Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1112acd8-24d7-34d8-b1dc-2bf1d6a820f1.roa
File:                     1112acd8-24d7-34d8-b1dc-2bf1d6a820f1.roa (raw, json)
Hash identifier:          PySUXVWACeOIBJIlFxfUrGHAIK7BSio40K0FYKWLMV4=
Subject key identifier:   D7:BB:E7:9E:24:B0:3E:24:C4:B1:2F:3C:AF:7D:E6:CA:00:92:49:DC
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858484EDAC00FAABE66C959C4A800
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1112acd8-24d7-34d8-b1dc-2bf1d6a820f1.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     376
IP address blocks:        207.162.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c0:0f:aa:be:66:c9:59:c4:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=ca01116e-58ad-46ec-b87a-680b21333493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:f7:b7:5e:cf:83:9d:da:88:17:65:0a:03:
                    1f:58:5a:3f:b3:a0:9d:2a:32:4c:9c:e4:24:6b:5b:
                    9b:0f:b0:28:d3:24:e5:2c:ab:a3:73:5e:05:df:af:
                    62:30:fb:df:e1:00:f9:05:b2:8c:aa:d2:41:ae:d5:
                    bc:a9:88:ed:70:aa:f2:4b:bd:4c:62:1b:9e:10:47:
                    ca:4c:a5:8e:08:13:6a:24:8d:22:9d:2d:6a:26:ea:
                    0d:d6:ea:1a:48:ce:fc:6c:3c:46:8b:a5:ac:d0:66:
                    0d:38:d1:85:03:47:46:44:12:37:9d:db:0f:c4:b2:
                    d4:4d:54:83:06:1f:04:0f:22:94:c1:42:43:d4:7c:
                    62:14:df:bc:64:58:76:bb:23:57:34:da:7d:ac:e7:
                    b1:de:31:49:84:17:b7:ec:4f:36:ba:ef:e6:dd:94:
                    e5:fa:e5:7e:d5:e4:a7:2c:77:47:16:a2:82:5f:a7:
                    43:71:16:6d:90:81:ad:52:57:10:89:29:c1:92:10:
                    02:20:6a:2f:8d:bd:df:e8:9a:2f:e2:2e:db:d8:18:
                    9a:31:2c:fb:92:2c:4b:ee:32:41:a3:88:2c:f3:1d:
                    88:5a:95:fb:d1:c9:2f:fa:24:63:04:8e:2b:80:26:
                    c6:71:6b:84:9a:c2:f6:96:e0:54:dc:ad:cd:9e:67:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:E7:9E:24:B0:3E:24:C4:B1:2F:3C:AF:7D:E6:CA:00:92:49:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1112acd8-24d7-34d8-b1dc-2bf1d6a820f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:3a:f9:6f:9d:a3:45:a5:ed:61:b8:6b:0b:60:24:8b:67:
         ea:89:57:46:18:61:bd:94:9f:09:40:c5:40:03:9b:be:37:d4:
         71:ce:11:05:6f:2e:6f:88:8a:b6:4f:78:0c:e4:42:1d:7d:f7:
         b2:38:c8:80:71:d0:10:84:67:f4:15:15:bb:f5:9b:dc:55:48:
         db:35:b0:7e:fc:00:a0:db:df:34:56:22:63:6f:a3:f0:bb:85:
         04:26:62:d1:e5:45:d0:56:9e:62:26:81:75:06:c9:ab:78:2e:
         1c:cf:9b:5f:b3:d4:5b:10:e8:ed:d3:09:23:57:df:63:53:9a:
         e4:f5:67:d1:53:18:a7:9a:dd:65:f7:38:a1:3b:1d:b8:43:e6:
         8d:4f:2f:4f:80:43:20:97:db:2d:3d:e1:86:cf:29:37:da:3f:
         99:f8:30:fc:c7:89:f1:d1:d2:89:3e:12:95:1c:c4:7d:90:91:
         ba:87:2a:cd:02:b7:e1:67:87:3b:44:da:73:75:b9:16:29:00:
         8e:ae:1f:96:e3:9e:3d:98:53:07:3e:43:c1:f4:31:b3:64:99:
         93:1b:d5:83:90:fb:06:72:b7:da:fd:dc:e5:6d:e5:b0:f6:cd:
         db:43:c3:f9:71:04:48:37:a6:55:e5:54:29:62:d4:86:bc:4b:
         45:34:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:11 2025 by rpki-client