Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d553319e-c98a-3386-9af1-2f86678cc7fb.roa
File:                     d553319e-c98a-3386-9af1-2f86678cc7fb.roa (raw, json)
Hash identifier:          Ke+hBAbqCyePfhBZUDNhQeTTMfBmdL7dCWGO2E55nME=
Subject key identifier:   11:87:2F:AB:96:89:1C:23:8A:3D:71:5B:23:24:B2:09:79:32:3B:BD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848F00C4CCCF7228260B7507600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d553319e-c98a-3386-9af1-2f86678cc7fb.roa
Signing time:             Wed 19 Feb 2025 19:45:40 +0000
ROA not before:           Wed 19 Feb 2025 19:45:40 +0000
ROA not after:            Tue 20 May 2025 18:45:40 +0000
asID:                     62240
IP address blocks:        166.88.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:4c:cc:f7:22:82:60:b7:50:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 19 19:45:40 2025 GMT
            Not After : May 20 18:45:40 2025 GMT
        Subject: CN=1b42aef6-45c2-48c9-bc51-7cbc42da6aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:60:d4:e4:a6:07:74:0a:1b:2a:6d:cd:43:
                    a3:66:e7:80:e7:36:4d:47:14:be:21:f2:32:8e:19:
                    76:ed:87:3d:e8:51:56:1c:de:23:a9:c5:0b:10:cc:
                    89:45:46:09:e9:8b:2c:d8:17:b0:e6:10:f8:2d:61:
                    2f:5e:5e:50:71:ec:e6:34:60:00:1e:7d:d0:a2:89:
                    1d:05:8c:67:00:69:d1:77:76:42:cc:e8:70:4e:7e:
                    30:6b:7e:20:ce:af:3c:ab:83:60:ea:f8:42:06:db:
                    40:28:bb:85:25:9a:af:f0:05:bc:41:ed:f2:83:51:
                    84:ec:30:1f:e8:c5:1e:66:aa:86:87:45:c3:aa:6f:
                    6d:fb:f2:f4:c6:16:91:72:b4:eb:38:ae:09:fb:8b:
                    84:8b:42:44:4d:e2:35:0c:6c:40:0f:40:e9:88:de:
                    59:88:79:a5:a3:55:2e:08:be:81:b8:99:b4:5a:31:
                    a5:64:36:7b:35:6a:04:2a:50:14:0b:ab:45:a8:68:
                    e7:dd:d3:b5:2d:f2:2f:a4:d1:84:3e:b8:a4:9e:be:
                    5b:e3:1a:57:0b:9a:c6:91:b4:b1:d3:b0:27:66:6b:
                    8e:3e:65:72:fe:0d:87:fb:6c:1b:fc:0c:39:e9:1d:
                    82:2d:72:80:eb:9c:9f:38:61:9e:d7:4d:d6:e8:ab:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:87:2F:AB:96:89:1C:23:8A:3D:71:5B:23:24:B2:09:79:32:3B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d553319e-c98a-3386-9af1-2f86678cc7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:23:5f:5b:fc:23:67:ca:8c:2b:65:13:2c:bf:28:96:07:69:
         a4:6c:82:1c:d1:af:b5:c7:f1:c8:ac:20:c6:03:7b:35:eb:55:
         00:a4:c0:02:98:3e:9e:89:49:bf:18:5e:c0:6f:cd:01:61:ba:
         a4:5f:59:f9:47:4e:db:94:79:4e:2a:b8:c4:c2:24:19:f6:08:
         6a:04:ee:a7:b4:fe:86:81:03:63:f8:35:df:a9:ff:b4:34:5b:
         c6:46:e7:07:79:87:b1:3c:0d:b2:de:47:e9:18:6d:bd:d5:e3:
         d6:15:4f:ca:ce:ff:95:e9:6b:d5:2f:69:75:42:3d:11:df:28:
         a1:15:cd:5f:4f:01:39:da:d5:34:31:ae:58:89:49:c2:b7:b0:
         fd:c6:f5:2a:9d:4e:8e:dc:eb:77:e6:ff:2f:ee:0e:0d:88:72:
         e5:bb:c8:50:60:92:fb:77:a2:a4:73:f3:76:97:a9:4b:68:04:
         17:dd:35:57:f3:3f:f4:3b:a2:ee:39:23:a9:83:60:15:1e:ad:
         4a:f6:e2:fe:d7:f1:3e:a3:04:cb:71:e6:13:93:3a:c5:af:93:
         d4:f1:c5:a5:93:70:05:6b:b7:a0:b6:37:29:e8:51:85:dc:b7:
         9d:bb:cf:60:22:2c:14:10:8d:82:71:db:21:51:db:f6:af:68:
         ad:2c:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:16:57 2025 by rpki-client