Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f340479d-992c-3020-9b89-7b2c0474b6f0.roa
File:                     f340479d-992c-3020-9b89-7b2c0474b6f0.roa (raw, json)
Hash identifier:          m9w7KaglalTCRoIxCIHn/PyDHWB/krCp+fhgjDAMnBg=
Subject key identifier:   6D:61:0C:04:EE:74:93:C9:3C:C2:0E:C9:5E:D8:E5:A5:EA:C4:75:C7
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848DEA124A7D313F0A966E7DC00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f340479d-992c-3020-9b89-7b2c0474b6f0.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     15169
IP address blocks:        142.251.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:24:a7:d3:13:f0:a9:66:e7:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=6ec1ec8f-f897-49f5-8ab6-f5f71f9fd48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:e7:b0:08:d6:ba:c9:d7:b8:08:ef:fc:77:
                    d4:49:17:55:6f:0b:a3:43:25:70:8e:f8:03:fe:62:
                    54:5a:ab:36:8b:a0:52:73:f9:64:e1:4a:8b:fb:f5:
                    0d:f7:76:25:da:52:05:0e:45:66:d8:ef:52:9b:ff:
                    74:10:e5:01:0a:b5:ac:d2:6f:a3:4b:db:12:f8:74:
                    be:b7:41:50:bf:75:be:67:99:97:f0:68:6c:fc:f9:
                    26:0f:79:1f:ba:db:4e:5d:51:b4:f8:74:6f:57:8e:
                    71:b7:4f:72:b2:39:8a:42:55:68:2c:6f:a6:73:ac:
                    99:d2:ab:12:31:16:5f:f0:1e:da:65:15:ef:b7:c3:
                    9b:2b:c2:36:29:d8:a1:be:fd:34:e6:5e:7c:71:7f:
                    ca:ed:09:e2:2c:99:9d:8c:62:7c:14:c4:cd:e6:f8:
                    89:7c:4b:b5:fc:fa:c3:2e:21:37:a0:5b:c7:a8:36:
                    db:3a:bd:a4:05:a8:c7:3f:a4:01:4e:e9:9b:f6:fe:
                    1a:4d:67:58:54:bc:fa:1d:80:bb:ef:a6:4d:9e:31:
                    c9:e9:53:c9:1e:1e:be:cf:ce:ac:22:40:50:d0:f1:
                    72:d0:06:a5:63:8f:40:76:6d:47:0c:f4:b5:6d:65:
                    6e:43:46:4a:5b:fe:a0:75:b6:52:8b:fd:97:0c:38:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:61:0C:04:EE:74:93:C9:3C:C2:0E:C9:5E:D8:E5:A5:EA:C4:75:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f340479d-992c-3020-9b89-7b2c0474b6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:20:6d:78:36:d8:98:a3:5f:84:c2:fb:c4:60:fa:6c:d3:c2:
         e0:24:1e:dd:7b:d2:b5:de:6f:dd:fa:c5:f9:47:96:c0:bc:33:
         d3:d5:d1:ed:51:3f:03:ae:d5:e6:fe:95:d4:d0:ea:3a:29:2e:
         ee:a2:c7:b0:25:92:7c:ad:d7:40:97:4b:8d:b9:33:6d:39:3b:
         45:97:5b:3b:54:78:e8:95:ea:96:1f:51:de:2d:a9:08:2b:34:
         1c:13:ea:5f:a0:fe:8a:53:22:e9:ce:54:e9:e8:59:1d:28:ae:
         9d:ef:5c:66:f6:e1:20:02:95:42:c6:55:58:a9:35:2c:06:c3:
         33:16:05:a8:6a:df:9e:6e:95:92:23:9f:c6:1e:00:48:f9:39:
         42:72:f5:e2:67:aa:fa:47:fe:0a:ee:bb:df:ae:57:8a:96:dd:
         7c:7d:4e:51:ee:84:5a:f0:12:1a:14:56:17:3f:79:99:0e:67:
         b7:78:08:02:6c:c4:49:6a:2e:77:43:5c:2a:f8:20:dc:4f:52:
         54:35:be:d2:dc:98:11:ec:f0:4c:32:2e:cb:86:16:d9:94:44:
         e7:4b:e6:e2:66:09:54:1e:4e:3f:a6:2a:fe:ab:d4:96:cd:28:
         6f:32:a2:da:61:b1:91:57:fc:06:72:73:ff:c4:26:ca:05:1a:
         fe:89:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:43:52 2025 by rpki-client