Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6ab7033c-f03f-379d-8674-62b7f45c2811.roa
File:                     6ab7033c-f03f-379d-8674-62b7f45c2811.roa (raw, json)
Hash identifier:          XC5Fh0Qy6rv3+bUioOmQc+qnUFTOD/oY+dV6p0khzNA=
Subject key identifier:   CB:4C:AC:E4:00:15:F7:E2:FC:DB:A1:95:1D:4C:CC:0A:54:22:92:1E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848265FFAC186258E13D360B40C
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6ab7033c-f03f-379d-8674-62b7f45c2811.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     53793
IP address blocks:        209.249.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:fa:c1:86:25:8e:13:d3:60:b4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=b2d3b5c4-ab0c-49c4-94b2-828f25e61906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:c7:65:00:c1:2e:bd:95:cb:14:dd:3d:f7:
                    43:4a:e5:11:2d:b6:51:b5:69:9f:de:7f:25:f2:4d:
                    64:82:53:c0:9b:f0:ae:a1:d9:69:ce:81:a5:44:cf:
                    bb:92:17:6f:bd:e0:03:77:d6:d9:af:0e:fc:cb:c8:
                    01:d4:3d:a4:a1:18:58:17:96:97:78:fc:98:f2:a0:
                    13:68:0f:bf:21:1f:c5:9a:ea:07:05:b8:0d:31:8f:
                    0b:27:07:d0:0c:21:a4:57:ee:05:aa:d4:5e:7c:37:
                    e1:c8:1a:84:a1:4c:67:ab:e5:5e:4f:7b:ed:93:90:
                    c4:c6:d3:8b:d1:ed:02:a3:3a:3a:53:30:65:cc:ca:
                    c5:43:4b:e7:a1:7f:42:21:a4:ab:c4:08:84:f1:45:
                    ff:ec:c5:60:c6:4d:7c:46:ce:f3:32:ea:9d:47:65:
                    f9:07:ab:7f:15:a8:87:27:2f:c1:fd:ae:21:d7:b1:
                    35:3f:e6:5e:ef:3f:be:e7:cf:3e:a0:ef:21:7c:f5:
                    0e:93:0f:d1:72:96:c3:e7:9e:9e:7a:a7:f0:c1:40:
                    43:60:8c:e6:4d:79:36:2a:3c:5d:06:dc:ac:3b:02:
                    36:39:cf:d6:aa:5e:5f:45:78:0b:0b:ee:26:83:12:
                    79:96:aa:82:2d:a9:51:36:7a:e9:92:e1:8a:f3:93:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4C:AC:E4:00:15:F7:E2:FC:DB:A1:95:1D:4C:CC:0A:54:22:92:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6ab7033c-f03f-379d-8674-62b7f45c2811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:ba:60:06:56:0a:c6:25:20:31:61:e4:45:48:5a:cc:8c:
         2d:6a:e2:29:c9:78:02:5f:c5:20:36:8f:33:9f:33:ab:93:df:
         6f:37:be:f1:fe:84:4f:58:40:8a:77:ed:9e:bc:96:55:38:1d:
         a9:7d:9c:58:49:e5:86:2d:97:73:b5:08:66:ec:a5:60:96:b8:
         c0:3f:64:2a:19:5e:d0:41:47:7c:31:6e:ef:f2:38:ba:b0:1c:
         f8:72:cf:4c:da:b4:73:1d:27:76:37:c2:8f:8d:27:93:a3:9d:
         8a:cf:48:f9:95:bb:f0:87:02:0c:a3:d2:99:24:19:4b:79:e8:
         ba:ec:b0:ea:d8:29:8c:20:1a:6d:79:9f:8b:51:2a:b6:47:70:
         5f:e4:b2:f9:f8:95:bb:e3:8d:68:9a:79:62:f0:4e:33:4b:b7:
         30:eb:ec:8e:69:6a:34:c4:e7:e3:ff:68:10:cd:24:69:18:46:
         8b:a0:ea:79:cb:d4:ac:a5:7a:44:39:5f:58:c7:5d:d9:80:bf:
         a6:51:f1:76:f9:19:ed:da:b5:11:0a:5e:cb:19:97:50:da:2c:
         61:f3:63:dc:77:85:6e:b8:6d:40:1d:39:49:81:a4:00:2c:38:
         8b:45:e4:00:c7:13:53:9f:f7:04:77:23:d5:73:6b:51:5a:dc:
         d0:aa:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:37 2025 by rpki-client