Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa
File:                     d428c59e-2516-3824-8041-36df18452c2d.roa (raw, json)
Hash identifier:          zPVoxfH6g33weG9RZIXllGksX7enzN1f++biL86rF3A=
Subject key identifier:   8C:3F:A5:1C:85:50:2A:04:96:68:0E:AC:52:F9:1B:7B:ED:AE:8C:48
Certificate issuer:       /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial:       010D0C9F432858488DAB45C8D217DD11811E1A40
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        170.39.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:45:c8:d2:17:dd:11:81:1e:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=628c83bc-7407-491f-9fb1-814042566c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:18:b1:ca:4f:fb:bc:42:9a:ab:48:22:6e:c4:
                    2b:57:1a:65:75:98:11:4a:e5:2d:3e:ef:fd:09:84:
                    6b:d5:77:25:e3:c9:a2:22:8b:fe:53:37:48:d8:ea:
                    e6:c0:76:fb:ec:60:2b:00:76:fc:50:1f:45:48:6a:
                    a0:5d:67:53:dc:a4:9f:ad:67:4f:87:9a:fc:8e:f3:
                    85:c1:dd:61:dd:88:ff:18:3f:f4:67:bd:5f:10:05:
                    0e:58:b9:42:0c:2e:02:f1:db:a0:a6:58:31:ea:8a:
                    40:3d:bf:4a:72:90:f9:28:54:ee:0a:15:f1:4a:46:
                    e4:46:97:1c:ab:8a:82:d2:e9:0d:63:e7:0b:3c:cd:
                    b9:62:22:f7:1a:a0:5c:6f:9c:f7:81:b2:d6:00:3f:
                    37:82:c3:9f:0d:11:b4:e1:e0:c5:bb:f6:bc:39:1d:
                    56:1d:8d:8b:8b:ad:10:00:c6:a8:c3:10:a9:05:ba:
                    09:80:99:a8:2b:bf:cd:fc:9c:02:49:f0:80:02:ac:
                    c0:98:31:72:51:4e:62:a2:b7:10:7a:96:30:4a:a6:
                    99:d6:d8:2c:5a:75:28:62:54:2f:f4:69:2c:1d:33:
                    21:31:58:3c:9e:f2:cd:a3:12:46:0d:f8:0d:cf:51:
                    48:5f:ed:81:a1:e9:71:1a:cb:80:c5:9d:8c:01:f0:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3F:A5:1C:85:50:2A:04:96:68:0E:AC:52:F9:1B:7B:ED:AE:8C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl

            X509v3 Authority Key Identifier:
                keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:9c:45:29:61:9a:8c:4c:1c:32:71:a0:f4:07:c6:cd:f0:
         f0:18:b4:8e:b8:3b:75:e8:56:14:43:c8:38:29:0c:d9:c6:dc:
         dc:84:2d:70:bd:86:00:07:87:23:21:af:de:1e:fb:71:b8:54:
         54:ed:00:42:33:36:66:f3:8f:2d:ac:a8:38:26:b1:21:72:47:
         56:5d:4c:53:0a:d2:84:ae:7f:3c:f8:db:d6:27:11:6a:5b:10:
         40:38:df:b5:d6:97:b3:a5:46:78:52:23:52:19:77:fe:f9:59:
         5a:c7:fd:7a:0e:32:99:07:29:13:60:9d:d6:89:5f:0c:95:25:
         0e:1a:19:8c:dc:c5:a8:81:6a:c8:e3:60:01:b6:e9:ac:dc:6b:
         af:a5:ad:d9:78:ea:df:fc:9f:f0:4f:35:66:af:cf:96:7f:22:
         c1:42:0f:2d:73:a1:26:2f:d3:76:11:da:59:98:52:cc:be:d7:
         10:49:a4:2d:26:fc:0d:0e:3e:82:00:da:7d:91:9f:66:ba:31:
         e1:9e:06:09:a8:cf:bd:28:21:67:dc:3d:74:b0:ea:53:05:2c:
         74:89:5c:c3:c6:73:31:eb:7a:28:a5:17:42:e3:24:c0:ff:22:
         d0:c0:52:58:39:e3:a2:89:4a:f3:4d:c2:32:3f:5f:87:42:30:
         97:50:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:38 2025 by rpki-client