Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa
File:                     b2e5432e-486a-3195-a8c7-b69e19b4f706.roa (raw, json)
Hash identifier:          uZErhF+hvZF6K6Tu6Iv/3dszssuydKTa9TR13ARGwZc=
Subject key identifier:   AF:64:E6:36:37:48:ED:4F:4C:D2:9C:55:83:C2:CD:72:E0:13:32:CE
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285847FF505CBA2F082D5D635A1C00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa
Signing time:             Mon 25 Nov 2024 14:13:00 +0000
ROA not before:           Mon 25 Nov 2024 14:13:00 +0000
ROA not after:            Sun 23 Feb 2025 14:13:00 +0000
asID:                     376
IP address blocks:        206.167.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:50:5c:ba:2f:08:2d:5d:63:5a:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 25 14:13:00 2024 GMT
            Not After : Feb 23 14:13:00 2025 GMT
        Subject: CN=02214e30-c7c4-4935-8a2f-18b692dd649c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:b4:a5:77:10:a6:6a:df:54:2b:86:e7:2b:
                    47:7f:ee:dd:f9:ae:a1:e6:42:52:91:fb:15:d0:3e:
                    97:b1:d0:6c:cd:7b:5c:8d:f8:d6:69:ca:ec:6f:7a:
                    b1:71:e3:64:f2:a7:8c:33:fe:a7:90:c6:d7:20:bd:
                    e6:6b:ad:ed:24:8f:71:52:ab:9d:ea:53:eb:21:b7:
                    c8:21:1e:54:a0:48:c9:91:4d:30:fe:bb:f3:f5:25:
                    76:f6:bc:c8:dd:0a:60:b8:49:7f:c9:3e:76:8e:3b:
                    42:42:40:a5:81:da:45:a0:b9:01:5e:85:29:3f:c2:
                    be:60:f0:02:04:06:1b:f3:95:8e:00:b0:ff:9a:14:
                    ef:60:ba:3f:ab:9b:43:3e:78:68:18:a8:08:c5:7f:
                    21:c4:a6:e1:2f:9a:dd:97:32:47:1e:90:ec:bc:e0:
                    5b:83:be:87:ce:c6:30:1b:21:f1:d5:7c:cd:70:65:
                    bf:2b:6c:12:e1:ad:07:03:41:32:86:d3:63:5e:b6:
                    de:ff:df:41:d3:13:fb:00:f3:dc:a0:a5:a0:66:93:
                    36:48:ce:91:1f:30:c1:16:00:7c:c1:4b:18:cb:9f:
                    4e:9d:19:d3:6d:ed:d8:53:19:db:04:7d:2e:e7:b2:
                    b9:89:8c:30:1c:4a:80:41:6c:3a:94:18:24:dc:b8:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:64:E6:36:37:48:ED:4F:4C:D2:9C:55:83:C2:CD:72:E0:13:32:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:25:99:cb:d1:8d:fe:f6:cc:fb:23:43:ec:e6:17:a5:94:0a:
         74:8e:95:20:26:6b:9d:76:30:59:91:40:b8:eb:7e:75:03:c2:
         e3:3d:35:68:f1:bc:91:eb:a1:4e:3a:1f:b9:5e:1b:fb:a2:13:
         75:b7:14:a0:4c:f6:4d:58:a6:31:2c:e9:24:39:27:c2:ba:ff:
         9e:1e:69:e1:7d:73:6f:14:8e:70:c1:b6:64:16:af:06:97:61:
         71:5a:93:dd:b3:8f:e3:fd:59:a6:c4:96:9b:9b:96:66:6e:d0:
         c9:a3:27:5d:3b:eb:bc:ce:c6:24:78:d0:c9:5a:71:db:11:ad:
         c8:72:21:e8:ad:95:ca:43:db:83:65:bc:be:fa:8f:a3:ea:fa:
         0a:36:8d:5f:53:33:bd:1d:42:b9:77:e9:5c:69:9f:eb:59:a9:
         9e:60:90:a7:b9:91:e0:bb:a9:8a:f9:df:4e:f9:0d:d0:78:dd:
         6f:a0:22:e3:c1:ff:7d:b8:2d:c6:49:24:2d:87:ba:5c:7b:b9:
         ca:82:f7:22:7d:8e:66:86:c6:1f:df:19:19:2f:42:8d:d3:5a:
         c8:89:7c:df:da:76:6b:09:b2:06:7c:15:da:35:73:4a:24:2d:
         d0:b8:79:50:c2:e9:17:4e:44:12:1f:24:c6:27:c8:76:c2:31:
         a8:38:f1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:02 2025 by rpki-client