Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/2332260e-cb50-3fde-a80e-36b7fcfb6360.roa
File:                     2332260e-cb50-3fde-a80e-36b7fcfb6360.roa (raw, json)
Hash identifier:          JlL8+HNaWqQW+0cLoC6Kaqw8DeNjaWvjDDRvmVQ9dq8=
Subject key identifier:   B4:06:44:7E:8D:93:19:8C:40:F5:2D:20:F4:40:5F:14:BB:D8:EE:C1
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858484D758EE6A6A5B7DDF0759700
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/2332260e-cb50-3fde-a80e-36b7fcfb6360.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     26744
IP address blocks:        147.124.232.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:8e:e6:a6:a5:b7:dd:f0:75:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=64ce4ed8-f1bd-4c16-aca7-3bd29e32c162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:35:bc:43:74:00:fb:d0:31:cf:03:6e:f5:
                    b9:da:20:82:b0:75:fa:51:ff:16:73:b9:41:4c:33:
                    09:bf:f5:4a:6a:e1:b8:55:53:69:c4:a0:9b:57:86:
                    07:08:76:66:28:9b:02:55:52:fc:b4:ce:5d:f0:2e:
                    42:86:2d:14:06:0a:40:07:a1:b8:f4:58:b9:23:e3:
                    59:37:09:58:b2:ee:60:50:8b:3c:e7:13:d2:6e:94:
                    10:21:e1:5e:27:05:24:2b:db:4c:6c:1c:17:3f:bf:
                    0d:b5:aa:7b:2a:8d:0c:44:64:70:11:e6:7b:27:cb:
                    e9:46:52:85:0b:d4:d4:fa:63:1c:c6:f8:2b:89:b8:
                    7a:94:fa:36:3a:59:ea:af:d1:6a:e6:8a:5b:2b:25:
                    6b:02:49:e4:a0:17:7f:ab:46:8b:e9:ab:93:e8:a6:
                    b0:ba:dc:4e:a9:c1:0d:ee:f9:77:d2:39:01:a5:24:
                    12:9e:7c:18:ab:60:81:6b:db:a6:00:1e:98:ca:15:
                    50:e7:64:dd:fe:16:6d:7b:76:c5:d1:71:4f:2c:20:
                    34:d1:34:36:c5:3a:e9:a4:0d:d3:20:01:43:8a:f1:
                    75:5e:b8:8a:00:f1:61:fe:86:6f:1e:fb:f0:3e:ba:
                    49:3f:48:5d:3a:c4:d4:82:a9:94:29:0c:8f:53:b0:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:06:44:7E:8D:93:19:8C:40:F5:2D:20:F4:40:5F:14:BB:D8:EE:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/2332260e-cb50-3fde-a80e-36b7fcfb6360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:33:74:1d:6e:b9:53:12:44:19:6f:23:7e:c0:59:d6:1f:4f:
         82:ae:ca:69:6b:b7:3c:b8:9c:a4:d7:af:30:aa:48:be:40:7a:
         69:b3:86:35:b1:75:be:e9:97:4c:7f:48:df:90:57:53:da:5a:
         b6:8a:6b:80:e9:25:18:e6:14:06:5f:6c:ce:fe:f5:f7:f9:5f:
         d9:46:fd:38:0c:16:71:13:6e:99:24:d6:18:6c:f3:3b:10:1c:
         de:19:ae:b2:a7:8e:07:e5:74:70:ca:0b:39:77:62:ae:e0:bf:
         29:42:2e:ee:f5:08:ce:7d:d6:88:93:c1:af:4d:cc:e7:e3:af:
         b5:ea:e6:a5:2d:cb:1e:ed:3f:bd:68:f7:1e:ec:6c:13:b8:8d:
         b2:2e:9a:11:d0:dc:52:9c:56:60:cc:ca:b7:c0:59:be:a2:b7:
         4a:93:53:95:96:50:c8:23:cf:66:81:39:a8:4c:8d:5e:af:96:
         40:86:28:4e:90:61:6b:2b:79:35:53:79:3a:c0:92:5b:bc:f0:
         d1:3f:2d:d2:d7:56:02:4d:be:39:ff:e0:59:db:ea:aa:70:a1:
         d5:a0:e6:f3:63:97:58:c4:4a:cd:b3:85:17:9f:3d:86:2c:61:
         8b:c1:a9:77:63:32:4c:fc:46:6a:62:9e:90:fe:6e:a5:af:88:
         01:e1:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:53:36 2025 by rpki-client