Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/6418fb82-d9c7-3cba-975e-2ebdac633a4e.roa
File:                     6418fb82-d9c7-3cba-975e-2ebdac633a4e.roa (raw, json)
Hash identifier:          +2yL8Zel0OpzRn0/RBqOcbJMrAzzy3xu1DNN/3yWhPg=
Subject key identifier:   C4:76:1C:D8:C3:F6:A1:7D:5F:A2:28:95:1F:DA:88:15:5A:90:85:FA
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F432858487E506AD4BE6959EF6BC91600
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/6418fb82-d9c7-3cba-975e-2ebdac633a4e.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     205220
IP address blocks:        167.253.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:6a:d4:be:69:59:ef:6b:c9:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=fa6a24b3-fddc-4f5a-a1c0-cee98079b61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:33:6b:c7:d8:92:da:31:df:32:5b:5d:94:
                    fc:73:ff:db:33:a7:9c:0f:53:bb:34:9c:d3:a3:5e:
                    ef:42:39:b6:77:be:2c:32:1a:a2:5d:b7:0b:5b:fa:
                    80:fa:0b:d4:50:90:fa:ee:b0:d4:08:e0:b0:11:4f:
                    e3:3b:6b:48:80:74:2c:7f:df:18:d0:a5:34:5c:25:
                    f1:a7:0e:e5:21:02:b3:b1:e4:02:d3:80:c6:7c:8e:
                    dd:da:01:bb:4a:f0:f8:e8:c8:7e:94:c8:ce:9a:9e:
                    a2:67:51:3f:4f:2a:bc:31:ed:76:c7:7d:86:2d:0a:
                    da:4e:cc:4d:89:57:c0:2b:98:2a:52:ef:3c:07:ff:
                    49:3e:6f:f0:16:66:4d:2a:91:1e:dd:a3:98:a1:3e:
                    1e:d2:32:74:2b:36:7a:1f:d2:80:0b:eb:cc:56:3b:
                    ec:23:80:e5:4d:66:74:d2:03:e1:19:b1:0d:9a:1f:
                    bc:eb:21:c3:83:9a:dc:11:2b:76:f2:99:e4:0f:05:
                    b9:2d:4e:49:7f:b0:52:c0:f4:74:50:26:55:5a:22:
                    8f:fd:46:14:de:4b:b3:9e:b4:58:2d:ff:83:ab:df:
                    e4:f2:3a:44:8b:e7:69:fb:e7:c1:00:6f:f8:62:dc:
                    7d:a2:78:ae:26:06:13:c1:2e:91:b0:8b:23:15:8a:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:76:1C:D8:C3:F6:A1:7D:5F:A2:28:95:1F:DA:88:15:5A:90:85:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/6418fb82-d9c7-3cba-975e-2ebdac633a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:d9:da:91:2c:f8:c2:e7:2f:59:e1:f1:40:6b:97:e6:da:
         cc:21:89:82:05:41:a0:bd:63:0c:66:fb:f0:8d:4e:be:bb:08:
         86:d4:b9:02:a0:bf:5a:3e:21:21:5b:7b:a0:a7:cf:fd:a7:05:
         58:85:54:94:c5:76:2f:4b:8b:1a:63:e3:f7:a3:42:82:63:61:
         13:2b:b8:06:2f:37:29:af:67:5f:0a:71:95:67:44:b3:d7:58:
         f0:4f:1d:a9:a7:ea:7a:21:c2:b0:c6:37:94:de:d7:b2:61:09:
         6b:33:8d:3f:5b:88:8e:85:39:ec:c6:d0:a1:70:57:8f:46:e6:
         4c:15:ce:be:36:94:7c:3b:2a:8a:d2:f2:cf:6e:3e:19:62:cf:
         4f:4d:8e:35:35:da:30:45:9b:29:bd:ca:16:ad:64:21:0f:eb:
         47:82:19:44:8d:bf:f5:18:69:8f:b6:15:b3:b0:93:f7:91:20:
         e9:71:72:e9:1d:ea:24:a3:58:92:84:75:92:b9:34:11:c5:3d:
         c7:23:84:93:da:ad:27:ba:43:df:bb:f6:26:fd:98:00:2b:bf:
         8e:94:bb:95:34:95:16:80:0f:68:da:dc:ef:94:64:fd:a3:f4:
         d9:94:db:42:02:53:ae:d8:91:1c:53:f8:52:5f:02:a9:c9:44:
         eb:6e:49:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:23 2025 by rpki-client