Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa
File:                     fab751c3-5070-3404-a031-06397c719220.roa (raw, json)
Hash identifier:          TW0s6p9yApFK5xirdUtafR1btrNY7lV6R6XWD7xDPrY=
Subject key identifier:   C4:D4:D5:47:05:9D:23:55:B7:73:B8:21:11:EE:50:6E:73:1B:B5:D0
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F432858480214FFDAF0788F1C621F6080
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     1403
IP address blocks:        216.25.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:ff:da:f0:78:8f:1c:62:1f:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=4d8201c5-38e3-4dff-bcf0-cdc99e2c7128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:85:03:dd:38:7d:78:aa:09:0c:da:06:a9:
                    c0:56:1f:32:7f:52:9a:47:2b:ff:f2:71:16:90:d6:
                    67:50:2c:73:76:7c:68:22:fa:42:7e:d9:86:75:59:
                    1d:49:e2:99:16:dd:2a:48:17:7a:a4:cc:b1:10:a5:
                    7e:52:0b:88:0f:bd:57:90:09:a1:2b:ee:92:31:cd:
                    de:4c:41:69:0b:81:d7:64:39:67:dc:b2:71:a7:2d:
                    41:99:63:fe:bc:1e:07:c9:f3:0d:e1:93:62:d2:1b:
                    7b:63:b7:7b:36:11:b0:e2:e9:b3:68:8b:ec:de:8f:
                    6c:a0:5f:82:a2:42:d2:c4:7d:bd:27:f4:7b:df:e4:
                    96:d1:31:b5:76:2d:28:2f:97:eb:37:51:75:91:d8:
                    ad:40:0e:e4:56:c1:c2:f1:28:ff:40:fd:23:69:82:
                    d9:eb:ba:de:aa:ac:48:f8:d9:b1:ff:3b:3b:24:2e:
                    c8:fe:b5:bc:93:ea:69:82:e6:5d:ab:64:ec:8d:a1:
                    04:ce:1d:92:49:ad:02:4a:6a:80:04:b6:31:54:19:
                    9c:ee:e7:96:ba:12:03:24:8b:ff:30:93:18:4d:20:
                    86:e6:4f:5a:0e:88:f7:91:53:9c:52:f6:13:b7:9f:
                    c4:ac:aa:b0:16:26:42:ff:a4:16:1d:81:b8:17:e8:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D4:D5:47:05:9D:23:55:B7:73:B8:21:11:EE:50:6E:73:1B:B5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.25.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:36:44:f9:aa:40:3f:15:bb:d4:d0:6a:7e:82:bc:9e:3b:9f:
         f2:b9:22:2b:45:e4:61:34:23:10:7b:ea:4a:bb:9f:2c:9f:ed:
         f5:23:cc:c5:94:0e:0b:50:03:c7:b5:93:ce:c2:d1:f1:e2:44:
         66:66:15:50:e8:f8:f5:bd:83:18:f5:32:e8:12:e0:6f:a6:51:
         4e:77:54:e6:7f:3d:53:e3:63:9d:06:94:19:49:33:2e:2b:79:
         8a:0c:25:31:1a:21:fa:79:3b:d4:ac:07:c2:70:0b:de:8b:c3:
         c9:93:25:a3:15:7e:53:06:79:9a:ef:05:7a:3c:63:fd:b8:7d:
         9f:ea:62:df:12:fe:33:0f:6b:4f:a1:62:55:35:5f:f9:2e:37:
         c0:f6:cf:cc:cc:ac:c0:55:46:87:10:7b:91:52:af:26:12:de:
         a4:39:50:bb:5b:07:ed:06:71:0f:1d:19:a6:16:98:0b:3a:1d:
         29:88:fb:c4:59:95:77:cc:fe:69:9b:d3:61:d9:62:24:95:b9:
         70:ce:92:50:4e:74:c2:51:02:4a:df:5e:ed:f5:93:7a:b3:95:
         78:a2:0d:ba:85:5a:92:55:64:1c:48:5c:5e:d0:ee:e0:a2:3e:
         0b:33:91:5a:dc:f6:62:63:c5:df:f3:1c:03:6b:4c:ea:93:eb:
         44:44:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:26:31 2025 by rpki-client