Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa
File:                     388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa (raw, json)
Hash identifier:          zis6/+JCwEvqz4MueddwJtzny0cKSRNRLccjyCg/m8o=
Subject key identifier:   19:EF:21:E9:C8:D3:5A:62:05:97:F6:A1:FF:7E:ED:6E:1E:09:8C:58
Certificate issuer:       /CN=52ef44c2-b190-4c91-a394-c8a96856e595
Certificate serial:       010D0C9F43285848037B6C957E24D6C58F5EC600
Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        207.211.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:6c:95:7e:24:d6:c5:8f:5e:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=762e9d0a-5d95-4f53-a845-31ffb091b00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:cb:3b:4e:6b:e5:f6:42:d9:18:77:67:02:
                    75:65:17:f3:63:d8:e1:53:1a:a6:aa:79:e9:b2:09:
                    83:71:7c:78:ea:64:a2:d5:8b:58:4e:bf:9a:75:e2:
                    5b:3c:a6:58:34:42:c2:6b:ce:1a:96:18:cc:8d:53:
                    8d:a1:56:a9:da:79:c9:29:73:9b:9e:4c:fd:b7:04:
                    ef:84:d0:c7:76:4d:34:d8:83:d6:4d:a6:d2:92:ef:
                    47:ee:98:df:9c:26:74:83:97:c5:6d:71:31:9c:24:
                    22:ef:8c:dc:57:dd:f8:f2:dd:5f:ea:f9:2f:b7:7c:
                    6e:f0:66:c4:01:43:d2:19:91:51:8d:7f:81:f6:c4:
                    19:97:a3:63:4e:4c:d0:79:bb:3a:51:9b:60:f7:50:
                    9b:8f:a0:ef:2e:c3:2a:cc:27:8b:4d:c1:f7:0d:85:
                    6a:c8:30:14:66:8f:a9:bc:ee:67:d0:20:98:47:4a:
                    db:cd:07:6d:be:71:5c:f8:15:aa:a5:b1:9e:c9:4b:
                    fb:c1:ea:b0:78:32:c6:24:d6:c6:00:32:46:57:a2:
                    e9:b8:09:c6:02:b2:66:fa:eb:f9:97:f3:86:18:83:
                    2b:fc:62:10:33:b0:ff:d4:d6:35:c3:f0:d1:b2:cf:
                    43:4d:38:9a:a5:3b:43:d9:c7:ff:73:08:73:89:ea:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EF:21:E9:C8:D3:5A:62:05:97:F6:A1:FF:7E:ED:6E:1E:09:8C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl

            X509v3 Authority Key Identifier:
                keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.211.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:9e:21:a3:4e:5d:f3:8a:2b:1d:f8:7e:bb:6b:07:2e:ef:91:
         d6:cb:11:b3:36:c4:94:cd:79:f6:2c:94:4f:15:16:bc:2e:b2:
         a2:e5:48:b9:f5:8e:89:bf:77:7f:d3:75:df:14:20:33:da:e3:
         61:9d:e6:ec:94:a2:74:7a:d1:5c:72:90:7d:b1:b1:83:de:e4:
         18:dc:46:2e:8f:20:a8:d5:95:50:fc:da:9c:cf:b5:7a:93:b9:
         d2:0c:e5:13:db:a8:44:09:c8:67:d1:84:ef:cd:1c:e1:40:b0:
         7d:cb:11:37:b0:c4:20:c9:eb:80:5e:fd:92:9c:61:5f:66:27:
         e2:8a:25:c8:e0:b6:3e:41:ad:01:3a:44:f4:c9:58:c8:3a:2f:
         aa:b9:00:28:10:c8:e3:c5:10:6d:a0:28:7c:ae:1f:c3:64:fc:
         32:61:df:c2:8c:e7:94:c9:14:10:8b:b9:5d:a6:4a:e5:bc:4a:
         93:4d:79:28:fc:81:3e:bf:c5:d6:e6:19:ba:79:c0:b2:ca:3a:
         6b:53:6d:62:c7:e8:1c:06:25:ec:e2:0b:50:08:3a:59:c0:63:
         6d:f9:dd:10:b5:13:37:72:27:68:e7:b6:ce:cb:c5:55:b3:f5:
         72:c3:57:b6:61:94:29:7d:c2:8e:7f:ae:81:d0:33:e9:e7:5a:
         03:a6:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:59 2025 by rpki-client