Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6ea3d598-2986-3e19-91cd-cc291f8a3222.roa
File:                     6ea3d598-2986-3e19-91cd-cc291f8a3222.roa (raw, json)
Hash identifier:          JdKj2nah3Fun5oveaUVrXY8buzhyUbKP4dNYFB7AK80=
Subject key identifier:   AD:B8:32:D4:84:D2:B2:1D:3A:58:C0:21:0D:34:9A:06:92:83:B7:4F
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285847E8F4CBF27A409DFA4DB31198
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6ea3d598-2986-3e19-91cd-cc291f8a3222.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     16509
IP address blocks:        168.225.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cb:f2:7a:40:9d:fa:4d:b3:11:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=400792ef-7afc-4803-80e7-7580cafe0317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:b8:eb:fb:a5:87:fb:07:2b:27:b0:0d:4a:
                    b2:6d:8a:3c:d7:83:1f:b0:87:73:23:8f:e4:ce:87:
                    51:38:53:b8:ad:c7:7d:89:c4:2c:53:87:78:45:0d:
                    47:02:18:4f:4d:f9:62:93:95:33:12:b1:b2:77:dc:
                    80:9c:3f:70:b0:9f:61:85:a5:e4:32:7b:3a:5b:7d:
                    4f:4c:a1:c6:3b:d0:cf:bb:83:fb:a3:8c:4f:03:0f:
                    bd:11:dd:a6:40:71:7a:51:70:1d:5a:1f:90:2b:ae:
                    07:1e:b7:29:ba:89:95:7d:b1:dd:48:df:48:d1:2a:
                    d3:1f:80:e0:46:70:82:ea:39:06:1d:0b:1f:03:10:
                    06:3a:2d:e4:6c:31:62:50:f9:50:61:3e:a3:ea:2e:
                    24:18:39:54:0b:3d:8e:a5:e6:64:6d:94:27:e3:76:
                    ae:36:22:7e:c9:bc:74:72:4b:0c:b1:16:11:ab:1c:
                    09:b1:9b:71:47:dc:97:32:96:be:1e:cb:79:7a:8e:
                    f3:c8:69:46:51:fc:54:05:bf:71:f5:41:f8:64:26:
                    05:33:cc:4b:b6:b4:a7:0e:a6:09:b9:c2:60:4a:4e:
                    60:78:17:52:c2:79:cb:60:31:48:7c:0e:59:28:32:
                    46:5b:10:28:92:06:36:5f:5c:77:be:6b:19:fc:e1:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B8:32:D4:84:D2:B2:1D:3A:58:C0:21:0D:34:9A:06:92:83:B7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6ea3d598-2986-3e19-91cd-cc291f8a3222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:06:00:eb:3a:93:78:0c:1a:ee:34:03:f4:b7:2c:0b:cc:d3:
         9b:45:ee:5a:2d:a2:7c:b1:d2:66:08:ca:cc:16:ba:c5:38:03:
         4a:c5:3c:19:fd:ee:f9:b0:75:f4:1e:ae:fc:8a:8e:1a:62:15:
         3c:8f:69:24:eb:9b:5f:56:a4:51:b9:84:f8:fb:39:f6:e2:85:
         ff:fa:99:74:9d:96:ae:4e:27:3c:ae:2c:46:35:70:d0:56:02:
         17:70:49:3c:6a:24:80:02:f0:e7:c2:75:01:41:94:3a:15:17:
         13:c8:4e:53:52:76:8c:4b:62:7c:9a:83:1a:86:e3:d2:78:68:
         a0:98:40:de:3c:da:b8:17:64:74:62:6b:5e:ad:f8:d2:10:9e:
         90:7f:b3:7f:cb:81:1d:21:aa:6a:e9:e1:d3:38:91:77:ab:99:
         e0:b8:c8:b3:1b:02:68:6d:43:0d:dd:16:ef:11:cf:12:09:1f:
         06:6c:b6:64:dd:81:a2:a0:09:6c:39:38:f7:f7:a8:2f:2b:b0:
         27:18:2a:04:b0:fc:0d:ba:b1:ab:67:12:80:83:48:50:64:95:
         8a:25:9d:4e:30:e7:8a:7e:58:ff:57:95:a1:1d:c5:d2:3e:0f:
         dc:66:2a:d5:0b:93:96:73:cf:52:90:7b:23:41:18:7b:10:81:
         1d:19:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:00 2025 by rpki-client