Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7e086018-9918-3c17-ad77-3c9fddb44225.roa
File:                     7e086018-9918-3c17-ad77-3c9fddb44225.roa (raw, json)
Hash identifier:          UEAGcex2+xcSBEgwykSQxO0vj+dwP2L2K33psq7Gvbk=
Subject key identifier:   5E:96:0E:0B:1A:02:B6:23:4D:2A:01:DC:0B:43:96:44:E1:70:86:C3
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285847EFEF8C0E3F181790C13ECE80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7e086018-9918-3c17-ad77-3c9fddb44225.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     29731
IP address blocks:        216.123.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8c:0e:3f:18:17:90:c1:3e:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=d1e71d77-4940-48d5-887d-8969f5f4267c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:f9:8a:c8:c8:27:d7:75:0c:88:c1:0b:d0:
                    3c:69:ce:9c:28:f4:c4:f1:83:d6:46:51:66:18:1f:
                    e8:79:39:61:b1:07:c6:23:d4:22:c1:86:7e:65:fc:
                    6d:ab:1e:c4:c9:e7:df:dd:3a:61:5e:ab:be:ed:92:
                    0a:c2:a9:43:40:f3:34:aa:22:af:a0:3a:a4:2e:2a:
                    85:87:4b:58:22:ab:f3:a1:f4:0b:4a:ac:5e:99:5b:
                    20:43:fb:99:9e:4e:ac:b4:8c:4d:ab:3a:f5:11:47:
                    56:8d:bc:fd:d2:85:23:05:dd:2a:a0:16:d7:d2:d9:
                    3a:45:df:b8:d2:37:c4:f9:d3:f1:2f:d5:f7:22:ff:
                    10:4c:43:15:51:2b:ee:33:6d:f9:80:3e:90:84:ea:
                    ab:b4:b4:ed:f1:7c:bb:9f:dd:57:03:d5:09:be:e3:
                    06:a8:27:15:b3:5b:b6:c8:dd:54:62:09:1d:5b:9a:
                    69:a3:33:5f:48:72:7e:1e:51:e6:fa:53:6e:2e:b5:
                    c9:c4:35:20:61:39:8d:cd:42:d1:eb:ce:5e:4e:a0:
                    c1:a4:21:61:6a:72:c1:db:78:c2:30:b4:ba:4c:94:
                    6b:39:02:ed:e9:59:c7:d1:c5:09:9e:3d:8c:0c:bb:
                    2d:bf:be:4d:d0:e4:87:93:06:d6:86:82:16:76:20:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:96:0E:0B:1A:02:B6:23:4D:2A:01:DC:0B:43:96:44:E1:70:86:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7e086018-9918-3c17-ad77-3c9fddb44225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:a0:86:c3:d7:40:70:56:0c:cc:3b:ed:62:b8:d4:a4:df:
         74:50:e9:47:5d:50:d5:5c:5e:58:ad:11:76:f7:3e:d7:c0:94:
         1b:46:56:11:e0:90:89:9a:dd:02:49:70:15:ef:89:35:63:f6:
         1a:85:75:1e:97:ff:9f:29:f1:e7:60:dd:a8:b3:44:ea:e4:39:
         d5:d7:13:3c:fd:3f:d0:3a:73:11:2d:a9:b9:b2:5e:b4:da:6a:
         9a:fa:02:5c:cd:6a:14:f6:27:3a:3b:e4:cc:eb:c6:1c:29:72:
         1a:5e:f5:ab:53:ff:fe:b9:b3:62:d2:47:5b:87:91:ee:03:47:
         ee:e5:bd:c6:4b:74:16:6e:40:aa:95:4f:78:e3:cb:0e:3e:d1:
         a0:4f:12:6b:39:d0:e7:35:eb:bf:74:e5:fe:f6:0b:f5:d0:6b:
         ba:3d:f2:93:fa:61:a1:b2:8c:6f:75:83:cb:35:d7:55:a9:07:
         58:fa:30:98:ba:c7:40:64:c1:52:f0:52:34:fe:71:ed:68:98:
         eb:53:b5:a0:c2:6b:59:65:03:d5:4c:26:9f:ba:18:74:ba:ca:
         91:c2:51:ba:7b:cd:24:42:cf:53:eb:7f:7a:de:c7:de:67:ce:
         1e:e2:c6:b8:2a:fc:bb:47:9f:44:5d:0a:3f:69:a2:a7:a0:28:
         b0:fb:a4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:32 2025 by rpki-client