Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa
File:                     41f68333-52c9-3f36-ba59-589d37e6bdf7.roa (raw, json)
Hash identifier:          QqlMO+3siSGESrx/S2ow664ryO7Q3QhQsnEbaVTrbrw=
Subject key identifier:   53:28:A2:1D:3C:9C:91:A9:A7:5E:D3:D3:ED:60:D7:0F:61:13:C2:A0
Certificate issuer:       /CN=edecac80-d7c3-48ad-8738-ec98e8c08265
Certificate serial:       010D0C9F43285847FB1A26122F65B1700D67BE08
Authority key identifier: 2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     394475
IP address blocks:        209.35.176.0/24 maxlen: 24
                          209.35.177.0/24 maxlen: 24
                          209.35.179.0/24 maxlen: 24
                          209.35.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:26:12:2f:65:b1:70:0d:67:be:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edecac80-d7c3-48ad-8738-ec98e8c08265
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=883e3e33-8d49-4383-b12a-da1d45f5a00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:68:b4:71:d7:5f:f3:59:c4:c0:7b:f7:2e:
                    9f:2e:80:8b:cc:02:b0:a8:55:b9:4e:2c:e6:82:ba:
                    2e:8b:ff:97:6f:31:20:4c:42:aa:10:ad:9a:f4:e6:
                    20:68:11:7e:01:1f:e4:51:9d:67:66:e0:2e:41:00:
                    fe:d2:7c:36:bd:69:50:6b:9a:c3:52:ab:e1:83:80:
                    0f:c5:8b:1f:22:3e:66:eb:a4:33:12:c0:19:b1:5a:
                    f9:3a:72:d1:c1:a5:bc:ac:1e:7a:d3:80:5a:70:05:
                    12:50:9c:9f:66:4b:04:77:35:ff:58:c9:f0:c5:35:
                    45:dd:6d:ad:10:65:b3:da:59:e2:7b:e6:35:25:d8:
                    38:aa:e3:13:bf:da:20:69:fe:c8:6b:88:20:a6:17:
                    6a:1f:43:fc:af:27:21:14:34:3f:fa:8d:fa:91:a5:
                    4f:74:90:c1:11:64:12:55:88:12:22:86:be:4d:3a:
                    76:1c:81:8e:2d:24:9f:a0:d4:4b:60:a5:6c:86:56:
                    74:ca:f7:ca:2e:ee:2c:d4:2c:76:10:50:56:b6:6b:
                    84:a6:ab:00:86:af:59:ff:7d:14:9e:fa:70:43:1c:
                    40:09:da:c6:96:f6:60:18:90:37:5d:f0:b8:19:23:
                    3d:89:88:cb:09:c7:f0:27:32:a8:8f:27:ad:b6:38:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:28:A2:1D:3C:9C:91:A9:A7:5E:D3:D3:ED:60:D7:0F:61:13:C2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.crl

            X509v3 Authority Key Identifier:
                keyid:2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.176.0/23
                  209.35.179.0-209.35.180.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:68:dd:75:4b:52:02:8a:f5:30:e7:12:f4:a6:c3:ab:80:
         26:92:77:35:06:ed:d8:43:e7:b1:62:9f:79:4c:7f:d4:87:54:
         af:b4:25:e5:28:9d:07:1d:de:71:c1:47:bf:b8:45:eb:20:d1:
         15:a7:3c:9e:73:41:1c:6b:1f:54:0e:7b:35:f0:62:ab:fe:5f:
         78:e4:d6:3e:8c:9d:05:1f:b5:86:bf:44:05:c7:cd:dd:4d:4d:
         7a:fb:62:b2:74:37:15:91:cf:a4:9f:c4:45:e7:5a:e9:16:9a:
         df:4d:2c:ee:1f:cd:83:63:fc:d6:13:d8:c0:a9:d1:59:26:df:
         f2:ed:1d:d9:15:04:1e:ff:3a:40:02:ad:0d:41:d7:e2:4e:82:
         06:e2:9b:b5:94:92:9f:c3:b9:67:01:9a:83:3d:e1:c9:95:0f:
         0e:ec:29:b0:64:3c:8d:79:9e:5c:61:a9:9b:f2:aa:10:7b:6c:
         a3:f2:81:3e:2b:f4:ec:58:c0:b4:be:82:ac:56:31:8a:59:0a:
         98:08:82:05:9c:db:f5:8d:ab:f7:eb:1a:82:b3:40:84:7a:89:
         04:3a:5d:d6:df:87:0b:a4:ef:04:b1:a6:59:6e:ff:41:70:82:
         07:55:ae:1e:a4:37:d5:01:df:d9:96:94:23:6d:95:4e:f9:3c:
         b1:c2:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:19:45 2025 by rpki-client