Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/7760cdcc-f2fa-35a4-8043-b43fd903c644.roa
File:                     7760cdcc-f2fa-35a4-8043-b43fd903c644.roa (raw, json)
Hash identifier:          s1X6EoStv14qVSGkso/OerMzgMoGbgMx2OCMl6R0XP4=
Subject key identifier:   84:96:F9:CA:22:B4:A2:B7:29:F3:A5:14:FB:C9:B6:38:31:3A:F0:82
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F432858493243E132725B428DD767D280
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/7760cdcc-f2fa-35a4-8043-b43fd903c644.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     10779
IP address blocks:        23.161.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e1:32:72:5b:42:8d:d7:67:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=02148699-eb25-4376-b1cc-7fa6d5f48c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:d2:ac:2a:9f:4f:4b:e8:b6:ec:5f:46:81:
                    87:9d:3d:fe:a5:49:01:f7:ec:99:17:95:f5:5f:83:
                    35:ae:1a:f4:79:e4:b0:cf:77:92:9f:58:1d:18:78:
                    7f:c3:da:5f:f2:d6:1f:d4:21:11:c0:eb:01:b0:d4:
                    9b:ed:3b:c2:fc:d9:f0:d2:21:d2:c8:4c:9a:c8:6d:
                    22:2b:08:4b:d8:d8:3b:10:7d:8f:f6:f6:a7:ca:e5:
                    39:40:15:37:7f:e0:59:0c:04:6b:06:ed:8f:d1:ef:
                    b6:c7:a0:ee:15:55:44:57:52:24:c0:08:e0:d9:7d:
                    34:44:af:8f:60:7f:fd:8e:bb:58:58:b0:66:1c:b5:
                    89:15:ca:00:40:a7:05:1e:be:61:77:3e:08:cf:cc:
                    72:82:03:21:43:aa:31:ed:f7:c7:61:4a:17:1d:cc:
                    3b:b7:6f:7e:16:74:3b:8b:0a:26:01:ed:c1:be:91:
                    19:ae:ee:eb:c6:4c:81:a4:06:ba:65:7d:c5:af:0e:
                    fa:36:92:d7:77:7e:18:11:41:b9:32:c6:27:aa:67:
                    9b:8b:fa:d4:1b:fb:86:e6:49:72:4f:dc:9b:9d:40:
                    47:e9:03:5b:c8:8d:dd:cf:c5:65:3c:5a:87:81:07:
                    58:b8:b3:43:40:9b:a1:cd:c9:9a:08:94:77:1c:c9:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:96:F9:CA:22:B4:A2:B7:29:F3:A5:14:FB:C9:B6:38:31:3A:F0:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/7760cdcc-f2fa-35a4-8043-b43fd903c644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:af:a7:cc:37:99:4d:ae:19:b9:ea:d5:05:5a:9d:07:23:68:
         64:ca:a8:04:c3:47:41:7c:51:24:02:ff:2e:fa:07:cb:ce:04:
         6c:a9:67:b0:52:84:ee:40:0d:02:53:62:b2:75:fe:4f:2d:72:
         a2:68:5a:1b:a0:32:77:d1:e0:41:ca:27:7f:1a:f1:35:3a:bc:
         c9:52:91:66:4c:86:a9:f3:86:44:2d:35:e3:60:90:e6:1c:a0:
         1a:86:d5:4c:29:55:d1:30:67:d6:c2:28:02:30:ed:5b:10:91:
         f3:d5:0b:7f:18:c0:85:08:fd:8e:69:58:70:84:d3:db:aa:c4:
         6a:4f:84:04:3d:90:ba:47:a0:28:d4:b6:be:b3:e4:ed:db:9c:
         26:6d:18:67:48:e7:2f:b4:12:72:a1:d5:e6:8c:65:e7:7e:1f:
         73:2a:ed:dc:55:4f:8b:36:10:ab:0e:30:f6:1c:47:b2:bf:52:
         d4:83:74:de:7e:4f:f8:8a:62:84:b1:58:75:ef:ed:e9:69:26:
         11:75:59:a2:be:89:63:e8:7e:1f:60:db:54:12:d8:f0:cf:46:
         63:72:e2:f6:80:8d:a4:7f:67:b3:47:c2:11:a1:ba:91:54:f6:
         08:f3:fc:c5:d5:51:7d:1c:0a:47:7b:d2:3a:aa:fa:3e:1b:de:
         f1:81:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:05 2025 by rpki-client