Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa
File:                     82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa (raw, json)
Hash identifier:          6nvo7TJzOH8XkSuTdojD8+p8uvhgWo7azHiIAajny/0=
Subject key identifier:   4C:0B:19:CE:4B:7D:87:60:73:FC:16:C3:6A:28:D9:C3:D2:84:95:16
Certificate issuer:       /CN=6ec5d668-721f-4186-82e6-1391fb7784bb
Certificate serial:       010D0C9F43285848CDE10FDAFCA23D44F8AD96C0
Authority key identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     212238
IP address blocks:        172.81.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0f:da:fc:a2:3d:44:f8:ad:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec5d668-721f-4186-82e6-1391fb7784bb
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=5518e264-c9c6-424d-9543-a526222240d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:99:23:3d:4a:5a:41:5a:ef:f4:ae:86:3b:
                    0c:33:fa:3b:8e:59:7c:0b:19:73:49:c8:99:70:cc:
                    bd:41:d8:74:8c:62:b4:3f:e4:9f:bd:b9:80:1d:9f:
                    67:57:aa:8d:76:dc:72:f1:05:68:33:93:a6:08:75:
                    b4:c8:27:53:ce:cc:0e:a8:92:7b:a0:92:f5:ac:be:
                    1b:81:64:99:aa:51:94:ce:83:ac:21:4a:02:ed:b6:
                    fb:6d:15:de:ab:0f:71:40:88:f8:53:d4:7f:f3:3f:
                    c5:fe:75:77:3b:98:d1:35:0d:37:5b:21:10:0e:70:
                    71:41:65:5e:88:de:c5:e6:a2:71:85:24:0b:a9:e0:
                    5d:81:99:ac:c6:da:49:1d:5b:ad:d9:b1:27:53:25:
                    eb:f8:9e:83:5d:af:08:7e:2e:bd:1d:90:58:42:24:
                    2b:87:f7:7b:59:81:44:c8:43:0f:5c:3a:8b:bd:b5:
                    34:e1:c9:fe:81:63:c4:29:e4:1d:c3:25:6e:cb:fb:
                    3d:ba:04:f4:a1:6e:a1:1c:cc:52:ba:f4:ab:d2:ed:
                    5b:d0:af:79:2b:11:f7:d8:00:d1:03:ab:ce:51:42:
                    fd:08:b0:de:3e:5e:25:1c:cc:a0:3c:62:0e:a3:45:
                    bf:03:cd:b1:41:28:2e:cb:59:12:cd:93:16:c4:1c:
                    eb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0B:19:CE:4B:7D:87:60:73:FC:16:C3:6A:28:D9:C3:D2:84:95:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:59:51:e4:33:50:1a:70:87:55:93:b0:be:99:02:0b:46:bf:
         62:41:66:9f:97:63:00:2f:ca:11:d9:41:5a:5f:73:72:fa:6b:
         d3:fd:1e:60:f2:a9:e3:4e:9c:4a:1c:b2:2b:17:79:3b:4f:4b:
         98:b5:c4:6f:8f:56:dd:c9:1c:84:2c:6c:af:eb:ea:aa:ca:f9:
         0a:37:a1:27:e4:9e:d3:81:f9:08:d4:ee:53:31:11:42:91:a4:
         5b:e2:12:70:80:e7:24:c5:d6:bd:cc:5d:bf:ab:8c:5c:5a:cd:
         62:42:46:e5:08:75:22:16:1b:90:2b:98:b9:b3:ed:a0:eb:a7:
         dd:f3:a0:78:a3:d2:34:39:e3:78:a7:31:6f:ad:de:09:f2:aa:
         ed:21:0d:12:f1:8a:bf:ca:70:3c:58:2a:b4:cd:b7:b5:36:11:
         59:11:ad:55:88:52:f6:81:78:78:19:e2:1e:26:6a:44:52:6a:
         77:ee:ee:98:ee:e0:87:e1:35:62:54:ca:da:7f:15:15:16:8b:
         cc:a7:32:16:97:81:d3:29:05:50:fa:77:a2:37:14:71:db:50:
         20:83:07:65:9e:4e:31:e8:0f:a6:21:98:4e:77:78:76:f6:a1:
         24:9f:86:98:05:c5:fb:fa:f3:14:e7:43:40:e7:b6:e9:1b:9a:
         f1:13:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:28:32 2025 by rpki-client