Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/2e867762-0184-31ad-8903-9739d8c6dde5.roa
File:                     2e867762-0184-31ad-8903-9739d8c6dde5.roa (raw, json)
Hash identifier:          ZexeSPOakpFGubIUFap38luDzPOlqyVTWUS4uKetI54=
Subject key identifier:   94:44:58:5D:CB:84:B5:5F:B6:B2:98:D7:D0:2C:A1:36:7F:29:EB:C8
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F432858489ED83E57F14B95F7C5BCD4E0
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/2e867762-0184-31ad-8903-9739d8c6dde5.roa
Signing time:             Tue 21 Jan 2025 17:40:19 +0000
ROA not before:           Tue 21 Jan 2025 17:40:19 +0000
ROA not after:            Mon 21 Apr 2025 16:40:19 +0000
asID:                     3761
IP address blocks:        158.120.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:d8:3e:57:f1:4b:95:f7:c5:bc:d4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Jan 21 17:40:19 2025 GMT
            Not After : Apr 21 16:40:19 2025 GMT
        Subject: CN=ab1e4f89-2d27-46d7-89fc-db3e74c5e15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:eb:2d:1a:1c:d6:3e:77:01:d4:3b:4b:03:
                    42:e9:56:7e:6e:30:b6:da:a1:6e:19:3c:24:41:b3:
                    4f:53:e3:4a:d1:08:f9:0a:36:cb:a0:88:af:ff:fd:
                    a1:32:56:65:3a:da:6f:63:ab:04:0c:9b:ec:de:24:
                    34:d3:31:e3:9d:5d:e3:8a:27:0b:78:36:10:7e:88:
                    b2:2e:66:65:70:e2:94:bc:82:98:9f:99:ba:97:ef:
                    71:7b:b9:d9:55:1f:a8:43:55:fd:4c:73:11:27:e8:
                    3b:02:9f:5a:45:8b:69:27:82:39:fe:40:35:5c:2e:
                    ea:7f:b7:1e:bd:3a:15:4c:bc:d5:21:18:6a:cc:35:
                    eb:1f:39:ab:6b:57:fe:ec:2d:8c:5c:d5:c9:96:f8:
                    83:80:1c:cb:1c:74:5f:1a:7f:9a:1e:0b:e6:54:ad:
                    2f:f4:fc:6e:c7:0a:34:8c:79:b7:e9:e2:cc:87:8f:
                    34:03:52:a5:d0:07:ef:16:77:ba:3d:83:38:9d:52:
                    20:de:ee:b8:60:42:54:48:e8:54:33:45:58:c3:30:
                    c2:9e:78:d5:02:4d:b2:c7:9f:26:bf:12:a8:5b:11:
                    9a:7a:b4:8c:b2:16:14:c6:21:cd:34:bf:70:81:6c:
                    c9:4e:92:f2:6a:f8:b2:83:ac:9f:6e:2e:b0:71:b5:
                    95:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:58:5D:CB:84:B5:5F:B6:B2:98:D7:D0:2C:A1:36:7F:29:EB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/2e867762-0184-31ad-8903-9739d8c6dde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:91:ba:86:94:01:a1:99:d3:f6:f8:f0:28:96:03:5e:5b:de:
         49:36:6d:2f:c5:0f:b2:e6:20:64:ac:d4:e5:f4:3a:18:31:20:
         63:56:ad:cd:56:06:aa:7a:d3:7e:ee:ec:c7:fb:7f:df:f3:8c:
         43:1c:b4:ee:97:35:79:9e:28:d9:04:31:d2:71:05:db:60:6e:
         bd:8e:46:6b:b3:4f:84:30:e6:2b:7a:cb:f8:0d:64:09:ff:83:
         45:d0:d6:b2:82:df:f0:ff:6b:94:db:9d:69:d4:6c:17:42:46:
         f8:2e:1f:86:94:ee:ec:e8:3b:19:b2:31:71:2c:50:e2:0d:e3:
         33:d6:44:1d:93:3c:38:e0:b0:c5:41:7f:95:1a:c6:50:3e:5b:
         ef:7c:68:07:4d:6a:76:10:90:9a:d3:28:75:a7:73:c1:21:57:
         85:6e:1e:bf:ec:d6:3f:6d:c8:0e:06:25:4d:cc:66:49:1b:f4:
         56:29:fe:8a:52:54:6c:0e:40:11:af:bd:84:37:7a:54:a6:92:
         ce:98:42:11:05:19:e4:b9:2a:c3:31:38:5d:d7:cf:d3:f1:e6:
         f7:b2:51:36:f5:21:35:e9:7c:88:97:40:54:18:28:36:51:5a:
         33:85:b1:f3:e5:ee:4e:4b:f1:a5:dd:df:2e:84:68:cc:c0:65:
         a2:61:6a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:16 2025 by rpki-client