Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4659e1a-7d3d-362e-a176-a44690281d0a.roa
File:                     b4659e1a-7d3d-362e-a176-a44690281d0a.roa (raw, json)
Hash identifier:          sNcN1/0197TnRZOYgaGYnJPjWz49jvw4qfv56ztuP7I=
Subject key identifier:   7C:FD:EB:FE:6C:26:6A:5C:AA:DC:7B:B5:0D:F2:E6:3A:E8:B6:15:51
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492CB22D1A8CC4570857BE0880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4659e1a-7d3d-362e-a176-a44690281d0a.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     400536
IP address blocks:        142.252.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:2d:1a:8c:c4:57:08:57:be:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=2829b0e2-5cc2-44f6-a249-d93b21577369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:93:43:a5:16:9e:6e:45:2d:19:e9:64:1e:
                    fa:7e:2f:43:4d:a4:ab:1f:3b:fb:91:9a:c6:85:5b:
                    0a:d3:ee:4a:eb:7f:6a:fa:83:eb:22:81:70:43:e9:
                    88:00:8c:36:26:0c:6e:6b:4c:be:89:9a:78:86:5e:
                    d0:16:08:95:29:87:09:83:36:f1:92:64:80:06:95:
                    18:a1:97:81:d4:86:24:b7:40:32:e0:ad:5d:1d:91:
                    63:f6:6a:15:ef:89:0d:7a:00:af:a6:03:1e:75:2b:
                    b4:b7:34:5d:90:56:ff:7a:59:6d:6a:6e:28:70:f2:
                    b8:61:25:4c:a6:21:19:7e:76:b3:5f:12:4b:6e:e6:
                    f7:85:5a:86:4a:7c:ca:d3:6f:4c:94:bd:28:2c:b6:
                    6f:c8:cd:90:86:2b:f4:2a:15:c8:1b:f0:30:eb:eb:
                    cb:dd:f8:18:13:c7:18:43:26:28:5b:cd:46:35:28:
                    18:45:0c:16:40:9f:55:c8:2f:f7:5c:58:b1:5e:33:
                    a3:71:e1:8b:bd:c1:42:d1:8f:5a:79:c1:f5:76:68:
                    a8:41:de:8a:89:ea:ac:02:d3:24:4c:49:31:4a:4c:
                    b0:4f:0c:76:0f:98:49:e6:38:e3:9f:fb:36:05:b7:
                    28:0e:64:2f:e6:4b:a6:12:67:d3:ce:f7:21:c2:e1:
                    b9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FD:EB:FE:6C:26:6A:5C:AA:DC:7B:B5:0D:F2:E6:3A:E8:B6:15:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4659e1a-7d3d-362e-a176-a44690281d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:84:5c:61:4e:ce:e0:1c:65:23:1e:ab:54:eb:d9:a2:0a:fe:
         d6:dd:bd:c2:17:c4:34:70:64:0d:f2:5d:ed:17:27:4d:50:a0:
         67:bc:80:88:f0:88:fb:52:b7:2c:cb:67:68:a6:11:e7:a0:33:
         1b:07:ca:a3:5a:5f:bb:95:7a:10:51:f1:a8:83:40:1d:cb:bd:
         1f:a0:af:12:2c:62:db:1e:60:0f:25:46:a2:d8:1b:28:15:10:
         e1:3f:41:93:04:fc:e5:82:25:f4:1c:fb:d1:9d:89:36:c5:a5:
         20:0f:5f:98:d7:1e:2d:20:e6:f8:89:0c:e6:29:39:2e:24:8e:
         b2:0c:8f:37:c6:32:40:7c:e2:a8:f7:58:04:d5:00:f5:1f:d0:
         07:e2:22:5d:28:3d:19:37:69:d7:86:89:73:0f:17:58:65:4a:
         e6:8e:45:79:2e:3a:d4:57:0e:5a:fc:48:c5:00:5a:78:d4:ba:
         a2:bd:5a:7b:f5:1e:8f:0e:a2:75:d7:d4:3e:07:e6:94:0c:08:
         71:15:70:7c:7f:6c:e2:ad:00:c8:0d:23:dd:76:9b:6c:34:53:
         bc:2c:ae:82:0a:a3:3b:bd:83:bc:c7:b0:69:e4:44:21:26:17:
         04:cf:f5:49:46:ca:d9:24:d7:eb:26:9b:e6:2e:ed:48:d0:7b:
         07:3f:08:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:41 2025 by rpki-client