Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f703826f-dd15-3239-848b-0993f9fc63ef.roa
File:                     f703826f-dd15-3239-848b-0993f9fc63ef.roa (raw, json)
Hash identifier:          st08Z9y/ViHgF3rT8P757sgS/lUBNLk8XOCuI3xQJzg=
Subject key identifier:   00:E9:D4:03:46:BA:B9:AC:F9:19:4F:7E:4C:FD:74:7D:4F:FA:02:71
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858484AAAE4F8F38E53139D178740
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f703826f-dd15-3239-848b-0993f9fc63ef.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     396828
IP address blocks:        216.168.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:e4:f8:f3:8e:53:13:9d:17:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=5b4c70d5-2fc4-4603-bb2e-e345ec02ee9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8a:e2:c5:a3:e3:94:e0:55:0c:02:3c:b2:e3:
                    fc:81:4f:65:0b:8f:8c:41:67:95:6e:f7:7d:ba:57:
                    b8:b2:fa:27:52:dc:5d:2a:8c:17:dc:00:6e:cc:fe:
                    58:1e:f5:6b:d3:04:60:dc:f7:58:84:d8:5a:4f:3a:
                    40:f1:b6:f9:71:ee:53:7d:8c:07:3e:0c:b7:bd:39:
                    eb:ec:5f:d1:04:0d:f2:4d:a6:f2:25:26:6c:92:f2:
                    27:a3:a4:1b:44:e6:dd:6f:12:3f:e5:3c:ff:49:a8:
                    58:62:40:bb:c9:ac:fb:48:cf:8e:3d:64:5d:50:06:
                    ce:81:71:16:57:d2:77:e5:e9:cc:25:34:3b:a5:61:
                    f2:b1:4c:5a:aa:98:f2:b4:f8:75:cd:7b:0e:ed:00:
                    ca:d0:3c:70:bb:d4:9b:a9:83:11:a5:cb:b5:46:8f:
                    8a:c3:58:a4:16:50:1d:91:fc:a5:b7:0e:64:73:4e:
                    8d:48:d5:a2:d9:e8:82:be:9a:57:58:4a:fd:6c:9d:
                    ee:9e:8a:55:98:12:14:30:eb:55:60:5b:a2:30:5f:
                    69:91:7d:73:c0:7a:93:8e:14:8a:db:20:8c:2b:6c:
                    5a:f6:2d:3f:f2:6f:bb:e4:56:22:2c:37:8b:6b:d0:
                    61:c0:d2:cd:81:41:12:04:57:a9:70:ed:94:48:76:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:D4:03:46:BA:B9:AC:F9:19:4F:7E:4C:FD:74:7D:4F:FA:02:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f703826f-dd15-3239-848b-0993f9fc63ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:42:d3:0b:a1:24:4f:d1:df:b6:31:26:b8:fa:39:72:1c:98:
         2f:f5:24:29:08:7e:ed:15:28:91:4c:5f:ad:64:05:46:1f:43:
         7e:ce:8b:38:03:d1:51:43:fe:4a:b2:2e:d5:14:69:db:14:8f:
         bc:48:9a:1c:f9:bc:18:d4:39:df:9c:9c:58:6a:5d:74:f8:af:
         26:f8:fd:8a:90:0c:3d:2d:6d:14:13:79:20:40:57:43:95:eb:
         cf:53:ca:a9:41:8e:b8:d4:03:67:01:16:24:73:2c:ae:8e:00:
         62:de:93:2d:11:ea:b2:51:67:59:2a:65:0a:7f:6a:d3:bf:96:
         6d:aa:ba:ae:e5:ad:e7:30:58:55:77:cb:cb:42:6e:15:47:b1:
         c0:4f:ec:d6:65:a5:f8:8c:09:a1:65:43:d8:c3:d3:01:71:ee:
         d3:79:28:6f:8c:c6:2c:36:29:eb:aa:55:15:13:7f:60:cf:fa:
         f4:c9:83:86:bf:e5:f3:5f:c3:68:86:d0:49:e3:51:ed:f3:f6:
         68:52:d7:90:78:5a:4c:17:b0:24:3d:bb:64:62:29:e8:d4:9f:
         71:45:58:ed:db:d1:8d:fc:ac:c6:df:3c:e5:52:9b:47:90:b4:
         08:86:16:c5:3e:b8:b0:6c:cb:04:ce:ba:4b:d7:99:04:34:27:
         18:07:e4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:44:55 2025 by rpki-client