Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/c017ef30-d0ef-3453-aeac-69c6cb073295.roa
File:                     c017ef30-d0ef-3453-aeac-69c6cb073295.roa (raw, json)
Hash identifier:          8T65FNdq/n2bgrFDurzHFbEkoHSTyNQFZL5+jdq3lJc=
Subject key identifier:   F5:90:42:69:8E:C2:40:91:0C:88:D9:11:FA:6A:5D:13:DB:F5:E3:BC
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848F65BCE451B820E38A68AEAC0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/c017ef30-d0ef-3453-aeac-69c6cb073295.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     30133
IP address blocks:        192.228.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:ce:45:1b:82:0e:38:a6:8a:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=496e6bba-1246-46c8-b783-f3b5ecdc9b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:3e:e0:57:80:c3:52:97:c7:8b:ea:8f:7b:
                    04:50:f7:e9:eb:28:9a:c9:20:5d:67:30:04:5d:c0:
                    29:05:31:f5:fa:a2:ca:82:3e:3d:03:5c:d3:86:7b:
                    6a:2c:b3:23:40:31:aa:b6:89:c3:b2:37:ee:37:19:
                    f6:15:53:f3:a8:1e:c5:07:2c:5d:c7:d0:82:be:98:
                    66:74:9c:43:d7:34:b9:de:6d:fb:e2:92:c9:13:e9:
                    02:92:dd:26:6e:03:14:49:47:4c:c4:2d:58:db:46:
                    ae:c9:63:54:ec:96:b8:12:52:d9:42:ea:9f:b3:0f:
                    ff:4c:48:79:7e:39:c5:a7:1b:b1:94:cd:de:cc:98:
                    15:09:9f:db:c1:2e:e5:a3:07:b7:4e:98:5e:31:1d:
                    e6:5e:d3:2a:ab:50:b2:74:f2:57:67:f8:6c:63:cb:
                    71:51:d0:17:bf:c2:97:8a:8a:02:1d:dd:55:34:44:
                    c3:19:e6:23:9e:6b:d4:df:6d:20:78:7e:21:c7:d8:
                    2a:ed:be:f4:63:db:bd:d8:bf:c3:b2:5e:00:8a:69:
                    76:b7:f0:5e:5a:63:b0:48:f6:17:fa:74:29:04:7f:
                    c8:4d:58:17:c0:7d:4d:31:2f:85:d6:f2:fe:88:23:
                    9d:7d:60:54:f8:35:7c:bb:de:f4:12:ee:e8:79:41:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:90:42:69:8E:C2:40:91:0C:88:D9:11:FA:6A:5D:13:DB:F5:E3:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/c017ef30-d0ef-3453-aeac-69c6cb073295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:fd:a6:9a:cc:cc:bb:7b:e2:fb:3b:64:d2:b9:58:2e:01:
         d9:dd:93:52:b6:3a:90:44:ee:de:31:68:d2:1d:2e:ce:c4:e7:
         c2:b5:2e:08:8c:c6:c8:fc:6a:64:2a:b8:72:04:f2:42:9f:7a:
         38:4c:d3:18:bc:95:d1:ab:12:d2:9c:27:f6:b0:35:07:fa:c7:
         d5:45:ba:c9:91:43:61:79:9a:61:9b:29:b3:12:1a:d7:54:72:
         88:a7:c7:f4:03:45:b5:c2:2c:a1:3a:89:58:26:b6:de:23:ff:
         82:66:d9:cb:9d:a5:4a:c8:a1:73:4a:25:b7:5a:63:a9:82:ac:
         04:c3:4a:4a:61:1a:7c:ba:44:79:b2:91:f1:21:31:07:30:35:
         00:ea:2e:ad:38:3e:b9:55:5c:e3:aa:f6:6a:f8:95:fc:be:bf:
         ae:12:d3:19:f3:3a:21:b2:6e:f2:fe:43:7b:a1:4b:00:87:d9:
         19:d9:b0:21:b3:55:c4:4d:6b:f6:db:34:e4:2c:5d:bf:07:f8:
         a0:9e:0d:72:9f:00:6d:62:86:2e:db:28:09:19:cd:37:5e:74:
         d9:7a:be:da:17:3b:43:97:1f:ca:de:ef:f0:ef:32:0d:4a:4f:
         5c:d9:8b:ae:fb:d5:23:b0:ee:4c:1c:c7:b6:0b:da:40:98:7c:
         bc:6c:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:48 2025 by rpki-client