Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/82a3acd7-c1c3-3233-8148-3df8bef39752.roa
File:                     82a3acd7-c1c3-3233-8148-3df8bef39752.roa (raw, json)
Hash identifier:          c/kmd0p6H/UEmNs0NrNnVyylLYijmcNkQiPpXzCK1oI=
Subject key identifier:   61:F7:44:96:BD:57:13:93:23:B7:31:A4:E3:CD:83:50:E9:B7:BB:DA
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848265FF164E7BF0AC6E58F95A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/82a3acd7-c1c3-3233-8148-3df8bef39752.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     40920
IP address blocks:        209.66.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f1:64:e7:bf:0a:c6:e5:8f:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=6e7a7f81-cb86-4c94-b0ef-b2bd38c63ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:f8:da:27:cb:ff:e0:74:6e:28:fe:0c:65:
                    d1:c9:ad:1d:a5:45:f2:ae:40:fe:b6:89:8a:66:22:
                    8a:a8:8a:17:d1:95:ff:cb:bb:28:d6:a4:34:93:36:
                    dd:71:55:40:3a:15:aa:90:b2:2d:19:08:1a:05:45:
                    b8:74:c1:b0:1c:cb:e7:1a:22:51:cd:e5:84:c9:1d:
                    6b:56:40:74:35:73:f5:84:d3:0e:cc:32:c5:d2:26:
                    ad:d0:17:b9:98:e0:c0:1f:61:df:75:d6:e5:2b:39:
                    05:05:b5:af:b3:a7:2b:55:d6:96:f4:cc:eb:05:e9:
                    34:5a:33:94:56:be:9a:b9:5e:1c:58:a6:33:a6:9d:
                    17:72:8a:c8:9f:44:70:16:25:72:4d:1a:e5:0f:c5:
                    68:30:9f:66:1f:aa:29:a3:a6:5c:a4:ec:a2:d9:14:
                    48:c1:24:34:ce:c5:9d:6a:c3:7a:2d:d3:d0:48:c6:
                    1a:f5:07:b2:e9:bd:38:70:df:40:9d:da:fc:f4:cb:
                    75:0a:18:56:52:13:5e:c5:20:c5:9f:4d:24:b4:7f:
                    12:01:f1:23:84:85:22:72:8b:6c:d7:bd:8d:52:85:
                    d2:38:de:ac:24:f9:bb:6e:7e:4c:fb:06:49:51:6a:
                    49:28:d1:88:bc:a9:97:56:6d:bf:9e:1e:bf:7d:1b:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F7:44:96:BD:57:13:93:23:B7:31:A4:E3:CD:83:50:E9:B7:BB:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/82a3acd7-c1c3-3233-8148-3df8bef39752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:b3:6d:c5:84:6f:2f:9f:c4:37:e4:fd:bd:7d:d5:a7:65:
         ae:f0:e3:18:06:cc:b8:56:7d:16:67:72:bd:71:2d:ad:9f:23:
         35:92:c3:45:4a:2e:ef:73:27:16:5f:69:4b:00:1d:bc:a7:9c:
         f9:34:88:19:a3:a0:ef:90:31:e4:20:5c:02:c9:58:46:fb:09:
         43:68:66:28:5a:db:e6:f5:59:96:06:b7:08:ba:53:d7:c6:0b:
         6f:b0:f7:ae:6d:f7:06:f3:4f:7d:43:21:e4:1f:c5:a9:19:fc:
         7e:9d:37:54:f0:d0:d0:87:7d:74:2a:a1:89:a7:68:37:36:c3:
         4b:c7:f6:93:db:e3:57:4b:dc:ac:5d:fb:f3:b4:ef:a7:65:36:
         df:c3:9a:d3:d7:2e:bb:d1:41:a4:c8:85:53:a8:78:cb:aa:9b:
         6d:9d:16:6d:cd:5a:4d:a6:f9:ca:4b:36:20:fb:f4:68:bf:19:
         aa:54:0c:96:43:38:5e:69:92:5b:9b:a7:f7:a3:94:35:b0:77:
         17:5a:0f:12:b1:77:e8:9a:81:de:f7:8b:e2:aa:c6:1f:9f:5c:
         0a:34:67:20:2e:23:00:3e:2d:31:8f:6b:26:49:1a:11:9f:69:
         4a:d6:79:4b:8f:83:32:a4:81:a1:d6:2f:e8:65:10:4c:a3:b9:
         a0:31:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:41:37 2025 by rpki-client