Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa
File:                     bdfa307b-4d25-3d25-acdf-7c0672499955.roa (raw, json)
Hash identifier:          xUegjUfevtt155Iur9OrZn9Dz0y5DNRLRGx1EdoegGs=
Subject key identifier:   BB:70:B1:1B:CE:F1:00:36:61:DE:FF:8E:7A:B1:AD:94:55:31:4F:72
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827ADD7A2092BE8F73EC3D320
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa
Signing time:             Tue 10 Dec 2024 01:13:41 +0000
ROA not before:           Tue 10 Dec 2024 01:13:41 +0000
ROA not after:            Mon 10 Mar 2025 00:13:41 +0000
asID:                     13335
IP address blocks:        108.162.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:ad:d7:a2:09:2b:e8:f7:3e:c3:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 01:13:41 2024 GMT
            Not After : Mar 10 00:13:41 2025 GMT
        Subject: CN=09352a36-6698-4e92-9604-fb54f90b2fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:af:b6:15:fa:69:2c:bf:16:08:a1:37:ef:
                    d9:21:f2:9a:fc:a5:2f:a9:fa:89:e5:33:26:e4:35:
                    09:80:6e:30:50:f2:24:78:1b:6b:7f:11:d2:5a:25:
                    f3:c2:e0:e1:38:a6:5a:c6:f4:20:dc:09:e1:63:ee:
                    84:0c:a4:7e:f6:3b:91:f1:d9:79:11:3f:bc:bc:a4:
                    a8:13:51:2b:92:4c:d2:b3:75:5f:e2:ed:ab:44:61:
                    f1:e4:a7:a2:ce:f4:6a:51:d3:dc:06:bc:52:af:b5:
                    e5:07:e9:ae:f4:61:75:59:0b:4c:16:7b:83:73:e2:
                    d8:3f:02:f8:7b:3e:2b:e0:42:90:f9:a6:2f:e4:f5:
                    d1:aa:3f:57:09:26:78:fe:5e:e1:f9:f5:5a:c5:b3:
                    8f:de:3a:7e:21:7f:15:41:7f:f4:66:78:c0:ac:9c:
                    9a:10:b2:62:e9:dc:d7:40:03:7e:be:65:0a:9f:62:
                    95:8f:50:c7:cd:6c:50:9f:95:00:e0:23:32:de:e6:
                    51:76:a1:e0:86:fc:4a:8c:b9:1d:f9:55:c2:fa:35:
                    8f:e4:6a:e4:7c:26:34:c1:39:09:61:3b:b9:3d:18:
                    a0:8a:d1:7c:ca:bd:eb:70:ef:b8:cd:9f:81:d0:5e:
                    2c:3a:f3:ba:d5:79:0b:bb:2a:4d:49:c3:65:ac:a6:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:70:B1:1B:CE:F1:00:36:61:DE:FF:8E:7A:B1:AD:94:55:31:4F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:56:c8:1d:11:f9:a8:1d:1e:97:5b:bf:55:01:c4:5e:c6:7e:
         5c:77:8a:4c:ef:c3:88:de:d0:65:27:d7:dd:5b:9c:c3:6e:ac:
         36:23:6e:54:ca:06:f3:aa:df:50:be:cc:0b:92:8b:8b:bc:98:
         43:ab:9c:14:e8:36:14:0d:c7:ab:02:13:13:92:a0:98:b6:46:
         22:a9:5f:49:8b:73:11:6b:7f:43:24:fb:95:e5:7e:36:1d:fd:
         d0:ff:21:e4:8c:95:4b:0b:e2:3a:be:97:47:31:15:a4:1e:f2:
         70:4e:3d:fc:00:dc:ec:3a:6c:a2:fd:43:60:78:d7:c2:6e:42:
         d5:cd:55:fc:39:47:3d:c1:68:61:19:d7:1c:30:93:58:96:63:
         2e:f5:de:49:64:0b:7a:05:23:5d:5b:6f:bb:8d:8c:92:19:ab:
         bc:9d:a8:89:1f:f8:40:bf:0d:f0:7f:c6:d7:01:7d:99:f1:5c:
         32:9f:1a:8b:1f:52:be:99:e1:df:ec:7a:d7:fe:c3:01:2e:65:
         7b:84:8b:95:31:b3:f2:a5:1f:5b:45:0f:1f:92:ea:86:55:48:
         c2:09:bb:fe:0c:83:62:14:0a:41:5e:74:16:6d:3e:a0:f4:13:
         46:03:75:95:4c:d1:9b:b1:dd:dc:c5:8a:a6:b7:87:86:db:09:
         87:15:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:08:20 2025 by rpki-client