Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa
File:                     48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa (raw, json)
Hash identifier:          ASTC6EqXRykZTz9YNAnWiApf2x50xSkPSy+K7XDLBOE=
Subject key identifier:   93:17:49:CB:BC:03:14:E0:4C:8B:58:41:68:73:D5:3D:6F:CF:05:AE
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848E2D112C21123E21C9EC38080
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11537
IP address blocks:        64.57.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:12:c2:11:23:e2:1c:9e:c3:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=8f73df53-f721-41b5-a6d9-312d2a12ca09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:70:8d:70:0b:31:57:0a:9f:b4:f0:38:a3:
                    30:be:58:f6:a9:11:3f:9c:31:78:86:71:a4:90:84:
                    34:44:66:78:59:03:9d:be:b4:46:07:14:54:21:bf:
                    6b:55:23:a2:44:22:f0:92:df:ac:12:22:a9:af:c9:
                    e6:1b:24:28:17:26:06:c9:d6:50:a5:8d:52:6d:c8:
                    b6:c9:52:e9:d5:9f:d6:55:9e:e6:55:14:0e:eb:df:
                    99:4c:4d:b1:e8:33:fe:ef:5c:9b:1f:52:b4:24:68:
                    f6:04:45:03:d1:23:43:d9:db:ad:17:89:47:49:87:
                    d9:46:3a:f4:ba:bf:b0:63:2f:67:62:c5:b6:54:3e:
                    e3:39:30:60:d3:88:32:04:a3:0e:5f:49:38:23:c2:
                    89:be:99:17:30:ca:4c:90:25:07:7b:4b:17:d2:84:
                    6b:98:a1:7d:6b:ad:1b:8e:8e:b9:20:19:ea:06:2a:
                    c4:a5:e6:a6:43:64:40:fc:7e:71:14:e6:0d:75:c5:
                    c5:3d:9c:5e:61:a1:14:41:3d:c5:bc:b4:af:4b:c8:
                    ae:37:4b:2c:96:d7:30:d5:d0:5f:eb:ff:09:7a:06:
                    f7:b2:5c:e4:08:d1:61:79:f5:60:f3:ad:da:9a:56:
                    35:08:10:67:af:c7:25:f3:8b:d8:72:62:7d:8c:05:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:17:49:CB:BC:03:14:E0:4C:8B:58:41:68:73:D5:3D:6F:CF:05:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:ab:15:f7:72:2b:ff:27:72:44:ec:ee:cd:08:54:a3:62:
         79:7b:9b:4f:b1:6b:24:a2:e3:8c:fa:fb:6e:2b:aa:98:ab:0e:
         aa:77:2a:c1:2e:bc:96:2c:6c:40:c9:6d:80:13:99:69:91:16:
         af:96:68:a1:51:08:f5:dc:b9:31:03:46:51:f7:35:05:d1:77:
         8c:88:7a:86:15:a7:58:d5:11:e5:c4:d6:f4:09:8e:a3:76:0d:
         bd:14:6d:49:5b:b0:66:0d:29:a9:b9:9b:70:99:99:48:53:2b:
         2b:54:dc:de:dd:46:d5:13:4f:9d:b2:62:ef:27:b7:3d:64:65:
         7f:55:ae:69:13:c3:5b:3e:5b:44:e5:9d:12:f8:12:7b:ed:70:
         b4:5a:30:25:f4:c4:65:e4:68:f7:66:8e:8f:12:43:d0:ad:9b:
         c6:6d:6a:3c:48:7c:c4:aa:01:7b:7a:0b:75:54:4a:53:95:88:
         fd:22:c4:3b:a0:b5:9e:46:1c:76:17:1d:89:3a:49:5e:c7:48:
         11:59:9c:10:6f:79:a3:f0:cb:6e:2b:06:eb:8c:2e:32:18:35:
         fb:5d:de:25:09:39:82:32:46:6f:20:e0:68:ef:fd:93:1b:41:
         d2:33:c9:bb:e8:f5:41:0d:d2:34:e9:66:e4:58:21:c3:e3:a1:
         ff:52:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:52 2025 by rpki-client on console.sobornost.net