Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f3ce7d3-e45b-3054-b9d2-6a25437449b3.roa
File:                     1f3ce7d3-e45b-3054-b9d2-6a25437449b3.roa (raw, json)
Hash identifier:          PefP4Vw0fDcEiZR9/TiENSDJK+qHO9W7RjlH5+og2zg=
Subject key identifier:   F2:ED:03:17:7D:79:00:D7:A5:4C:17:56:F9:D5:FB:BE:3E:B5:46:F5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858488DC8129F3023CA12312CCAE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f3ce7d3-e45b-3054-b9d2-6a25437449b3.roa
Signing time:             Wed 15 Jan 2025 14:58:59 +0000
ROA not before:           Wed 15 Jan 2025 14:58:59 +0000
ROA not after:            Tue 15 Apr 2025 13:58:59 +0000
asID:                     202015
IP address blocks:        104.253.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:c8:12:9f:30:23:ca:12:31:2c:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 15 14:58:59 2025 GMT
            Not After : Apr 15 13:58:59 2025 GMT
        Subject: CN=b0629827-9abb-4b88-adc0-162c1e16b5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:87:dd:b3:ef:ad:c6:59:2b:7e:38:e8:a6:
                    ac:e3:87:5c:cc:0c:c2:92:da:c3:1a:5b:a5:36:b6:
                    62:53:ad:8e:b4:68:7f:d5:1a:ed:51:da:89:0b:78:
                    bd:f7:d4:eb:fe:15:56:07:1f:c8:10:38:f6:95:df:
                    9a:31:0c:b1:b7:00:d0:6b:e7:00:a9:c8:bf:fb:21:
                    7e:e0:fa:e0:cc:c6:af:9d:ea:44:20:b6:79:85:7d:
                    33:9b:d6:fe:e3:a9:42:c9:d5:ac:7a:bd:fb:7d:ea:
                    3c:1c:e8:51:cb:91:80:58:2d:c2:99:b9:6a:0e:01:
                    ec:8e:68:6c:ba:91:f3:fa:30:c1:a2:41:e8:fe:d3:
                    c2:9b:b2:02:ae:4e:f0:44:57:37:be:ae:60:fd:da:
                    d7:9d:37:6b:da:12:05:c3:a0:d5:f0:f5:53:65:bb:
                    17:91:1e:e0:93:9e:9d:c2:92:2c:f1:12:00:26:49:
                    cb:c9:b1:bc:67:a3:e9:f5:83:7c:82:06:3a:67:a9:
                    d1:d4:8a:0c:0c:1a:1c:45:cf:99:0c:d1:e5:d6:09:
                    f6:6b:72:2c:b0:c1:1b:5d:c5:70:65:a9:c7:30:c4:
                    d7:3a:d9:02:d2:d6:32:6d:e3:d7:23:a7:1d:5a:2a:
                    b3:74:7c:26:e1:58:1c:95:ab:1d:bd:c9:40:5b:10:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:03:17:7D:79:00:D7:A5:4C:17:56:F9:D5:FB:BE:3E:B5:46:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f3ce7d3-e45b-3054-b9d2-6a25437449b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:59:cf:a0:ec:3e:6c:dc:31:b3:4d:c1:a5:8e:4b:e0:fb:1e:
         ce:98:42:be:9b:ed:4f:43:95:f4:d3:ff:de:6a:fc:d8:b8:48:
         54:c7:51:8b:10:be:91:2a:47:f2:5f:7a:09:c3:96:36:ee:95:
         42:5d:47:da:19:03:a6:27:21:81:69:1e:a8:29:a8:cd:45:27:
         8d:fa:87:cb:b2:c2:54:0d:0a:e1:8f:88:6a:dd:85:71:5d:46:
         10:30:de:59:85:d9:1b:ee:a2:df:4e:c8:a4:8d:88:87:1f:59:
         ce:9a:c8:36:5d:22:6c:f3:78:a2:b2:3e:e4:a5:52:54:76:48:
         f4:cf:23:35:c9:57:4a:bd:f2:9b:f3:b7:5a:bf:33:05:8d:17:
         f8:b4:bc:82:ab:01:70:34:4d:d7:34:6a:bd:40:c2:d2:5f:41:
         07:7f:14:f0:3d:43:0d:a2:71:b1:9c:50:ca:f3:08:35:3d:e6:
         58:09:42:e4:8d:34:ef:69:ab:bf:36:7e:45:3e:b7:3b:45:84:
         77:c5:49:c9:cd:81:4d:d6:9e:99:c5:cf:bd:05:26:77:2e:ba:
         4e:98:83:30:4e:41:29:d2:17:92:a9:d2:2f:5a:46:9c:4b:6f:
         c4:35:62:b8:e9:4f:05:5b:11:59:23:7f:01:b9:c3:41:a4:7c:
         d8:d9:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:15 2025 by rpki-client