Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023fcf7a-7d88-3016-9c41-66bfc4811b49.roa
File:                     023fcf7a-7d88-3016-9c41-66bfc4811b49.roa (raw, json)
Hash identifier:          NAElzljBq5MkuYgrLsQqMSnjv9Wsm3gWHgyk5AJ5GWQ=
Subject key identifier:   CD:B9:AD:82:66:10:26:DB:33:38:B6:85:6E:73:C1:62:F0:C2:24:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858490E16D146B23E5A6AAA152D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023fcf7a-7d88-3016-9c41-66bfc4811b49.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        184.51.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:d1:46:b2:3e:5a:6a:aa:15:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=862438e1-454f-4525-9ae3-6bfb5bcd0b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:df:ef:08:75:be:e2:c6:77:e1:01:2f:14:
                    19:c3:15:24:e8:b5:93:29:57:f4:56:2e:d0:bc:9c:
                    c5:1b:2a:35:af:83:f1:0f:58:f2:5c:85:f2:fa:0a:
                    fa:58:6f:9e:6e:f8:57:bd:13:3a:31:98:83:61:ed:
                    79:dc:bd:09:ca:a2:88:8f:1b:22:3c:38:4d:7e:c9:
                    4f:d5:52:56:e3:a7:79:c3:b3:27:4e:d8:bb:c4:47:
                    c7:ae:e9:6c:7b:81:8a:33:e2:38:ce:64:3e:8d:ea:
                    61:36:e6:b5:b6:6c:d7:50:4d:5c:49:9c:7d:aa:81:
                    b3:6d:f4:46:a6:27:2f:45:8e:1b:7d:7e:94:bd:4a:
                    6f:4e:0c:e1:bb:0e:ae:fd:30:58:dd:c3:80:ab:b3:
                    9a:df:13:8b:5d:4c:02:ea:a4:05:a9:80:11:f6:7b:
                    e7:34:f1:d2:05:de:73:5c:c5:70:04:45:f3:2c:fc:
                    8b:a6:f4:bb:bf:01:fe:e0:3c:b5:8f:04:bd:29:cd:
                    72:aa:50:7d:63:0a:c4:b8:01:a0:60:e4:91:7c:cc:
                    11:a8:d0:35:95:8c:95:7f:b2:ec:f8:64:49:6a:c4:
                    6b:bf:09:58:94:5f:31:bf:83:53:39:35:d1:e0:83:
                    f8:4d:cd:21:b1:b4:cd:b0:3d:3c:7c:86:01:9f:46:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B9:AD:82:66:10:26:DB:33:38:B6:85:6E:73:C1:62:F0:C2:24:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023fcf7a-7d88-3016-9c41-66bfc4811b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.51.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:78:b1:0e:5e:f5:5b:b6:99:e0:b5:48:d6:19:8c:d1:34:9c:
         95:f7:d0:c6:4d:d5:43:6e:3f:1f:aa:b9:2a:b1:bf:e9:3c:b9:
         1c:ab:7d:ea:04:72:d4:1d:9c:e3:7f:fd:aa:ef:89:ab:82:2f:
         83:04:db:10:f4:08:ea:61:be:cf:80:4f:1b:ca:7c:5e:7a:54:
         48:73:5b:2c:4e:36:dc:f6:09:4e:4e:c8:f0:3d:52:c4:0c:e6:
         c8:bd:a5:9d:10:79:0e:92:55:34:c1:08:6c:3a:9a:da:9e:51:
         65:60:83:1a:b1:bf:21:42:a9:02:37:4e:a0:23:de:6b:15:0f:
         dc:aa:e3:77:53:82:45:b6:f4:05:f9:a4:93:78:f6:a9:7a:84:
         f8:91:2e:5e:12:5d:0b:a0:44:b9:05:c2:db:13:dc:35:0f:73:
         0f:8c:33:0d:c3:bf:23:14:e2:f8:a2:61:cb:97:50:b2:62:97:
         36:63:cc:fa:93:01:c7:76:64:85:96:e4:5a:21:bd:c9:61:ea:
         bc:8e:1b:07:16:44:95:b4:f4:b5:ea:26:3a:9b:51:e6:b4:b0:
         b0:9a:c9:46:58:f9:ac:86:54:fc:4c:33:1b:7f:38:70:d7:2c:
         07:6e:89:eb:a7:12:a3:ae:73:b0:09:f7:ac:32:58:7f:63:9a:
         72:84:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:28 2025 by rpki-client