Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ca184f7d-985d-335e-bd7f-97bc89718e2e.roa
File:                     ca184f7d-985d-335e-bd7f-97bc89718e2e.roa (raw, json)
Hash identifier:          vqFHYUQtpBrOqMGE76XvLpdX3Ja2NBG6kZ9pJBhziuE=
Subject key identifier:   22:19:D9:63:09:56:DE:BF:B6:CD:35:34:40:58:0C:01:F6:26:A3:EC
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848265FF8DCECAAB313A5DA3080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ca184f7d-985d-335e-bd7f-97bc89718e2e.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     19955
IP address blocks:        209.82.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f8:dc:ec:aa:b3:13:a5:da:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=d7681de4-f49c-41c9-b27f-d18bf5387fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:0d:68:82:c1:ea:b3:50:dd:c1:f8:df:5a:
                    fc:0b:7c:e7:40:32:cb:b7:d6:1b:b7:da:66:fe:59:
                    99:01:59:e0:44:ce:4b:a3:d7:a8:6c:dc:24:8b:97:
                    95:5e:51:51:e0:43:4e:a9:d7:c3:2f:b5:b4:9f:29:
                    51:63:6f:6a:bc:7f:b4:e1:e5:c1:a9:14:47:63:77:
                    70:0c:66:20:f8:a3:f7:a9:73:d6:67:b2:3e:b4:d6:
                    a6:33:88:b7:b8:cb:5f:2d:f2:d4:22:14:6e:45:26:
                    a1:03:a4:67:dd:3d:5c:73:02:57:a7:10:b3:7b:49:
                    a6:5b:4c:a5:f5:a9:34:02:56:78:2b:3b:0a:be:28:
                    49:f5:c6:78:46:b9:62:3e:36:43:4d:dd:3b:9a:73:
                    39:91:14:fb:83:21:12:82:fa:1e:53:de:24:d4:d7:
                    ed:39:80:d0:b9:1b:45:a4:aa:b6:7a:f1:85:23:82:
                    23:71:97:1e:87:81:6b:9e:60:81:aa:b1:4d:fa:89:
                    27:6b:ec:7c:b0:7e:98:a1:67:34:8d:61:b2:3e:f4:
                    5f:02:26:30:b2:68:f4:97:44:1a:af:2a:81:ef:cd:
                    e1:54:f8:a1:12:0b:d5:9c:15:23:28:7f:c1:d3:72:
                    27:f3:af:9c:f8:c6:39:ba:67:39:5e:6b:53:45:86:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:19:D9:63:09:56:DE:BF:B6:CD:35:34:40:58:0C:01:F6:26:A3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ca184f7d-985d-335e-bd7f-97bc89718e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:0e:15:e8:9b:87:08:ff:21:9f:17:ae:69:ec:87:63:f8:2a:
         df:fc:a7:3c:65:cb:29:b9:d1:4e:9d:22:2a:a5:96:68:13:0c:
         f4:03:09:89:e6:8a:e8:4e:20:2c:27:f5:ef:3d:13:89:bb:d9:
         80:b8:95:63:4f:f1:bb:53:f8:c9:6b:fd:e8:f0:78:16:aa:d4:
         f1:c1:fb:64:ab:0c:3a:55:2f:7f:ff:ac:df:43:8b:da:04:15:
         83:0a:01:29:fd:0e:94:70:e4:11:74:69:3f:97:22:2f:fd:0c:
         a8:2b:d3:45:ff:ce:67:a3:d8:18:7b:a1:b6:d5:8d:39:84:e8:
         e2:11:ba:b0:38:13:ab:eb:9c:03:98:96:64:7a:f4:c1:29:06:
         29:83:9a:4d:af:2a:43:e0:ba:13:5c:53:62:e3:bf:44:5f:cc:
         cf:90:0a:55:56:d8:7b:c6:f3:3f:07:27:4b:14:89:c4:c2:6f:
         1e:67:27:2d:c0:d8:02:15:5c:cd:0d:d0:5b:fe:51:44:65:ee:
         6a:c2:e9:82:9d:de:cf:f9:96:1d:ec:a6:c1:d9:62:f3:6b:52:
         d7:c4:66:58:4a:ac:56:05:74:c5:68:36:1d:09:04:d2:4b:14:
         8f:4a:18:bf:ad:2d:8a:89:21:a2:f6:c7:1d:9a:58:7f:42:4b:
         d5:b8:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:31:20 2025 by rpki-client