Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
File:                     d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa (raw, json)
Hash identifier:          lkYaDtosaB2dOaoWgQRT1H7/eL5DHx5cowPqqm08oho=
Subject key identifier:   5F:4A:78:7A:3C:DA:75:D0:08:4D:B6:D5:6A:B1:D4:48:F9:FF:E4:59
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858484D75977D703ED87395765780
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     26744
IP address blocks:        206.180.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:97:7d:70:3e:d8:73:95:76:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=b55a04d4-b351-4b44-8c6a-d92e28698241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:3c:e5:55:9e:5f:a4:77:7c:24:5f:12:12:
                    59:d0:00:17:bf:ad:51:7b:95:a2:b5:99:f3:5f:94:
                    5f:4c:27:ae:6c:79:fe:ad:18:32:f4:17:66:59:ba:
                    7b:db:44:7d:e7:62:93:45:2e:5f:7f:59:93:43:26:
                    7f:0e:59:20:39:04:58:f9:17:98:40:20:49:73:4a:
                    08:b7:c0:d9:c5:fb:71:6f:21:36:e3:d9:2c:bf:40:
                    1c:27:5e:8f:11:71:6f:c9:25:a6:36:ab:63:d9:23:
                    24:6a:33:52:9f:3e:c0:d7:57:b5:fd:12:fd:00:cc:
                    07:5d:a0:5f:77:89:dd:36:26:c7:e2:75:f4:d1:aa:
                    d4:3e:7a:84:3d:81:21:a5:ad:74:5c:83:6a:51:7c:
                    5c:1e:de:65:23:42:68:d4:c5:84:05:7d:d9:7a:98:
                    53:98:2a:18:35:4c:bf:00:53:e1:db:cd:00:aa:46:
                    5c:de:d8:b3:07:bf:75:15:35:ca:e0:7f:f2:66:bf:
                    21:1b:b5:45:67:9a:d6:23:23:3e:e3:5c:32:29:a7:
                    d5:10:7e:ab:e0:4d:3e:8b:a5:44:79:a4:1b:28:6c:
                    d5:7e:92:93:28:61:ad:22:71:dc:09:50:a7:07:b8:
                    e4:f6:cf:28:a9:11:42:a2:e5:31:ab:3a:5d:80:c3:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:78:7A:3C:DA:75:D0:08:4D:B6:D5:6A:B1:D4:48:F9:FF:E4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:66:d5:a2:e9:9e:bf:4e:14:42:6f:c7:6f:20:ed:ec:84:b3:
         0a:54:d6:ff:2d:0b:f7:01:3c:6c:37:af:05:c2:ad:f8:e1:fa:
         6e:db:72:07:b9:38:5b:b2:71:5d:d5:9e:b9:a5:fc:e8:cf:c4:
         ce:bd:88:98:d5:fc:c5:cc:1e:8d:be:b3:30:2e:f0:49:6e:94:
         60:39:10:dd:6d:e4:ba:a2:52:eb:d8:f5:ef:67:ed:8d:b2:17:
         39:2d:78:78:04:d6:93:76:44:34:c1:0d:31:38:d8:8f:f4:64:
         9b:22:61:52:47:c9:ed:44:91:9d:e0:d7:0a:27:92:43:8d:65:
         4c:22:df:42:b7:e0:55:41:31:5a:7d:1b:59:da:d8:ae:4e:ab:
         7a:22:84:56:cc:ad:26:02:75:fc:f7:4d:6f:08:1d:56:71:c2:
         bc:b2:af:b2:86:d1:41:47:6b:b8:d0:cb:bb:5f:69:30:1c:43:
         d9:f8:6f:e9:a3:3d:c0:46:1d:60:1b:b0:7d:04:f8:33:c3:da:
         48:af:64:4e:74:b2:9c:c1:56:29:74:23:3a:20:cf:16:21:47:
         f8:ef:24:4a:f3:bc:9c:62:d8:24:1e:4f:08:d8:64:42:28:f0:
         c5:25:2f:88:83:f1:55:20:76:49:be:fb:92:44:07:22:7b:9f:
         3d:9d:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:28:00 2025 by rpki-client