Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa
File:                     bcb675ae-285c-35df-9170-d65297df0a1f.roa (raw, json)
Hash identifier:          bPNaodHmv42hgAv9h+JyhOOCN+3AnfsVfTaYFL9F1Rc=
Subject key identifier:   FC:98:85:37:1F:DF:1E:30:45:D4:E2:77:98:74:78:99:39:94:89:C7
Certificate issuer:       /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a
Certificate serial:       010D0C9F432858482EC00082924603A623207880
Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     92
IP address blocks:        128.153.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:00:82:92:46:03:a6:23:20:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=075660fa-e7c0-4403-a18f-12335204dcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:9e:10:bb:40:0a:87:32:2a:31:24:d2:fd:
                    6a:bd:c9:05:3a:b6:1d:64:76:12:1c:38:c2:89:47:
                    96:ab:af:ab:36:14:32:82:e2:23:e6:44:1e:9d:c5:
                    f4:19:fe:04:5f:37:cb:4f:87:26:38:d3:97:cf:11:
                    84:98:f8:0f:4d:64:40:6d:24:aa:11:46:2a:c4:74:
                    33:e8:c1:9e:84:ca:17:79:35:73:ff:ee:89:ed:5b:
                    db:70:dd:0c:ad:97:b2:2a:98:f0:d6:4d:7e:63:17:
                    f6:b4:29:0a:2a:f8:d9:d9:4d:80:5f:b7:10:bd:55:
                    e9:5b:6c:4e:7b:a4:75:ae:2c:a3:eb:c0:5f:55:37:
                    55:bc:47:06:72:98:51:b0:2e:0b:be:4a:cb:43:e7:
                    66:eb:97:bb:b0:f9:1c:84:00:4e:f7:b7:44:a9:23:
                    c6:8b:98:a7:bc:d4:98:88:02:f5:56:d0:a8:28:a5:
                    60:21:32:6f:4c:d3:f1:28:bd:76:77:ca:fa:78:a9:
                    c2:e4:ae:05:ba:de:d1:8d:0a:f0:fd:64:f9:59:e5:
                    6c:4d:08:f5:e0:65:6f:24:96:12:2e:76:5f:b5:a2:
                    c0:e5:9b:19:74:cd:5b:85:82:47:4d:c8:d0:75:0c:
                    44:77:ea:73:41:5d:95:c7:5e:39:d0:5d:c8:80:b7:
                    de:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:85:37:1F:DF:1E:30:45:D4:E2:77:98:74:78:99:39:94:89:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl

            X509v3 Authority Key Identifier:
                keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.153.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ba:a9:86:56:5a:3b:76:f6:76:66:fc:41:e5:4c:b2:6a:cb:
         96:fa:b1:f8:f5:8d:1c:e8:98:31:56:a5:52:2f:4f:46:15:92:
         1f:ab:0b:83:a8:cc:9e:b5:d9:f0:d6:6a:a4:6a:fb:90:ef:23:
         5b:5a:fd:a0:24:e4:8d:35:d3:ed:91:77:43:64:a5:7f:24:82:
         24:6f:80:ce:51:bb:02:3c:41:f6:da:7b:d9:44:24:1f:de:b4:
         a7:2f:ce:c1:c3:2d:5a:16:92:53:05:85:f2:5b:47:f7:84:27:
         a5:69:97:8d:57:95:c1:01:34:81:50:43:60:cc:12:0f:9d:10:
         b1:16:e9:bf:11:8c:c6:7e:c1:a8:ef:89:46:9c:ef:90:e4:7d:
         e8:a3:b0:fd:87:ef:ae:6f:b9:4d:75:02:13:09:33:3b:4b:f8:
         bc:33:bb:7f:19:b0:fd:c1:7f:f3:f4:d7:5b:55:ef:3f:d2:60:
         ee:70:c8:99:56:31:97:05:d3:bb:b1:d2:64:a0:18:67:3e:bf:
         93:58:55:b1:52:b6:db:33:f3:8e:2c:4e:8e:93:69:65:a0:d4:
         43:93:d8:39:de:13:a2:fe:16:c6:a8:a3:57:97:a1:e0:55:ac:
         25:3c:da:19:5b:1a:33:a7:85:ad:8f:8c:f2:aa:07:7f:8e:66:
         ed:a2:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:54 2025 by rpki-client