Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/ad2d21e1-f4ad-3265-9fda-66f9a0b46d48.roa
File:                     ad2d21e1-f4ad-3265-9fda-66f9a0b46d48.roa (raw, json)
Hash identifier:          uejX9wUigpz9GoApg2H9a8ZpqRqOg/wdRRmbO2/t9OM=
Subject key identifier:   E5:9D:FD:44:6C:AA:84:07:09:EE:4B:35:3B:1C:CE:C2:22:AC:EB:62
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F43285848E4294FA8358A84DFC228EEE0
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/ad2d21e1-f4ad-3265-9fda-66f9a0b46d48.roa
Signing time:             Sat 15 Feb 2025 13:34:26 +0000
ROA not before:           Sat 15 Feb 2025 13:34:26 +0000
ROA not after:            Fri 16 May 2025 12:34:26 +0000
asID:                     11032
IP address blocks:        192.139.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e4:29:4f:a8:35:8a:84:df:c2:28:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Feb 15 13:34:26 2025 GMT
            Not After : May 16 12:34:26 2025 GMT
        Subject: CN=0aad9e83-2751-4dde-9902-832aae4bc77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:56:a3:9d:4c:57:63:14:00:91:3e:78:eb:
                    f3:d3:16:e0:a6:95:4e:5c:d6:f5:00:05:73:89:05:
                    19:bb:b9:5f:1c:18:ba:1b:bf:88:9a:5f:78:3b:59:
                    f9:1d:f4:4b:b7:2a:8f:22:d0:2f:71:93:15:1e:fb:
                    b7:a0:72:75:58:72:54:d3:ed:96:d8:01:3e:e7:d0:
                    a6:06:49:15:e3:76:17:ae:a9:7d:3d:2d:25:df:1c:
                    07:af:3b:a2:30:ca:d2:45:87:53:cb:db:eb:07:93:
                    d2:25:71:52:d8:d6:df:63:72:68:44:8f:0f:b0:cd:
                    4a:d4:17:20:25:de:8a:f2:97:1b:f7:7e:3f:87:32:
                    93:59:c7:e6:ca:fe:5e:f0:7a:d5:2f:d8:73:93:09:
                    73:68:b4:cf:37:52:bc:11:0c:a6:68:9d:3f:d5:84:
                    fb:52:bf:c6:f1:17:0e:39:c0:5d:1f:55:6c:27:f8:
                    16:45:45:f4:4c:2c:c7:dd:dd:55:75:bf:4e:2a:9d:
                    6d:a0:f8:fd:a2:bf:0c:07:da:f2:47:bc:2f:8b:f4:
                    b9:c8:80:56:7a:76:35:bc:d0:14:17:b3:ed:50:1e:
                    b4:72:4b:44:33:b9:f7:4d:b0:c7:44:30:9c:26:9d:
                    67:b8:85:47:e2:79:64:07:30:63:2e:74:48:98:5b:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9D:FD:44:6C:AA:84:07:09:EE:4B:35:3B:1C:CE:C2:22:AC:EB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/ad2d21e1-f4ad-3265-9fda-66f9a0b46d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:01:d7:81:b8:ab:76:0e:92:64:e4:79:c1:eb:fe:30:e1:
         40:c9:b6:63:56:31:ca:bb:70:cc:a9:07:24:0d:6e:1f:f5:9f:
         da:b6:7a:56:35:72:ef:09:7c:ed:99:be:43:c1:a4:b5:81:ed:
         f1:b9:3a:cc:d4:ad:ad:a2:c0:fa:35:91:90:aa:6b:18:4c:5b:
         ac:10:17:64:e4:d5:77:ee:1a:cb:be:2d:91:b5:9a:2d:33:83:
         a4:d6:70:25:b1:fe:c5:59:9e:f6:fa:1c:63:de:b0:d6:55:f2:
         90:41:5c:43:a9:a6:e3:6c:f9:ba:f7:31:60:57:8c:6e:70:ab:
         96:e6:76:44:ca:81:1d:d1:7f:4f:aa:6b:dc:48:f5:7b:57:88:
         61:23:82:4f:0c:71:02:07:6e:ac:25:8d:43:0d:5b:5b:ff:2b:
         e7:b6:cf:8b:9e:bd:86:c3:c8:cd:29:5d:1a:d3:0a:47:fb:db:
         1d:b7:38:df:57:5f:05:eb:e5:ca:9b:f7:a9:00:c5:31:4f:f2:
         e5:e3:33:48:fd:7a:12:96:b4:6c:6d:27:57:5c:a7:9a:54:b1:
         7e:66:96:c2:a9:c9:89:1e:98:3e:45:39:b1:59:51:b4:3b:84:
         7d:0d:ea:a9:eb:2c:ed:8a:45:ad:6c:68:23:5c:db:b3:fa:c8:
         76:0d:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:24 2025 by rpki-client