Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/17f19ab6-a1b2-33e9-9c93-70dd528f9072.roa
File:                     17f19ab6-a1b2-33e9-9c93-70dd528f9072.roa (raw, json)
Hash identifier:          9jWe9Ml+cJSPMh88C4/vlFzRBVURge3XboiGYueho2E=
Subject key identifier:   55:25:38:52:5A:5A:7F:3D:A6:48:27:9E:C8:61:7E:9F:F4:3E:10:BA
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285848424ADFDBA23DF2261540BC00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/17f19ab6-a1b2-33e9-9c93-70dd528f9072.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6461
IP address blocks:        198.100.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:df:db:a2:3d:f2:26:15:40:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=f9e003f2-9de2-4668-bd7c-0932050915e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:7b:d4:90:c3:bd:b6:d9:4e:ca:c9:52:a4:
                    73:a8:67:b2:60:e5:dd:4a:99:8b:5b:d2:ec:da:0d:
                    92:c8:47:84:84:5a:a7:1a:db:c2:c2:08:b0:5a:ea:
                    2c:2a:cf:3a:1b:06:de:ad:b5:a5:a6:a6:67:23:a4:
                    51:e9:de:00:0a:38:a9:ae:3a:b5:5e:9a:4c:52:a0:
                    6b:4d:7f:f0:ce:b0:5c:2d:b7:b0:00:74:82:09:00:
                    2f:66:ae:79:20:eb:a7:b2:5e:ac:9d:4b:37:aa:61:
                    9f:9d:ea:53:e4:e9:e2:a7:e1:18:47:8a:f7:be:9c:
                    a0:54:8b:6a:ee:43:7e:da:7d:74:b4:c6:c0:82:cd:
                    fb:cb:6c:62:6e:9f:6a:d9:b5:40:15:69:74:03:68:
                    8f:ad:a1:f0:35:e2:f7:8a:f2:dc:41:61:a1:73:7a:
                    16:0f:74:15:c3:ce:04:cc:34:60:a7:70:95:10:2d:
                    2a:ca:cd:72:30:8f:fb:de:81:dd:d9:20:30:77:b3:
                    3f:b8:fc:77:0c:01:db:9b:40:8d:58:e7:cc:84:37:
                    2f:ff:56:1e:43:d2:e4:0f:38:95:52:b0:b3:4d:18:
                    28:33:4f:4a:fc:ec:57:3a:c1:58:93:d7:9f:13:35:
                    1a:e6:73:a5:50:ee:b9:33:93:19:44:8f:d0:96:f4:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:25:38:52:5A:5A:7F:3D:A6:48:27:9E:C8:61:7E:9F:F4:3E:10:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/17f19ab6-a1b2-33e9-9c93-70dd528f9072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.100.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:75:d2:9c:db:89:17:ae:84:15:04:c5:73:29:b4:01:21:
         11:9e:33:f2:00:12:75:03:a3:85:2b:49:0a:e2:5d:4c:fa:5b:
         20:3b:c9:02:7e:df:19:9b:b9:fc:bb:c4:79:99:79:f5:ef:ff:
         12:f3:fe:66:4a:ab:22:aa:91:e1:0d:24:9f:50:a1:9e:04:1d:
         e4:4f:6a:5b:80:e0:65:09:1f:9e:b2:44:20:b8:86:aa:30:9d:
         a5:56:98:5d:3e:7c:b1:74:64:f0:1c:21:78:49:ba:e0:dd:50:
         91:f9:68:3c:83:42:93:af:b7:68:3c:96:da:2a:66:5e:67:66:
         ca:16:0f:0f:f9:2b:6a:6d:cf:f4:91:50:b8:bd:93:69:28:d7:
         4f:6c:27:26:75:6d:86:f8:ea:11:37:38:f4:7d:46:4c:f0:c1:
         30:76:63:11:43:9e:63:a7:02:fb:2a:88:8a:8a:5f:96:b2:02:
         d8:e2:e4:cb:c2:ed:31:ba:ae:3f:20:c6:47:78:d8:8f:d7:d7:
         31:b6:dc:64:79:54:fc:41:7f:5f:64:3e:bd:6c:60:72:8b:4f:
         a5:70:d4:b2:3e:c8:30:34:db:01:ce:6e:a7:13:46:3b:2e:28:
         aa:4b:e5:6c:6f:cb:15:cd:a9:c2:b3:20:07:95:12:01:e5:c1:
         46:2c:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:16:40 2025 by rpki-client