Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/76186077-714c-39b7-b3e0-22e19d063d7c.roa
File:                     76186077-714c-39b7-b3e0-22e19d063d7c.roa (raw, json)
Hash identifier:          VvBRFevf4PzSkaxcjCiCDBjz3Me+K7D2bWv0X/IT7C8=
Subject key identifier:   25:C3:62:47:A5:39:6F:25:E0:A1:7E:5B:74:1F:AE:94:D4:31:A7:78
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285848854B49A01324184070A95780
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/76186077-714c-39b7-b3e0-22e19d063d7c.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     3755
IP address blocks:        199.109.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:49:a0:13:24:18:40:70:a9:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=8350d37f-220c-4cd9-8eee-c31b435b2d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:c1:75:3c:df:9f:02:41:b0:da:90:ee:42:
                    e2:65:15:5c:26:8e:4d:32:11:44:e2:d8:3f:d6:8a:
                    65:7f:b8:da:53:a0:9a:9d:e2:51:67:42:46:e7:44:
                    20:90:d1:d5:39:7b:5c:bd:91:eb:55:96:11:92:7b:
                    e7:6d:68:00:67:e5:eb:5e:d9:36:f3:e3:cd:b5:0d:
                    40:55:80:c4:2a:63:20:9c:68:7a:dc:1e:a8:44:94:
                    de:01:f5:16:20:e3:42:63:0b:89:36:6b:9e:b5:0d:
                    b4:87:0d:8a:b6:b2:2c:73:31:51:d4:16:23:96:5b:
                    09:32:14:0c:c3:bd:e9:21:e0:dd:09:77:55:de:1b:
                    cf:c0:b1:f0:90:cd:55:c9:f1:a8:df:ff:9f:7c:5d:
                    32:bc:08:c2:3c:fe:44:f6:97:2b:80:3e:de:44:3d:
                    a9:ba:51:62:14:1b:ca:4d:23:35:03:a3:01:2c:21:
                    53:b2:b8:40:1a:80:40:29:ca:79:93:12:f2:84:ab:
                    eb:5c:b8:20:93:9f:b4:53:b7:73:25:da:98:09:ac:
                    97:1f:cb:5a:a7:3c:0d:07:4d:21:c3:c3:0b:6f:4c:
                    75:e8:2b:56:34:ac:7e:65:53:f2:43:b7:b8:b0:72:
                    a8:bf:2c:1f:dc:13:01:35:29:fa:e8:6b:b4:cf:e5:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:62:47:A5:39:6F:25:E0:A1:7E:5B:74:1F:AE:94:D4:31:A7:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/76186077-714c-39b7-b3e0-22e19d063d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:25:88:13:bf:0d:0a:29:0b:e4:6a:6c:c4:64:26:22:5b:53:
         22:78:ca:3d:58:b2:79:f1:9b:f2:86:20:57:de:ab:d4:ec:d0:
         0b:9a:59:45:fa:68:f4:42:1a:96:c5:63:70:9b:ec:e1:d0:23:
         08:45:53:11:93:51:c5:94:79:c6:3a:66:ac:04:af:ef:da:c5:
         d1:ad:48:3d:be:39:f5:78:ad:01:79:93:90:1e:ca:6d:c6:b2:
         c4:19:c9:70:58:fb:3b:82:11:f5:0a:8f:7a:ce:ab:0e:f5:78:
         c9:48:e6:1c:76:ce:c4:1f:a2:d7:f0:97:4f:c7:cf:16:ad:a0:
         4c:ce:b5:8e:33:a4:a2:62:13:f8:0b:ed:91:58:65:22:3d:7b:
         d2:5a:65:95:46:60:25:b7:99:72:83:57:96:4b:71:14:c5:a8:
         8a:5f:16:56:b6:9d:50:51:89:61:92:ff:08:f7:ba:99:89:bb:
         c3:b3:3c:b0:64:cb:8b:e3:f7:22:0f:c8:c0:19:98:86:70:e0:
         14:16:2f:c3:3f:6b:f9:be:f6:68:f0:c1:31:32:62:24:4c:92:
         8a:97:9f:4c:df:cb:21:7f:7a:75:5d:81:d9:37:14:de:29:9c:
         1d:ca:f8:0a:04:6d:1e:57:fc:57:0a:16:a8:b0:d3:a4:d5:74:
         40:7b:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:36 2025 by rpki-client