Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
File:                     c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa (raw, json)
Hash identifier:          6GPlKCXtmQKnJZIdMauy4yEn/qAYdigOg4AuAEJtHHo=
Subject key identifier:   25:BA:38:38:55:A9:97:C0:F5:4D:C4:0B:8F:EE:6B:CF:E4:13:74:39
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F4328584832F042988FCBF204FDE06E80
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     394177
IP address blocks:        170.75.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:42:98:8f:cb:f2:04:fd:e0:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=9828bc5c-12c8-4296-9a5f-ae0fe0357ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:e1:47:6f:34:37:83:14:1e:00:57:50:9b:
                    0e:b7:56:55:93:f3:60:4e:2e:a3:66:b3:7a:75:6d:
                    7d:6f:2f:86:8a:c4:4a:0c:03:6e:da:cf:73:68:2c:
                    0c:fc:b5:99:4f:14:cc:9e:5e:0f:9e:79:c8:4f:3e:
                    bd:ac:5c:9d:90:bf:80:1c:ac:08:be:83:17:ac:4f:
                    c3:0b:cd:99:89:4e:09:80:ae:4f:2f:a6:d7:66:1c:
                    81:98:45:8a:72:c2:d2:09:02:f7:d2:d4:1c:cd:6f:
                    9f:ad:d6:92:14:60:a7:d3:83:fd:5b:27:27:80:77:
                    45:e5:c3:de:8b:08:d6:c4:a5:c5:0d:20:fd:ee:6c:
                    53:fc:13:bb:49:25:11:3f:82:cc:01:ee:15:64:63:
                    5a:15:2c:a8:07:8d:ae:0a:4a:5b:53:b1:40:31:b8:
                    ff:ae:1e:30:46:2a:fc:9f:ae:b9:92:9a:0a:67:2e:
                    3a:58:e8:60:71:f0:66:c6:64:f0:60:c2:18:ca:ac:
                    52:cf:6e:24:91:e0:b4:8f:64:9e:77:35:6c:2b:d2:
                    f5:42:11:79:7b:57:08:e5:7e:c5:3f:0f:31:78:a4:
                    9b:4a:ad:9a:83:14:3d:e3:df:c3:69:21:4c:13:e9:
                    d4:f9:78:e1:1f:e9:86:c2:52:1a:24:4e:cc:6c:e7:
                    48:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BA:38:38:55:A9:97:C0:F5:4D:C4:0B:8F:EE:6B:CF:E4:13:74:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7d:b6:8a:50:e1:b4:02:17:ac:3f:14:ea:60:6e:e3:67:e7:
         e1:97:b1:5c:f2:10:b8:38:9d:25:ad:09:2c:38:5b:07:21:8d:
         43:9a:51:ac:8b:ec:f9:e5:1c:b2:88:ad:5d:44:70:ae:55:97:
         7f:8d:72:ad:a9:79:7a:0b:86:40:9e:14:02:f1:db:a9:e3:fe:
         51:20:f3:df:86:e2:7c:33:ba:c9:99:d7:ca:86:68:d3:2c:d1:
         34:6c:cb:95:94:f1:77:3f:62:2e:2e:9e:85:db:c0:b8:f5:68:
         52:11:c7:c9:7d:36:fa:1c:73:38:ec:72:8e:89:93:d5:92:8c:
         7e:60:f9:de:48:c1:7e:6d:20:2d:15:d8:a3:eb:0e:06:a6:2d:
         b9:ee:29:d4:aa:2e:c8:18:a9:0f:fe:7f:1d:f6:5d:a8:03:d2:
         e0:d3:a2:7f:60:3a:fa:95:9e:44:52:ba:45:e3:28:4b:05:0c:
         8d:39:2c:ee:6e:55:5f:42:58:fc:dd:22:64:7f:71:04:70:2b:
         d7:6f:9a:9e:62:2c:e3:e0:79:fb:e3:27:c9:ff:38:3d:f6:25:
         83:f1:56:f7:37:20:6b:fa:b0:96:c8:bd:53:01:ec:98:d6:74:
         a0:3f:d1:a1:1a:16:7f:93:c5:bd:fe:5b:27:bd:d3:ec:9b:dd:
         22:f6:5f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:14:51 2025 by rpki-client