Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f363754b-abe0-3eb6-b85e-b6e76fe07106.roa
File:                     f363754b-abe0-3eb6-b85e-b6e76fe07106.roa (raw, json)
Hash identifier:          nRL2ZRVNZgIBWwbADc2IQC5OdSLWs0LZaF6gG0i/YIA=
Subject key identifier:   3F:DA:AE:3E:36:4C:87:A2:2E:33:FB:AE:DE:D1:D6:A2:86:B8:CC:9A
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B50068A2A186612ACDEC1C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f363754b-abe0-3eb6-b85e-b6e76fe07106.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        209.146.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:06:8a:2a:18:66:12:ac:de:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=6f81de7a-4b15-46d1-b0f2-4248bbc4fd40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:38:37:68:00:eb:69:9b:52:a4:59:2c:df:
                    51:c6:f3:bd:9f:56:c2:b3:26:15:33:9c:30:ce:c8:
                    5b:f3:b6:1f:25:e0:40:61:23:94:81:a7:32:7f:0e:
                    46:d5:00:9a:0c:58:35:94:43:54:52:54:12:1d:74:
                    ef:f3:df:09:08:39:5c:c8:3f:cd:4a:a2:d2:34:da:
                    6c:dd:46:f0:7c:2e:9a:13:5c:14:bf:51:d0:42:38:
                    90:bd:57:fd:9c:49:a0:eb:1d:0b:c9:16:e0:16:56:
                    ea:c5:a1:66:fd:43:67:fb:bf:dc:b3:42:28:ca:8a:
                    b3:24:7e:05:0b:42:0b:7e:33:18:e8:9f:17:2d:50:
                    7d:1d:27:b4:ae:9b:a6:53:a9:84:81:f2:69:38:3d:
                    5a:88:cc:79:98:ed:30:c3:81:2d:16:e1:79:09:79:
                    64:f3:9d:10:5e:ec:dc:51:de:70:4f:47:00:30:20:
                    6e:6f:1c:1f:b0:af:a7:e9:01:16:ff:a8:11:f7:a5:
                    10:ad:0a:c7:e0:4b:c4:63:fd:91:95:48:f6:e8:f6:
                    39:2b:f2:7e:49:36:1a:18:f3:f0:21:56:56:39:18:
                    61:e0:f7:b0:76:4f:d6:70:49:d5:a1:cb:ce:4c:cb:
                    1f:32:6a:6d:14:b1:87:1f:d4:70:8a:2f:33:9d:19:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DA:AE:3E:36:4C:87:A2:2E:33:FB:AE:DE:D1:D6:A2:86:B8:CC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f363754b-abe0-3eb6-b85e-b6e76fe07106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:44:ac:c5:64:b9:18:e1:83:79:01:36:2c:66:ae:06:a9:
         b2:7d:90:1c:47:ed:27:3f:fb:ae:94:53:ec:12:18:19:18:e3:
         60:76:19:55:42:7b:74:7f:07:67:16:0b:38:75:69:78:70:5c:
         16:04:1d:d4:c3:f6:e4:8a:0f:2c:0f:1e:bc:50:94:77:5e:0a:
         c9:f4:71:5c:fa:b1:72:f7:ff:0d:68:ae:5c:70:c6:2c:ac:99:
         e5:40:87:44:88:0b:d3:12:58:e6:36:44:8e:0e:d8:3d:be:66:
         5c:e1:56:d6:ae:c5:e6:18:00:08:80:8c:56:a0:74:bf:1f:fd:
         2a:6d:a3:38:0e:38:ad:03:8b:ac:6c:eb:22:c2:7d:7b:23:43:
         90:3a:31:4e:00:e7:21:22:f4:5e:e1:f0:62:1d:08:c7:a1:08:
         bb:66:19:02:a1:ce:85:c3:e5:5b:93:79:45:5a:57:e6:bc:ef:
         9d:b0:66:3f:7c:29:5e:17:eb:a1:ae:d2:e7:e4:bd:ee:ca:de:
         bb:f6:0d:ba:e5:df:c2:c8:af:71:db:76:cd:65:a3:b8:1c:c3:
         5b:40:30:f5:e3:56:01:21:0a:5c:c3:fe:95:64:dc:b5:c0:a2:
         4e:f8:63:3d:0e:93:b5:e4:00:bf:51:b9:80:29:4a:8d:01:b7:
         d4:5f:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:56 2025 by rpki-client