Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/1d61b838-fdfa-373c-b8ed-ddeac4cbc23e.roa
File:                     1d61b838-fdfa-373c-b8ed-ddeac4cbc23e.roa (raw, json)
Hash identifier:          abYNCVrSdBQ0EPMdUaonQI986hpGTX4s76oEUeEUzbY=
Subject key identifier:   EA:B6:B9:2A:D7:BC:72:DF:39:6B:45:95:B3:6A:26:33:74:F7:58:D6
Certificate issuer:       /CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
Certificate serial:       010D0C9F4328584949FE8C7B7625462C98639E00
Authority key identifier: 1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/1d61b838-fdfa-373c-b8ed-ddeac4cbc23e.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     40703
IP address blocks:        168.161.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:8c:7b:76:25:46:2c:98:63:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=2f726a66-3fc0-48ee-8f22-a89ccaec2e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:ac:66:bc:81:94:35:09:67:5d:87:2a:0b:
                    62:ff:1c:44:2a:7c:7e:66:9b:9a:8d:a6:1c:bf:4a:
                    52:ac:27:1c:29:42:21:05:ce:44:b4:88:cf:7a:03:
                    6b:95:82:ea:c5:8a:0a:be:ac:ea:c1:50:b1:23:b7:
                    68:1c:18:9e:0d:cc:a5:9e:53:3a:68:94:d5:3c:df:
                    6b:46:e0:6f:fb:c5:ea:05:9d:dd:02:e1:42:ae:9e:
                    38:b1:aa:a2:4b:1c:39:95:66:6f:e7:e9:bb:ba:c1:
                    11:9b:b4:ab:55:1f:70:0c:fc:55:ae:f2:35:79:52:
                    0d:d3:4d:8b:e0:a8:65:97:0f:c0:5d:3e:6e:41:c3:
                    a5:b9:4b:06:10:82:08:da:52:5c:1c:17:86:47:b9:
                    27:67:bb:fd:88:83:95:30:b8:1a:50:57:e9:fb:4b:
                    24:d6:c6:0f:8d:ff:9d:43:3b:ea:df:6e:cc:83:eb:
                    e5:96:b2:dd:c9:16:7b:77:1b:db:27:9b:7f:f4:e4:
                    2e:aa:fc:52:7c:95:c9:49:1e:53:83:62:5a:72:f8:
                    48:d4:3b:47:9e:66:59:9d:a8:9c:12:be:72:86:85:
                    69:51:46:78:74:78:3c:43:97:1b:02:e7:01:39:77:
                    3d:ca:ad:9d:1f:40:40:4f:9e:9f:3e:fd:3c:71:aa:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B6:B9:2A:D7:BC:72:DF:39:6B:45:95:B3:6A:26:33:74:F7:58:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/1d61b838-fdfa-373c-b8ed-ddeac4cbc23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl

            X509v3 Authority Key Identifier:
                keyid:1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.161.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:78:e7:ca:74:1d:0f:de:b5:dc:a7:0f:aa:39:60:66:7f:3d:
         a7:84:d6:e7:65:a3:64:cb:0a:18:12:68:4c:f0:0a:bd:d3:10:
         9b:47:db:af:30:ce:c7:96:77:77:f5:93:2e:19:ce:d4:e9:e4:
         de:eb:95:8d:84:d7:46:34:1c:73:84:2d:65:b2:a2:f3:9e:94:
         1e:aa:08:d2:1c:f3:55:fc:52:30:59:07:89:3f:13:3b:7f:30:
         56:dd:0a:7a:9d:95:8e:9f:c1:ae:87:c0:f4:e9:b8:eb:81:e6:
         00:9e:8c:7e:2f:7a:13:46:53:d4:91:2b:79:70:22:05:de:60:
         20:a0:4b:fe:34:c1:22:9a:d4:55:60:e8:2b:e8:7e:46:40:d2:
         11:f4:ea:f1:fa:05:94:75:14:5b:45:f2:cb:af:30:2e:b1:a7:
         e4:11:6d:80:89:54:1e:89:77:6a:55:a9:58:8e:af:a3:d4:01:
         a5:a5:73:d8:4e:00:04:be:1f:c0:ab:54:cf:68:a0:46:b6:0b:
         35:8c:2b:ff:df:68:e0:c0:a1:52:58:f3:7d:67:70:30:85:92:
         b1:37:24:97:3b:4b:68:d8:c8:54:d6:6b:dc:56:ba:4e:4b:61:
         60:09:ed:8b:99:82:d7:ca:77:e3:ed:12:e3:a9:b5:5f:42:3c:
         31:1e:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:46 2025 by rpki-client