Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/f547ba72-9c1b-35b6-b0f2-3f18cec39515.roa
File:                     f547ba72-9c1b-35b6-b0f2-3f18cec39515.roa (raw, json)
Hash identifier:          sY/JZU01glSk4nojSEKm9FspcXjXL4JpNaq7yhuNOG0=
Subject key identifier:   9B:9F:DB:F5:53:43:77:AB:A5:2C:0A:07:66:67:DF:0D:30:38:09:D6
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F432858493C093C6F20BD37F3C5F9FA80
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/f547ba72-9c1b-35b6-b0f2-3f18cec39515.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     396982
IP address blocks:        151.193.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:3c:6f:20:bd:37:f3:c5:f9:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=8dd07e14-5730-4636-b4ad-b9ede642e01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:0c:2c:19:05:83:af:5f:6a:2b:3a:23:74:
                    98:d2:78:ef:dd:fa:3a:f8:08:c5:86:78:1f:90:4d:
                    c0:a6:1a:91:92:0b:2f:ac:95:cc:35:cb:6f:c0:85:
                    22:2b:34:87:95:61:2a:cc:7e:2d:7c:1f:b4:f2:64:
                    81:8d:68:b1:ac:e7:e9:38:c6:a8:bc:63:74:e9:b0:
                    31:e8:e9:8f:cc:fa:73:e3:f4:aa:90:35:cf:32:d9:
                    a9:4e:fa:9b:b3:94:81:93:a4:1a:63:0d:9b:e5:f8:
                    b4:88:8e:44:6a:bd:ba:c2:25:16:e6:9b:f0:77:db:
                    9f:17:2a:92:19:c4:cd:5f:52:7d:a0:f4:09:39:39:
                    96:07:93:6e:ed:38:66:76:c2:3d:29:ea:47:25:59:
                    7d:44:42:1f:70:9b:99:16:83:2c:93:75:a9:4a:e6:
                    bf:0b:72:31:1a:3a:46:6f:08:9d:34:61:5b:b8:66:
                    17:ff:87:c2:77:75:7a:63:34:52:9c:3b:d9:50:57:
                    5a:8b:30:40:a2:fd:bf:89:1e:66:fe:38:d0:27:0a:
                    ed:83:1f:a1:fe:d2:bf:9a:3a:73:c4:ef:d4:76:3d:
                    d8:ca:0e:c0:90:63:f0:5f:42:e0:4d:ba:05:7f:d7:
                    36:c8:eb:ea:93:6a:cd:64:92:dd:2a:f7:59:50:ff:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9F:DB:F5:53:43:77:AB:A5:2C:0A:07:66:67:DF:0D:30:38:09:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/f547ba72-9c1b-35b6-b0f2-3f18cec39515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f8:17:97:34:5c:af:56:5d:f0:c7:96:c9:3e:d6:c2:e9:ed:
         da:a7:1a:bb:b6:01:36:0c:2b:57:55:83:bd:25:ce:38:24:06:
         35:f8:e3:88:1a:6e:c2:cc:87:06:66:1e:ba:55:7f:8f:51:3b:
         e2:d3:3a:7d:4b:8e:4e:f8:f2:3c:63:fc:5e:20:cf:c9:15:0c:
         9e:94:8f:bc:ac:ff:a9:7e:ee:67:3d:41:1d:96:0e:ae:dd:41:
         7b:a0:4d:28:4a:be:79:88:95:6d:82:77:73:fe:47:8f:89:8d:
         22:e4:4e:95:4f:d1:66:1e:2f:1a:f6:a7:5e:a3:68:e5:c7:62:
         b7:51:fa:06:aa:91:c3:54:1c:d7:e7:49:5d:a0:5e:ee:a3:bb:
         cc:0c:39:7d:59:99:6e:c5:f0:a6:d7:da:67:5a:68:2c:c8:69:
         10:6f:1e:2f:f8:ae:dc:fd:d1:e2:bc:22:75:9f:95:94:d0:d4:
         86:43:15:02:5f:dd:45:26:75:f1:3f:64:6f:b5:18:50:a0:a6:
         2d:89:a0:53:eb:cb:96:d1:dd:42:68:95:6a:e2:3b:23:84:a3:
         95:0d:e2:dc:f6:d3:f5:da:c7:87:70:53:c1:53:51:9b:02:b5:
         ca:f3:d0:48:56:06:9a:2e:5e:c7:e2:f9:8e:5a:47:b4:57:35:
         fc:f0:0e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:43 2025 by rpki-client