Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be5ade64-d775-3076-aba6-6b5e543b2efa.roa
File:                     be5ade64-d775-3076-aba6-6b5e543b2efa.roa (raw, json)
Hash identifier:          Az6VZXE45Yrb6PgpBRCkW3FazFyy2+ZfT/qyulnZbZc=
Subject key identifier:   EF:84:AA:5D:EA:97:1D:17:2F:C9:F1:60:21:B5:A1:6C:3F:DC:E7:6D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584886B0737B587FFFEAD0FDE700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be5ade64-d775-3076-aba6-6b5e543b2efa.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     401152
IP address blocks:        142.111.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:73:7b:58:7f:ff:ea:d0:fd:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=2f1be802-65e3-4b99-82b9-3bee223c520e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:1d:40:95:62:bd:47:1d:59:d1:44:f2:24:
                    28:f8:27:70:2b:cc:af:93:2f:55:d4:27:c2:00:fa:
                    67:0f:82:01:19:92:a1:bc:20:d7:22:27:b9:c1:46:
                    86:8c:f1:82:d1:20:20:ad:7a:cf:50:69:fc:9a:f6:
                    ff:a1:5b:30:71:35:b4:19:76:15:6b:0b:34:ce:05:
                    7a:52:09:f9:a8:fe:f2:d9:c7:ad:69:c2:dd:9c:20:
                    92:ee:b7:4b:43:49:70:86:1b:0d:d4:62:53:78:24:
                    9a:0f:f9:00:eb:2e:ec:29:44:9f:53:a6:fc:0f:9e:
                    02:48:1a:15:f9:ee:ae:8e:06:98:aa:35:0e:76:ec:
                    41:7b:ca:56:8a:23:e1:ae:bd:f8:97:28:e8:d3:63:
                    00:b5:a9:76:d4:0d:d2:e2:8e:0d:89:e8:fe:6e:00:
                    73:9d:95:13:23:58:a4:9a:29:ec:ce:e7:c9:a4:76:
                    9c:03:87:13:90:80:71:7f:46:78:6d:ea:cc:12:c0:
                    f6:27:74:67:2d:83:66:b8:23:a8:72:4e:2e:8a:bf:
                    7e:5b:1b:96:3e:dc:a1:02:01:66:b4:0c:8b:ff:fa:
                    5f:e2:31:5a:73:08:c4:ad:3a:10:af:a3:6a:85:f9:
                    07:84:dd:db:8d:50:96:30:2a:2a:cc:ac:6b:f7:e0:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:AA:5D:EA:97:1D:17:2F:C9:F1:60:21:B5:A1:6C:3F:DC:E7:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be5ade64-d775-3076-aba6-6b5e543b2efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:05:48:9b:cc:96:8f:38:2b:57:c8:0a:94:2e:97:73:5e:33:
         97:45:fb:6a:41:e3:49:0d:19:86:bb:95:f7:7e:6c:11:ff:4d:
         41:09:6f:d9:7a:18:af:53:da:c4:54:4c:d4:b7:aa:80:64:15:
         07:80:9d:0c:86:2d:5a:cb:af:84:10:4d:8d:de:e5:3e:c5:e4:
         47:bc:61:fa:cd:02:0e:ab:42:ec:a6:5d:78:04:71:d2:d3:b5:
         8f:1d:9d:56:27:c7:a2:54:31:b6:3c:02:d9:30:d9:52:84:20:
         46:72:1f:fd:7b:d9:ba:72:d0:08:40:22:1f:a3:73:ef:27:5a:
         77:c7:56:4c:ef:f0:5c:55:e9:c6:2f:5a:14:f4:14:57:ae:2b:
         f6:57:35:c4:36:cc:cf:ee:02:e1:ea:39:a0:a8:09:86:30:19:
         b7:32:b4:5d:12:02:48:ce:37:8d:ba:a4:77:90:f5:0f:44:b6:
         bf:09:63:30:b9:60:2c:c7:1a:6e:bc:48:04:09:24:ca:db:46:
         24:04:cd:3c:8b:29:cf:e2:55:51:95:97:94:7e:da:a6:ba:cf:
         8e:8e:02:04:69:ea:15:29:56:94:c7:b1:70:0a:82:74:5d:0b:
         d9:de:f2:f7:c4:63:8d:49:f7:b7:e5:b9:b2:00:4a:83:7e:df:
         88:94:da:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:25 2025 by rpki-client