Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/6d27e43e-e819-3b95-870c-20a2c7ad726a.roa
File:                     6d27e43e-e819-3b95-870c-20a2c7ad726a.roa (raw, json)
Hash identifier:          uCp9nKj7/YkD+Y/S1NmiyyrhtZYrcdcBg+y7bLSz6ls=
Subject key identifier:   74:06:3D:6F:FB:32:F5:A8:72:57:BE:4E:B9:1D:5C:E2:8F:5F:C8:A0
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F4328584812D52785541D2B91000C5BC0
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/6d27e43e-e819-3b95-870c-20a2c7ad726a.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     611
IP address blocks:        198.164.40.0/24 maxlen: 24
                          198.164.41.0/24 maxlen: 24
                          198.164.42.0/24 maxlen: 24
                          198.164.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:27:85:54:1d:2b:91:00:0c:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=7d2bc500-5d35-4b07-9095-c4224d77305b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:69:27:e4:4a:6e:ab:4d:ad:80:f4:15:d0:
                    a3:70:1c:48:3e:25:8b:24:28:9f:43:bb:60:d2:bf:
                    c9:03:4d:f3:68:8c:85:9e:8e:4a:bb:0a:26:f1:67:
                    f6:cb:e2:69:b1:36:0d:59:6f:21:62:77:88:d5:d3:
                    e6:e0:af:26:64:a1:1b:fd:c5:ee:e3:ad:00:34:3a:
                    82:bc:cc:6f:12:9c:04:dc:b5:47:95:7a:18:31:a4:
                    94:d6:be:78:88:04:6c:c0:14:1f:c7:b5:7a:d3:d2:
                    4f:98:84:52:2f:4f:f2:d5:51:77:49:3b:f6:84:b9:
                    cf:18:55:b9:0f:45:78:ca:b2:18:f4:e7:f2:b7:3e:
                    40:29:d3:8d:7a:96:fb:89:09:a4:67:ff:58:55:6d:
                    dc:12:f0:0e:10:3a:ac:e2:14:cf:e0:be:a3:52:63:
                    7e:6b:df:f9:e6:fc:1e:bd:c9:c9:a7:94:f2:35:8a:
                    87:5c:6f:5f:70:2c:46:7a:8a:a2:a0:b0:59:f5:47:
                    15:1e:b5:1d:e3:94:38:93:b0:1d:7f:b5:ee:bc:ef:
                    c0:99:e4:64:c8:3e:16:b3:1b:e6:82:df:b6:f5:e9:
                    b6:a0:9e:af:54:b9:84:f7:c6:ab:8e:d2:8e:57:fc:
                    6c:b4:de:8a:41:f9:bc:b0:17:1a:1a:4b:09:f4:62:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:3D:6F:FB:32:F5:A8:72:57:BE:4E:B9:1D:5C:E2:8F:5F:C8:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/6d27e43e-e819-3b95-870c-20a2c7ad726a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:88:b3:85:c4:93:dc:16:4e:1e:5b:ee:af:d4:fb:1f:4e:44:
         1e:b3:ed:e8:54:76:29:84:dd:7e:e5:78:6c:ff:e2:82:53:ae:
         50:89:d6:d2:33:45:47:3a:e0:6f:41:b6:c3:42:df:8d:df:ca:
         f5:e8:17:7f:49:a6:65:8e:76:da:22:22:ae:e4:3a:13:a2:da:
         db:61:b0:b6:f5:ee:2e:24:bb:b1:9d:c3:02:49:6e:79:ad:e1:
         63:ed:5a:4c:d8:7e:e5:0d:52:13:da:b5:7c:13:6d:45:03:7a:
         ed:47:7d:ae:a9:8f:91:e5:12:27:b2:b4:9b:65:ee:70:91:85:
         68:0e:8a:f2:f8:d2:ae:69:37:df:0a:80:35:51:38:80:de:53:
         c9:8b:78:5e:1a:d2:9a:b5:3c:a8:c1:10:49:e8:04:86:71:81:
         85:ca:7d:3c:23:57:89:29:e2:0c:48:05:16:f5:d6:09:72:61:
         40:37:26:c1:29:1a:4c:99:a6:c6:a3:41:cc:56:33:25:b6:0d:
         b6:86:1e:75:0d:90:5b:ec:24:3e:22:65:51:d6:d4:56:f1:e0:
         76:43:c5:e9:55:af:38:bd:72:ba:56:06:80:d4:ec:c9:74:7b:
         f1:c6:56:f9:9c:ef:1b:66:e8:d4:77:19:ed:4a:c3:1c:ed:df:
         26:1e:42:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:09:04 2025 by rpki-client