Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c6d0e69-25a8-3f8b-8eca-58aa96f380f0.roa
File:                     3c6d0e69-25a8-3f8b-8eca-58aa96f380f0.roa (raw, json)
Hash identifier:          Xx/3p1x/U4rsNXrkxowJ19TMqe0tFmQlJ3cy37hKeOU=
Subject key identifier:   17:93:3E:F8:76:8B:77:5E:05:FE:9B:56:39:61:9B:CF:C3:F0:02:94
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848C2B64186682D0A14938B3030
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c6d0e69-25a8-3f8b-8eca-58aa96f380f0.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        142.252.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:41:86:68:2d:0a:14:93:8b:30:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=904be4c2-c5e5-4f63-bae5-36326e037550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:20:ad:59:9b:db:30:3e:0a:43:5a:f5:b1:
                    2b:ed:0b:ab:e7:cb:14:26:32:81:07:86:de:9c:8c:
                    e2:30:0d:9b:70:fc:12:a1:28:e0:3d:b1:bf:6f:da:
                    6f:31:e6:34:13:ff:68:da:7b:8a:fb:38:6e:a8:57:
                    d0:4d:ff:9a:e7:cf:02:83:d0:64:d2:a0:2d:81:d2:
                    5b:09:31:f2:82:f6:cd:76:67:ec:4b:ed:75:cb:cb:
                    4a:af:38:57:d8:21:77:7e:13:2e:5f:3f:8d:ae:ac:
                    a5:93:38:6c:4b:05:e6:1c:16:6f:ad:b4:f9:43:47:
                    26:96:3d:9d:37:de:c3:a3:e5:90:d7:7f:c6:c5:c0:
                    d6:13:ca:bb:37:77:22:f9:0f:f7:24:94:63:79:4c:
                    96:59:2f:78:8e:bf:2e:7a:68:ff:4e:93:58:49:51:
                    6c:f1:48:db:93:6a:aa:4c:10:18:64:43:f7:0c:b4:
                    e1:ec:ae:6a:c1:38:be:e3:34:90:a4:ec:e0:1f:07:
                    46:3c:97:26:be:dc:0f:e5:76:92:f6:fb:50:00:91:
                    f6:3c:c0:24:a2:72:63:af:97:91:42:3f:7f:17:68:
                    ce:a1:d2:be:09:9f:76:5a:8c:e8:d8:0b:b7:f8:f1:
                    c9:32:6c:46:60:3e:67:ca:af:13:60:e7:6b:88:c7:
                    66:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:93:3E:F8:76:8B:77:5E:05:FE:9B:56:39:61:9B:CF:C3:F0:02:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c6d0e69-25a8-3f8b-8eca-58aa96f380f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a1:1e:36:c9:50:d0:21:ab:4e:19:8c:d2:ab:f5:ee:d0:09:
         15:c8:e8:ec:1e:23:b9:b1:22:bb:b5:5b:48:94:d4:12:ca:6e:
         4f:44:80:bb:c1:95:37:e6:9f:1e:24:cf:a0:10:69:2f:ee:36:
         70:7b:4b:5d:7f:e4:7e:30:b3:bb:4a:bf:6d:a4:d7:b8:33:ba:
         f4:61:63:28:39:e9:b1:0e:fc:cb:2b:a1:78:d9:17:4b:fe:7e:
         31:35:3f:9a:7f:e8:a1:ab:21:f0:80:9e:ed:0c:a7:08:5f:52:
         f2:dd:3f:c8:86:56:fc:f3:87:ee:3a:7b:e5:e2:e1:df:25:7e:
         0a:f8:4b:0e:c4:8f:29:73:5b:e1:69:76:d7:5d:2f:4e:d6:17:
         05:6d:37:78:16:31:98:12:a3:09:be:62:77:25:27:ad:fa:36:
         61:c5:34:14:2d:6e:11:e5:d6:29:ce:f7:b4:82:07:4e:3c:97:
         ed:db:e8:a9:c8:d1:ce:5c:79:8d:33:d9:b3:13:b9:2b:c5:50:
         1d:ec:66:d4:4e:6d:65:0b:0b:e0:7b:a9:27:93:60:fc:85:73:
         68:23:48:60:61:32:f7:41:3d:1b:de:7f:ba:34:ab:f3:20:b5:
         53:d7:07:f9:a7:d7:7d:87:cc:7a:8d:78:c2:44:9e:f7:56:49:
         6f:ae:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:21 2025 by rpki-client