Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/20e959e9-6acb-3345-9c1d-5848d24f1ee6.roa
File:                     20e959e9-6acb-3345-9c1d-5848d24f1ee6.roa (raw, json)
Hash identifier:          dy2Ot9i9Bc1t6A5O13CpyOwOtPr22QlrussbMA3CXTo=
Subject key identifier:   E9:B3:50:5E:E9:08:C0:60:FB:66:CE:12:AC:64:3D:35:6D:D5:70:DA
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F4328584900214E265AD1FEAF76067C80
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/20e959e9-6acb-3345-9c1d-5848d24f1ee6.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     21775
IP address blocks:        199.15.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:4e:26:5a:d1:fe:af:76:06:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=71959298-e68a-422d-85de-88c058933fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:54:72:97:32:b1:d6:5d:20:12:92:a9:46:
                    e3:7b:18:e8:b2:84:53:33:59:46:af:c0:9d:a2:ea:
                    12:30:1a:5a:ba:e4:a6:3e:82:3e:6f:cc:43:7a:a9:
                    13:20:d5:92:92:e4:45:90:f6:33:bf:2d:5e:ca:da:
                    86:5c:31:44:4f:3c:6c:a0:05:3e:da:9c:d2:16:5b:
                    27:20:98:1b:26:64:17:e9:63:1f:e0:d0:47:1e:97:
                    c9:37:2f:53:a7:72:64:ff:5e:7d:a5:a6:25:f5:5d:
                    41:2c:b0:20:b7:31:1f:0f:94:42:1c:1d:fe:14:05:
                    02:65:37:18:81:33:cb:c4:b1:fe:ce:61:d3:c9:c1:
                    f0:a4:5e:b4:c0:2c:dc:c6:16:3b:77:c1:e2:c2:c2:
                    cb:62:a3:ca:ce:e4:92:84:8c:07:c7:08:38:47:b7:
                    5f:71:28:f5:12:8b:02:5d:1f:3d:1f:a9:44:7c:b3:
                    c8:56:65:20:f2:ab:08:cb:e1:ae:5e:27:17:9e:de:
                    ac:22:04:87:ee:af:30:ee:bb:b7:35:df:41:76:16:
                    b7:67:55:ca:80:98:1f:1f:9c:6f:99:ee:ed:a0:7e:
                    79:66:c3:fa:71:eb:51:90:08:77:30:a1:b8:77:7d:
                    80:ad:88:71:07:99:2a:b6:50:16:d6:55:c1:84:21:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B3:50:5E:E9:08:C0:60:FB:66:CE:12:AC:64:3D:35:6D:D5:70:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/20e959e9-6acb-3345-9c1d-5848d24f1ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a5:28:e7:00:f9:e7:b8:f3:aa:96:18:d0:fe:49:23:2e:63:
         b3:86:92:4e:e7:0a:c2:8d:9e:45:6e:70:6c:84:e8:0e:ab:09:
         ef:b7:3a:e1:04:9e:93:85:c7:96:f2:1d:d4:bc:63:ad:4b:75:
         7f:00:02:73:65:aa:0f:35:d6:5e:0f:a4:26:b8:0b:0f:ab:97:
         71:04:c2:80:fb:d8:44:d0:31:d4:ad:02:92:04:0f:1c:58:a5:
         8e:4e:cf:8e:11:9b:37:b8:81:b5:26:5c:42:17:86:2c:41:e0:
         89:2b:f4:be:6a:a7:e1:3c:89:cd:c1:bf:80:14:b0:a3:c4:5a:
         e2:91:76:d4:76:1d:1e:93:77:5b:9a:67:68:3e:99:0a:75:54:
         0d:83:96:2b:64:c6:85:ff:21:21:47:9a:26:45:da:7d:8e:02:
         32:88:39:b4:8b:e9:8f:35:3f:c1:91:86:e4:9a:e3:d4:bd:45:
         4b:1f:bc:92:09:68:6d:82:1b:d2:33:14:0f:fb:c4:47:4d:bb:
         87:41:b3:f3:45:92:2e:ab:4f:c2:e3:bf:aa:e2:55:cd:e2:10:
         86:d5:70:53:3c:26:4a:9a:b8:e2:f3:8a:4b:0d:1d:71:93:9f:
         a5:08:2a:9b:26:38:13:ea:4e:fa:88:98:5a:1e:b0:58:b7:82:
         ef:dd:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:27 2025 by rpki-client