:64:06:41:3c:7b:a0:0b:eb:93:a9:1b:6a:22:aa:6b:21:b2:
         0f:dc:a1:fb:e3:67:d5:87:24:c0:3c:ac:e1:45:75:76:ed:11:
         45:45:7b:68:ba:b1:40:4f:cc:df:66:12:2e:5c:f1:e3:ef:68:
         1d:40:1b:07:b2:a1:e6:19:4e:04:60:1b:c2:41:44:25:5f:f5:
         ff:5a:02:78:ee:be:a3:69:3f:34:ac:63:9e:75:7b:3b:f6:32:
         a7:18:87:fc:34:d5:6a:c0:dd:3a:cc:94:4e:f7:2e:2e:0f:30:
         56:25:08:19:06:fe:eb:73:40:58:cb:14:cd:d7:bb:86:39:ea:
         58:c5:02:2b:7d:1b:5a:a8:27:73:ac:4b:92:89:48:70:68:bd:
         19:18:60:60:b2:1c:df:d7:78:b6:26:0e:49:cb:4b:1e:f6:9a:
         5c:74:9a:be:f2:94:71:a5:9b:bb:b3:b7:1c:c5:15:1c:38:98:
         74:3e:14:b8:05:ed:82:79:85:62:77:a7:21:5d:19:de:a4:48:
         50:ff:0a:e7:6c:e1:77:fc:b5:88:49:be:a1:d3:95:40:0a:a6:
         84:c7:9f:8c:2f:15:4e:ba:bd:ea:7c:23:67:b3:2b:fe:61:f5:
         de:41:ef:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:11 2025 by rpki-client