Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8c90143f-cf83-3778-b5da-4e3e29770f21.roa
File:                     8c90143f-cf83-3778-b5da-4e3e29770f21.roa (raw, json)
Hash identifier:          Q5uSZMWLElLM5rR9VuXcjAR2qpT0G7yhYoryUO1/EcQ=
Subject key identifier:   62:8A:8F:E0:A7:9A:D9:33:77:2B:81:15:01:3F:05:D1:2E:90:C9:71
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5005400A8E633CA59CBD00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8c90143f-cf83-3778-b5da-4e3e29770f21.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        209.82.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:05:40:0a:8e:63:3c:a5:9c:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=0bfa0930-c786-491e-84c1-88b0cf0ecbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dd:f7:52:a0:85:3f:2d:da:78:69:a6:16:05:
                    4b:8f:62:2d:60:38:b3:e7:70:ab:b3:8f:d1:4d:5a:
                    87:4c:d0:f3:a9:5d:03:cb:f7:30:fa:ef:3f:79:e1:
                    1c:61:90:52:03:8a:3b:de:27:5a:8b:7c:ff:e3:62:
                    93:7d:1d:25:82:67:b6:33:7a:f9:b8:c3:2b:67:44:
                    6c:e8:59:e5:a6:d1:cd:f2:34:99:56:3d:46:8a:98:
                    2d:54:34:95:93:0a:0f:e0:1f:9a:4d:22:6b:0a:64:
                    67:d8:9b:0c:9b:95:bc:2a:b1:ac:5f:8a:ac:7c:98:
                    8b:46:41:7a:1e:22:9a:2a:59:b4:9c:a1:6a:1c:3c:
                    3b:9b:a7:d1:9b:70:40:83:8d:69:b8:7d:14:26:c5:
                    a6:13:50:89:55:8a:72:50:07:3f:d5:32:18:59:bb:
                    25:e7:d3:ba:6e:3b:0b:c0:e0:57:f7:16:0b:bb:a6:
                    9b:f1:82:36:d8:22:93:e2:1f:1a:66:fe:2c:de:39:
                    30:f4:a4:33:eb:e7:88:76:da:7b:85:0e:cd:c1:8f:
                    59:96:1f:31:6d:be:f4:53:d9:da:a4:9e:49:ea:37:
                    d6:18:a8:4d:42:1b:1e:ef:3e:eb:9f:39:22:13:f0:
                    46:65:7e:00:de:53:ba:e3:a9:1f:95:8a:af:68:c6:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8A:8F:E0:A7:9A:D9:33:77:2B:81:15:01:3F:05:D1:2E:90:C9:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8c90143f-cf83-3778-b5da-4e3e29770f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:26:aa:e4:77:61:5d:82:a9:96:58:cc:8a:9a:df:aa:c6:b4:
         eb:d4:78:20:37:b6:69:6e:99:d4:28:a3:da:55:49:d4:3f:3d:
         48:02:5d:ee:f5:15:b7:3f:3c:37:bf:10:7b:e1:f6:0c:8c:5e:
         6b:78:c6:3d:50:7d:fc:cd:97:32:be:f6:20:b9:01:9f:a5:fb:
         d5:77:7f:da:8b:d1:98:53:49:5d:c5:78:b8:8e:6f:dc:da:64:
         37:a5:fa:3b:14:11:61:92:51:af:a5:82:a5:27:9f:4f:2a:02:
         32:72:e0:9d:6c:0e:7b:65:64:79:f6:b1:27:09:6e:9b:c8:a3:
         42:ee:61:f4:fd:ea:09:26:f1:64:9b:40:6f:37:09:8b:c7:3b:
         ce:39:4a:9f:1e:83:4a:c8:3f:2f:95:54:ec:a1:df:a2:a1:66:
         8a:b5:e9:f7:41:bd:f0:40:c3:9b:c0:b9:64:7d:53:c4:fd:b1:
         f7:ba:f7:bf:f7:a8:0c:3c:f6:13:5c:77:cb:4d:1e:92:47:ca:
         20:63:35:ab:b4:ee:82:72:41:ad:71:c6:2e:5c:00:12:ca:45:
         dc:2a:30:60:50:b0:e1:81:bf:9e:ec:12:53:a9:23:32:36:8c:
         e7:bf:c3:f1:41:0e:5f:1e:3c:68:d2:12:9b:1e:ee:a6:a7:80:
         bb:da:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:25 2025 by rpki-client