Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa
File:                     5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa (raw, json)
Hash identifier:          SSgOIhCJeWTpazPHWHl6aSHTz877YcWgrUK1OHML1Mg=
Subject key identifier:   9F:A7:F7:38:12:E6:DF:5A:BD:A4:11:A4:F5:DC:5D:36:59:46:AE:24
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F43285847FB1A219AF0335B7935877580
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     397422
IP address blocks:        67.210.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:21:9a:f0:33:5b:79:35:87:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=33f90adc-a774-4227-ba86-b80cddbfca66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:ef:93:4e:fb:18:59:d9:4c:ec:3c:a4:b4:
                    05:f7:8f:0e:45:5a:4c:e7:58:80:0d:cd:f2:1b:97:
                    7c:3e:ec:07:8b:3f:1b:6c:11:43:6d:1f:6c:91:be:
                    85:a8:99:e3:d8:7f:6f:39:d6:a4:a2:f6:40:43:67:
                    f4:8f:6d:d9:90:48:3e:c1:96:ee:0a:af:33:c8:36:
                    18:ec:2c:04:ae:f5:39:7d:91:3b:0e:16:e2:5c:9c:
                    2c:2f:2b:ad:5b:8e:8a:0b:b5:e7:01:54:e6:eb:82:
                    96:91:73:3e:2f:f8:5d:04:78:b5:6d:cb:8d:81:f0:
                    88:36:8e:17:30:d6:96:28:1f:4c:89:33:b5:60:89:
                    5e:4f:31:7d:de:f1:27:6f:2b:46:e3:9c:58:a3:d8:
                    70:db:ed:43:58:cc:60:e0:4d:3c:79:f3:58:7d:69:
                    1e:c8:f9:11:77:ed:58:d6:12:81:05:3d:7a:f5:7a:
                    e6:32:f4:4a:d7:ce:0d:47:88:11:d9:18:38:b7:a0:
                    57:8f:61:a8:61:cf:64:69:04:3e:13:b3:f5:10:b2:
                    92:8f:b0:9e:e0:34:8d:bc:90:01:4c:f7:dc:38:9b:
                    8f:a8:61:82:48:d9:f3:85:e8:f3:bc:4e:18:3d:83:
                    62:ed:1c:b1:60:b6:de:6c:70:02:4e:9b:e2:dd:e3:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A7:F7:38:12:E6:DF:5A:BD:A4:11:A4:F5:DC:5D:36:59:46:AE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:39:5a:2c:71:70:20:67:17:0e:94:25:8b:d6:db:4a:49:0c:
         09:11:41:d4:40:d1:57:36:e5:0c:38:92:e3:f5:cc:b8:43:30:
         45:e2:62:40:1b:55:63:cb:7c:83:4b:3e:05:15:91:ce:85:c6:
         6d:cd:d3:af:b8:9e:5b:d2:28:98:6a:89:c8:49:c8:60:6d:83:
         be:ce:2b:08:72:e0:21:db:42:cf:40:6f:44:d0:59:b8:cb:bd:
         4c:85:b0:0a:cf:9f:67:53:7d:b5:2c:9f:e1:84:1d:47:d9:5a:
         9f:e4:b0:c4:ca:2f:1b:27:8c:25:98:97:1e:f2:af:da:07:25:
         ee:c3:40:3e:9b:52:9f:38:88:13:fc:6b:e0:27:5b:63:f6:0f:
         a2:ea:75:9e:af:df:0a:49:5e:27:2d:f5:bc:3e:da:fc:bf:7d:
         b9:fa:22:9a:30:37:ec:69:e9:2e:10:67:c7:fa:73:d2:2a:41:
         bd:99:2f:e7:fc:1d:27:34:75:89:52:36:e9:9c:2f:c9:f6:09:
         09:09:0d:43:06:6f:a4:fc:7f:ee:1a:5e:b1:64:a0:f1:ee:da:
         89:48:d9:79:17:c9:22:0a:00:16:5e:69:05:6b:0f:ea:0d:5e:
         6f:98:b7:e4:01:f7:01:f4:89:9c:b6:96:54:18:35:35:33:79:
         a7:6a:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:35:47 2025 by rpki-client