Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/ca755e65-375b-3141-a78c-963d8a464836.roa
File:                     ca755e65-375b-3141-a78c-963d8a464836.roa (raw, json)
Hash identifier:          Nl2JRPFW1bY6ZLdAomvEjE1gKJMClwt7SOLznBlSFaM=
Subject key identifier:   2B:74:43:BF:16:A7:0B:06:3B:3B:D3:B6:9C:BF:04:9E:A4:EF:EC:82
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584851A5715CF760FD56106F43C0
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/ca755e65-375b-3141-a78c-963d8a464836.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        206.146.130.0/24 maxlen: 24
                          206.146.131.0/24 maxlen: 24
                          206.146.132.0/24 maxlen: 24
                          206.146.133.0/24 maxlen: 24
                          206.146.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:71:5c:f7:60:fd:56:10:6f:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=dcdd306b-7897-40b9-a8e2-af9d21ab0128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:5a:fa:4a:7a:08:d5:8d:2a:d6:69:02:cc:
                    d1:55:8d:95:99:d8:23:d8:52:cc:e2:60:04:22:6c:
                    c3:bb:c9:c5:1e:9a:76:55:89:11:08:23:26:8f:b0:
                    c3:b1:8d:fe:c7:dd:22:c8:3a:b6:f4:40:1a:0a:53:
                    a2:1d:6a:68:50:3f:81:a6:b0:dc:e5:90:f1:c6:5d:
                    aa:89:60:a3:fa:54:a7:4d:33:64:a9:65:da:cb:7f:
                    72:74:f0:64:11:71:60:16:3f:65:26:41:5a:1c:75:
                    66:bb:e7:d0:b8:d2:f7:66:2c:e3:03:20:3c:3e:82:
                    af:7d:ab:ba:aa:d3:66:25:bd:bf:7f:da:5e:4b:2a:
                    57:50:e8:41:94:05:fa:24:8b:d9:6d:b2:17:18:02:
                    66:7d:8a:c3:5b:87:72:9d:80:37:73:d1:30:78:b4:
                    6e:fb:0e:50:75:07:e3:20:15:cb:5a:67:c1:13:76:
                    63:2d:4d:0e:93:2d:bd:4a:b4:98:b4:9a:8a:0f:9a:
                    70:7b:c4:42:7f:64:fc:af:31:58:a7:2f:0d:1a:cc:
                    a6:04:dd:62:d2:57:a2:30:1b:65:62:35:a8:1f:a6:
                    5e:a1:9d:5f:c0:82:45:72:c8:bc:8c:62:eb:28:6d:
                    55:d0:fb:fb:a0:94:4e:3e:fb:ea:6c:d5:d2:d7:01:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:74:43:BF:16:A7:0B:06:3B:3B:D3:B6:9C:BF:04:9E:A4:EF:EC:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/ca755e65-375b-3141-a78c-963d8a464836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.146.130.0-206.146.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:79:ea:7a:13:a6:48:b0:ce:3d:cc:92:63:78:37:86:96:33:
         e1:6f:2d:ec:94:32:d2:71:db:39:e3:7e:1d:7f:2b:65:b3:fe:
         14:7c:b1:ef:58:20:0a:af:1a:0f:32:5e:93:d6:5c:40:ca:1d:
         ad:8a:67:62:1f:91:11:1a:85:b7:e4:cc:26:4d:d1:c1:9b:0d:
         b1:37:3a:b0:5f:c8:15:55:c3:38:67:0d:ad:ac:ee:80:c2:97:
         31:7b:13:38:f6:86:27:52:bf:60:eb:3c:98:60:44:ff:18:c5:
         aa:47:bf:a6:ab:dd:51:a7:31:06:5e:78:17:60:18:a2:48:b1:
         0c:53:be:f9:b2:97:cd:03:cd:20:d9:d8:79:89:46:e5:00:b0:
         14:bf:91:63:16:65:35:fd:8b:4f:0e:fd:55:45:8b:a9:cb:d6:
         95:1e:f8:f9:48:e1:90:7c:62:d7:79:9a:11:82:3b:fb:a5:e7:
         08:78:05:d4:26:3c:c0:9c:35:3c:9a:3d:b5:b6:99:bd:ef:19:
         14:9d:7c:f2:fd:ce:94:36:ff:5e:94:b1:ae:7d:4d:ff:26:f0:
         54:45:60:7b:b3:d1:d6:10:5c:a3:d0:f1:e7:e7:0b:f1:4d:66:
         9a:33:2b:33:3d:06:f0:82:41:40:4b:15:73:ac:ff:aa:6e:fa:
         04:f6:04:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:05 2025 by rpki-client