Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa
File:                     5fab7624-7ba0-38cc-939d-47dd362b1a68.roa (raw, json)
Hash identifier:          4kWL0NmOHWKf4xyvAXEEm7O72EU6m+Ys7k0WHES58q0=
Subject key identifier:   16:DC:20:CE:C6:4B:26:BE:C1:B0:FE:54:E0:44:7A:06:AC:17:3B:03
Certificate issuer:       /CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f
Certificate serial:       010D0C9F43285847F21CC8AE84AA5B0A08105780
Authority key identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa
Signing time:             Wed 20 Nov 2024 20:43:34 +0000
ROA not before:           Wed 20 Nov 2024 20:43:34 +0000
ROA not after:            Tue 18 Feb 2025 20:43:34 +0000
asID:                     376
IP address blocks:        132.209.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:1c:c8:ae:84:aa:5b:0a:08:10:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f
        Validity
            Not Before: Nov 20 20:43:34 2024 GMT
            Not After : Feb 18 20:43:34 2025 GMT
        Subject: CN=c90ac9e1-0186-467e-9001-1a30e426526a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:fa:fa:31:69:3e:42:3d:37:c5:1f:d6:31:
                    2f:17:7e:82:3a:60:69:96:0a:d2:85:85:d9:49:0d:
                    12:e0:b5:ce:e3:e9:e2:b0:af:5e:ca:f5:47:1d:62:
                    5e:f3:b8:b5:02:a4:ea:fb:78:d1:b3:d9:6a:a5:38:
                    40:43:33:83:91:d1:b3:4a:f7:a7:1c:a5:59:f8:8d:
                    66:f7:6d:0a:b7:0c:b9:89:78:58:35:ed:3a:a8:56:
                    7a:f7:5b:c1:50:4e:0e:55:df:40:8f:91:2e:14:2a:
                    53:e7:97:f6:63:73:51:12:bf:d5:99:1f:dd:41:93:
                    88:eb:d6:97:be:24:cb:db:2f:e2:ae:15:62:c0:c5:
                    03:1e:dc:a5:a1:fe:64:72:66:82:6e:c8:ef:9b:6a:
                    17:92:51:9d:12:b4:1e:ad:30:be:e5:15:4a:61:55:
                    73:a6:a1:76:ea:76:14:8e:48:46:67:f7:ef:75:cf:
                    72:fe:56:80:f1:dd:5e:de:1f:30:06:7e:03:09:d9:
                    03:6c:ec:91:91:f6:08:a9:b1:62:25:60:7d:54:ec:
                    b1:33:c1:64:5c:01:0c:c7:d8:92:7a:0e:e1:c1:64:
                    28:9f:41:aa:73:0b:c5:58:e6:de:ca:92:f9:93:bb:
                    47:e3:85:02:ce:9c:f8:0f:27:30:60:18:8e:cf:28:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:20:CE:C6:4B:26:BE:C1:B0:FE:54:E0:44:7A:06:AC:17:3B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8f:bf:65:54:47:4a:f5:20:b5:6f:27:7e:fd:17:bc:a6:e7:
         35:f1:d6:70:1e:4b:87:b5:47:eb:42:5f:65:d5:47:3f:6f:3c:
         03:2f:6d:e2:24:d4:ae:d4:78:4c:43:76:6e:1b:05:8e:54:81:
         9c:d1:4d:76:9c:aa:ac:60:74:8e:01:b7:fe:df:39:a2:6c:6b:
         7f:c6:04:17:82:2f:1b:85:b7:09:d9:da:0b:8c:00:37:1b:a4:
         84:cf:0a:cf:ce:dd:21:ba:45:f8:4d:72:9b:8d:3c:f3:de:5f:
         51:e9:3e:ac:57:60:e7:05:c0:02:3b:b5:80:aa:88:74:04:13:
         f0:c7:4e:0f:c5:63:06:c7:3e:b7:6c:89:1b:5d:cc:1e:40:63:
         74:64:38:b3:4c:13:8c:c2:69:20:a1:2e:94:d3:fd:34:92:58:
         fd:61:bd:9f:06:c5:76:7b:f6:43:0f:8e:94:40:3a:d2:35:b4:
         05:7f:be:a4:f8:97:b1:31:70:b8:f9:6b:52:2c:9f:c9:4c:f2:
         59:06:6f:4d:4c:7d:fc:fe:9e:75:01:9e:41:fa:72:da:e2:50:
         ab:92:b6:66:3a:6d:cc:05:39:06:dd:1f:89:ab:d3:fb:f2:ec:
         e9:98:59:73:4c:37:8f:80:13:ee:b3:b3:1e:32:18:2a:3a:c4:
         1d:30:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:52 2025 by rpki-client