Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0929582e-8735-3f12-bb17-309ac976bd26.roa
File:                     0929582e-8735-3f12-bb17-309ac976bd26.roa (raw, json)
Hash identifier:          DyTcfcB55q5jto91csbGLCPJRVWUQyIPsx6tHgIoX1U=
Subject key identifier:   50:7A:02:64:CA:F1:2D:1B:21:65:2F:30:D2:27:F6:82:E1:0F:CF:0D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412CF170BB712BED9D5140
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0929582e-8735-3f12-bb17-309ac976bd26.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        172.121.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2c:f1:70:bb:71:2b:ed:9d:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=662ecbeb-a7bd-4982-baf1-2f2819265d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:49:fa:ee:09:48:f6:96:01:0c:20:87:1f:fd:
                    b4:9b:d6:97:73:42:02:c5:2e:fd:8f:68:62:60:cc:
                    d3:24:ae:dc:29:ec:0a:9b:9e:6d:7c:c1:d8:ea:10:
                    9f:1c:8e:25:c1:ba:bf:41:19:e4:e4:b4:b0:2b:f3:
                    6c:f4:cb:2e:5d:54:3f:61:28:5c:2c:8c:6d:58:bd:
                    59:dc:53:7f:33:cc:fe:93:5f:8a:b3:67:c6:e8:d5:
                    da:f6:2c:86:ee:66:19:c8:d1:e7:b2:a5:b1:39:fa:
                    5a:b5:f2:86:cb:49:bb:6c:ba:4a:93:fa:b6:e3:d3:
                    d4:4a:09:aa:d2:a1:b5:e0:ef:d1:4a:da:78:3a:54:
                    9a:b6:94:d4:3e:08:7d:23:e7:ea:55:80:05:1e:7f:
                    0b:a3:4f:a5:74:9e:2a:c3:6a:9c:44:09:7d:26:9b:
                    e3:db:2e:97:85:79:44:e5:d7:b6:42:b9:a5:3a:23:
                    0d:12:ac:3b:07:52:90:5b:eb:9d:78:28:1d:c1:80:
                    8a:14:54:0a:fb:87:ea:b2:cb:81:d8:16:9f:a8:1e:
                    dd:bb:5c:80:e5:25:92:46:8d:04:79:05:39:29:de:
                    c5:d8:01:74:b0:51:9d:81:fc:2c:75:11:a0:21:8b:
                    95:b6:b9:75:d7:5c:25:2c:31:07:ca:42:e0:8f:5c:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7A:02:64:CA:F1:2D:1B:21:65:2F:30:D2:27:F6:82:E1:0F:CF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0929582e-8735-3f12-bb17-309ac976bd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d0:28:55:b7:7f:34:38:f3:5f:97:a9:36:98:dc:79:22:21:
         5f:5f:dd:64:a4:a0:70:e0:be:b9:eb:88:0b:49:2f:7c:19:41:
         47:d3:c0:71:30:58:aa:2b:e4:b9:af:bd:a3:96:1d:27:1c:0d:
         bb:08:ee:31:16:67:a5:b5:2f:dd:61:76:79:d8:de:60:2a:34:
         02:ea:88:06:4b:f7:e3:f0:a2:0b:cf:df:b0:5b:56:e9:30:49:
         21:00:d2:27:41:68:f3:5c:a5:35:65:c0:ed:4a:41:9a:13:66:
         71:71:6f:c5:64:5d:f9:2e:e8:66:f9:a7:0b:17:45:6d:c6:77:
         2f:d3:98:ce:a4:b4:e1:53:27:31:26:78:d4:93:58:2d:cd:5a:
         d6:84:81:58:88:6f:a3:fa:db:83:d5:5b:9e:20:e1:18:95:45:
         09:d5:69:d4:ce:6c:2e:e5:70:21:62:7e:0d:56:91:53:ff:10:
         0e:cc:6f:fd:c1:61:7d:e0:a7:70:4a:79:ab:e1:5b:f0:8c:a8:
         35:b0:bd:ab:8b:4f:d4:e8:e7:e0:c8:25:62:8e:01:07:8f:c2:
         d6:c1:c9:e6:ad:d6:dd:1f:11:d2:5d:3f:11:fb:75:fe:44:7c:
         8c:8d:93:4c:ec:60:7d:93:d6:07:b0:2f:04:45:ce:f9:5c:ec:
         9e:23:16:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:56 2025 by rpki-client