Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa
File:                     d883bae7-3067-34d2-b612-d4b17b17fb12.roa (raw, json)
Hash identifier:          Pbpd6aURIOZJSiD8nubRfns7EM39SwehozzNKnU5HBs=
Subject key identifier:   C1:36:72:B8:F4:1D:03:3F:59:2F:08:7B:4B:40:D5:14:3A:26:D1:BF
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285847E8F4CC02BECE71022882CF60
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     16509
IP address blocks:        168.225.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cc:02:be:ce:71:02:28:82:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=7f725323-5538-47a2-a133-28bdcca46931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:f5:7e:a0:2b:ba:55:4d:d2:80:0e:2c:9d:
                    d3:3b:c2:80:36:51:12:98:7c:e4:eb:1f:e1:b4:90:
                    a6:a6:f7:39:f3:ba:bf:28:d8:20:0b:ef:f8:67:cc:
                    b1:6b:b3:c7:86:53:eb:49:b0:d3:ac:88:3a:d4:56:
                    2a:3b:b2:21:74:ee:cc:69:29:28:51:ac:66:92:cd:
                    4b:ff:73:74:ce:39:5b:9b:8e:19:47:b5:5c:ff:92:
                    41:11:b4:9f:f8:c3:c7:ab:37:b5:c2:49:38:e7:fd:
                    2f:86:f6:86:fd:dd:75:4e:67:fd:fd:7f:b3:ec:f7:
                    80:1b:65:76:25:22:20:84:dc:96:39:42:8b:88:20:
                    24:fc:5d:c6:f5:1a:a4:bd:61:a4:b4:43:6a:20:3e:
                    ba:75:da:a2:39:48:4b:87:5c:f8:2b:b9:c9:70:20:
                    5a:b0:98:3b:da:28:11:1b:21:8a:35:3c:6d:fe:a3:
                    88:4e:b5:ca:aa:c1:e4:09:5e:98:7f:bd:03:a2:12:
                    24:38:23:7c:76:0b:fd:92:37:60:91:c7:4b:14:b4:
                    1f:a0:57:c9:95:4c:8c:d6:c8:59:c3:65:f5:61:bb:
                    f9:73:c1:6b:7d:49:69:7f:92:de:57:df:a0:45:a7:
                    32:2a:25:25:0a:f8:1d:79:72:97:67:c0:55:d2:d9:
                    1f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:36:72:B8:F4:1D:03:3F:59:2F:08:7B:4B:40:D5:14:3A:26:D1:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:86:00:95:ba:ef:ce:23:3e:4f:d0:33:33:90:69:3c:1c:56:
         6c:5c:1c:27:b7:4f:50:e9:a5:f7:bd:94:1d:12:7c:c7:d9:dc:
         33:9b:e7:df:40:d0:69:26:df:20:7d:0a:99:f5:0e:60:df:2f:
         c8:98:90:51:ae:80:f0:6e:03:46:11:8a:ff:7d:79:da:85:f4:
         33:16:f8:7a:3f:80:15:59:6a:0a:ef:f6:c8:24:2a:a4:1c:a9:
         64:47:21:02:16:f9:61:f0:65:8b:ec:91:70:0b:3f:ad:0f:03:
         75:8e:e5:5d:06:71:68:32:d8:d9:73:f9:a7:86:48:10:08:ea:
         c5:fc:ba:26:a0:13:e7:3c:7b:5f:59:17:33:2b:bf:20:4e:86:
         70:22:22:5d:ef:e1:2e:c7:7d:60:c8:02:ae:68:f8:02:f4:df:
         53:84:e4:31:40:5b:68:e6:a1:ee:f0:c9:74:bc:c5:8d:ce:fd:
         e5:c3:a4:1c:97:28:5d:80:92:1e:42:ab:39:09:d9:c8:b9:8e:
         bf:fc:0a:a4:92:2b:b4:2c:54:1b:12:88:a4:5e:69:0c:3e:08:
         99:20:6a:f3:3d:86:14:36:19:aa:c2:e2:c4:6e:64:23:e5:49:
         1d:9f:89:03:32:60:a4:dc:7a:94:b9:db:14:f3:1a:cf:48:ff:
         e1:7f:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:50 2025 by rpki-client