Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/6174f686-7c8c-3662-b054-37ba7d6352ee.roa
File:                     6174f686-7c8c-3662-b054-37ba7d6352ee.roa (raw, json)
Hash identifier:          8gerSYUjcrEc0dNvSEjw0axzQ0lBCqZgADPqGVmMfsw=
Subject key identifier:   60:F3:B3:5C:F0:24:FB:50:66:94:22:05:CC:32:EE:96:21:2C:9C:C3
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F43285848573ADB898D603008697474C0
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/6174f686-7c8c-3662-b054-37ba7d6352ee.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     62651
IP address blocks:        209.234.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:db:89:8d:60:30:08:69:74:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=d90b658b-eab8-4162-9b33-2cf7c26c1895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:c3:8a:b4:c5:06:c9:7f:a9:f0:bc:bb:d9:
                    9e:8d:59:b9:e6:e7:5b:4a:05:24:d8:70:64:0f:74:
                    86:f1:95:fd:c3:61:08:95:60:e2:75:55:2e:5c:43:
                    ca:dc:c6:93:58:0e:ce:4a:87:53:66:18:0a:9d:91:
                    f0:a8:3f:50:d0:b4:39:f0:84:39:14:01:bc:5d:61:
                    0c:cf:1f:47:54:ad:2a:56:00:5c:18:14:03:d8:6f:
                    43:f9:c4:ea:68:71:d4:26:f8:25:78:f2:3e:bc:c4:
                    53:74:6f:ed:1a:90:c8:bf:8b:02:9b:1f:be:81:4c:
                    00:dc:68:3e:7b:eb:65:db:8b:0a:f5:ec:f5:da:d7:
                    4f:26:82:fa:c1:a3:c4:e2:10:d3:d9:23:1c:70:63:
                    12:13:f0:d3:41:e3:47:d9:6a:90:52:94:06:2c:cb:
                    5d:48:82:8e:52:fd:26:fa:43:01:9e:32:1f:8c:15:
                    aa:4b:4c:a4:fd:7b:6e:bd:13:2b:8f:17:7f:36:0f:
                    be:11:75:70:ac:a9:3c:ba:1a:d2:55:7d:ac:b8:29:
                    6d:b0:fc:96:3f:ea:16:ae:0e:be:19:cb:55:68:0d:
                    0f:02:10:bd:2e:66:63:cf:89:ab:72:df:2d:b0:e9:
                    dd:2f:8a:34:65:2b:13:7a:7c:8d:4f:c1:5e:cd:cb:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F3:B3:5C:F0:24:FB:50:66:94:22:05:CC:32:EE:96:21:2C:9C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/6174f686-7c8c-3662-b054-37ba7d6352ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.234.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:21:c2:f8:1a:19:ee:29:e8:23:5b:f7:8f:bc:f8:e5:81:4e:
         1c:4e:d2:63:76:fd:3e:68:7f:8c:09:ff:cf:69:ae:5b:fc:9a:
         de:1a:15:f3:c7:d8:0e:37:31:1a:18:ef:20:f7:72:ce:51:a0:
         82:63:e1:e3:b9:12:15:57:2f:27:00:c4:e0:be:87:d4:08:70:
         b6:e9:91:48:c8:6d:fa:61:3b:ba:c0:e4:bf:b6:1d:41:69:5c:
         8b:cf:90:ff:91:93:d7:aa:6e:c2:88:c4:f3:4a:a2:87:73:56:
         8e:58:bf:58:2c:d1:81:20:eb:9d:b4:4a:83:e8:88:ea:35:60:
         ce:e8:95:a0:f6:dc:2e:0f:8e:d0:f1:23:77:38:30:79:0c:3b:
         93:9a:d4:93:18:71:53:78:06:3e:f3:be:f6:b3:03:02:fd:6a:
         ee:6b:69:fa:3a:4f:73:eb:22:42:c8:7a:c4:80:41:ff:84:b8:
         98:c2:93:fe:a0:48:e3:b4:8a:56:c1:63:a9:eb:7d:68:15:75:
         fb:5c:12:71:f2:f2:d4:d4:f3:88:f1:69:ce:e9:60:e2:e2:dc:
         81:69:7e:d9:cf:57:38:36:dc:ce:3b:52:82:15:a2:d6:30:b9:
         70:a7:03:86:93:aa:ac:5e:15:32:17:18:ec:7f:03:99:8d:15:
         eb:f8:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:19 2025 by rpki-client