Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa
File:                     8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa (raw, json)
Hash identifier:          mIVGjPr1/o05RLfqt55CPzYD7UExDtnkUEJOfnVGXZE=
Subject key identifier:   E4:75:D2:2C:96:A4:B6:45:A7:FE:03:2C:EF:2C:AA:11:2E:7A:76:88
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328584832F03F4230B80F67AAD83940
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     3630
IP address blocks:        199.109.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:3f:42:30:b8:0f:67:aa:d8:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=8089bbe0-f52c-48cd-a5a2-9718aa2e040a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:9f:99:28:54:7f:66:ae:52:f8:c2:5d:38:
                    19:b5:5e:12:9a:92:7a:1e:32:93:ea:89:e1:cb:cf:
                    a0:fc:e9:7b:01:b0:60:f5:4e:39:ea:f2:f3:f4:dc:
                    46:87:5c:7a:a9:cb:fa:fb:d3:f2:5c:22:4d:10:c1:
                    e8:14:f8:54:1a:2f:a8:1a:0d:37:13:7d:38:01:85:
                    e3:48:27:de:6d:8d:4e:e3:c6:02:17:6e:e5:f2:11:
                    2a:1c:88:89:18:3c:44:aa:aa:99:44:5b:b2:20:cd:
                    c2:11:8f:62:62:86:90:5f:be:28:b3:de:74:fc:74:
                    83:ac:3f:27:9e:b2:7b:1f:d4:35:3b:4d:2c:48:23:
                    c9:3b:d0:f9:15:3c:ab:cc:d2:be:29:c6:0f:58:f2:
                    67:4d:03:54:11:87:e6:ee:20:66:e3:f3:1c:8f:f0:
                    65:c7:ed:3b:b1:7c:20:c4:6a:f2:e4:9f:85:40:ff:
                    b8:92:0a:f9:ab:4d:da:e7:3f:dc:ce:f6:e0:21:14:
                    c3:3f:4e:ed:6d:a7:7d:57:d1:f2:d4:6c:46:40:f8:
                    27:93:7d:16:e3:72:7e:0b:72:c3:8d:39:23:7c:9a:
                    e7:34:5f:2b:a9:b9:eb:e5:20:f8:f8:42:79:10:c9:
                    f8:48:13:56:2a:68:94:e9:67:bd:95:c1:39:a3:f1:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:75:D2:2C:96:A4:B6:45:A7:FE:03:2C:EF:2C:AA:11:2E:7A:76:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:dd:4b:b3:f9:eb:bb:0b:4f:b7:53:b6:89:86:3f:62:e5:82:
         8e:03:02:8b:3a:3b:7b:3a:76:91:9b:94:ce:23:40:48:58:5c:
         b9:98:46:41:4c:e4:b4:7d:b1:d3:43:6a:f2:96:b4:7b:49:e2:
         ca:10:a6:fa:47:b8:d6:42:b3:ed:7f:6f:b7:51:64:c3:15:37:
         bd:63:89:c0:c0:6e:6e:47:d2:30:e5:15:02:88:5a:20:97:6e:
         79:b1:9c:56:6d:3a:0b:b9:c2:d8:43:c3:81:df:c5:13:c0:7f:
         ae:63:3e:6a:f2:7a:6a:44:f4:a4:99:35:74:5a:f5:24:0b:e3:
         e1:a6:ae:fd:6c:ea:79:7c:19:4c:c1:21:8a:fd:25:df:1c:f2:
         73:61:cc:0c:59:0c:c3:07:d5:42:c4:25:27:90:f1:50:3f:c0:
         00:78:de:62:d9:7e:cc:dd:16:b1:21:1d:df:af:55:71:ef:5b:
         97:6f:e3:25:87:d8:f0:42:bb:be:c8:19:5e:33:b2:99:af:c6:
         5e:bd:8e:68:3f:1f:35:f1:de:64:cb:a2:08:25:8e:81:15:d4:
         d8:32:1c:4d:e0:9f:43:cb:02:87:bd:9e:ff:5b:27:d6:f2:b7:
         8f:cf:ce:25:38:61:18:dc:2c:bc:cd:4d:33:91:6b:9e:9b:f4:
         69:5c:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:47 2025 by rpki-client