Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/84c637c4-d447-3686-b86d-4b8ee34463d7.roa
File:                     84c637c4-d447-3686-b86d-4b8ee34463d7.roa (raw, json)
Hash identifier:          R8TerZvC/rDs9a0hkrzAcsgP5DIpYdghPWaqncHU4wQ=
Subject key identifier:   BF:9C:9E:47:5E:52:7F:62:86:32:86:80:37:BD:22:82:00:AD:F6:04
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848424AD96BA379034B112DBD80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/84c637c4-d447-3686-b86d-4b8ee34463d7.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        147.124.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d9:6b:a3:79:03:4b:11:2d:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=7b989b89-730f-4c1d-8933-36e137ec4cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:63:8b:84:e4:8f:4e:98:48:df:48:47:aa:
                    3f:da:56:0f:8c:df:d1:86:0b:a7:a3:b4:57:e8:1b:
                    9f:f7:31:85:16:d2:15:28:08:bd:f5:51:35:b1:cd:
                    3f:f6:49:aa:bb:e4:86:a6:cc:05:86:ea:06:4c:1b:
                    f8:42:9d:f5:4e:c3:ab:d3:17:23:83:fb:c4:f7:99:
                    fe:18:b4:fb:79:bb:0e:23:3d:80:cd:d0:c6:c5:e1:
                    dd:48:2a:b5:a0:c3:df:93:d1:1c:ba:59:74:0c:53:
                    99:5e:2f:a0:02:d1:5d:78:ce:ce:ab:87:3c:0c:45:
                    2b:2b:6b:03:41:75:ca:9c:37:af:63:6c:88:ea:fa:
                    ad:3c:3a:b9:d2:d9:41:9d:21:98:ae:6b:d7:99:96:
                    20:68:55:96:b1:6d:8f:71:b6:44:cc:d1:35:a5:01:
                    75:e6:c8:72:24:3a:3d:fc:e5:08:64:ae:f8:32:29:
                    6e:07:e7:59:bc:79:a1:1c:19:85:a9:5b:7d:04:5a:
                    e8:0d:e9:6c:a0:b8:4a:67:ce:24:79:43:17:3a:dd:
                    e4:5e:e5:4a:45:1c:58:a3:9e:08:10:91:2b:7a:d1:
                    83:f8:9f:7f:22:ab:cf:f7:b7:12:b7:9c:d1:4e:2a:
                    b5:2c:9b:b1:23:d4:7e:5b:f6:84:6a:24:a8:70:46:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9C:9E:47:5E:52:7F:62:86:32:86:80:37:BD:22:82:00:AD:F6:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/84c637c4-d447-3686-b86d-4b8ee34463d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:92:29:b1:12:c2:8c:50:83:80:6c:4d:d4:d9:48:14:bc:
         44:3c:c5:d2:08:22:f4:fe:33:d7:d6:25:7a:11:0d:66:07:9c:
         55:85:30:22:b8:52:83:82:96:e4:5f:ad:ca:da:6c:62:12:ec:
         6a:b4:56:b1:d3:0a:5f:da:c5:bf:62:6c:c0:d2:75:85:04:24:
         a0:47:34:e4:40:4c:8c:14:a0:ac:0d:9b:86:98:7b:21:01:60:
         95:b6:ad:b5:90:8d:10:e0:89:4c:48:df:0e:a5:8a:69:9c:5f:
         dc:bf:68:e4:67:6e:8e:86:5b:a1:00:4b:1f:b7:b9:0e:05:ea:
         3f:d5:12:79:a8:ee:c7:f7:6b:86:61:29:53:11:81:ad:ec:04:
         f7:1a:14:f2:bd:b9:9d:14:38:26:ba:ed:64:b5:6b:cf:20:b6:
         34:71:a8:10:6d:2a:54:2f:e1:8f:23:ed:db:fa:44:d0:4b:70:
         7c:29:be:98:81:ac:40:dc:7c:99:fe:29:ef:cd:5f:c5:1f:ec:
         8e:d4:26:28:45:11:6a:ba:89:2b:f7:d4:ff:57:fd:10:92:fa:
         7a:07:0b:55:9c:9b:2b:04:df:08:47:a3:8f:02:28:b9:86:d0:
         44:5e:10:c6:73:02:46:9a:c8:6d:ee:d1:c0:f6:cd:94:08:9a:
         da:42:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:14:11 2025 by rpki-client