Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/776bb6fe-5cc0-3484-9f6e-0e65eff366e4.roa
File:                     776bb6fe-5cc0-3484-9f6e-0e65eff366e4.roa (raw, json)
Hash identifier:          Kpy7CRwAobMd6CZ4tJqJSQLX8IPZK/Aro4Uc4ywOZys=
Subject key identifier:   69:09:F1:FC:9F:BF:CB:FC:A3:8B:4F:F9:56:0F:0D:E2:44:2D:A0:FE
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285848617C3C41261E8D9149A27980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/776bb6fe-5cc0-3484-9f6e-0e65eff366e4.roa
Signing time:             Mon 30 Dec 2024 18:10:37 +0000
ROA not before:           Mon 30 Dec 2024 18:10:37 +0000
ROA not after:            Sun 30 Mar 2025 17:10:37 +0000
asID:                     81
IP address blocks:        198.86.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:7c:3c:41:26:1e:8d:91:49:a2:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Dec 30 18:10:37 2024 GMT
            Not After : Mar 30 17:10:37 2025 GMT
        Subject: CN=050adbea-82a3-41e1-ad46-9f15b7398d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:7c:2a:ca:95:0d:2a:a7:94:93:a3:92:56:
                    b4:b4:36:72:e0:0d:cf:ce:83:f0:6a:40:ec:c8:80:
                    ad:25:c0:68:37:6b:1b:0f:bc:b7:3d:24:e6:98:44:
                    5b:1f:3c:6b:0e:f1:8b:e0:0c:48:ce:20:c0:87:d1:
                    9e:b4:4e:f3:e0:42:31:ae:05:0d:c9:bc:b0:5a:36:
                    fc:88:58:30:44:49:95:5b:37:c0:42:05:81:d4:7d:
                    d5:9c:34:fd:0a:3f:e7:fc:41:0c:ea:b0:79:c4:8f:
                    ea:3c:af:72:a6:d1:a4:01:1e:f3:00:fc:36:f5:3f:
                    be:36:2a:0f:37:0b:64:bf:75:47:88:aa:69:10:e0:
                    56:76:f0:62:34:18:75:88:40:1e:97:f8:b1:dc:72:
                    cd:31:58:5d:21:6e:84:8e:e4:e6:c8:3e:99:2b:79:
                    74:d1:f1:d7:fe:8e:4c:fa:9f:31:e7:3b:55:58:69:
                    25:90:1b:f7:ec:07:f4:82:b6:b9:16:bf:85:7d:53:
                    1f:74:03:5e:e3:ef:7c:fe:83:17:a6:69:ca:c6:51:
                    94:14:d2:ab:b4:69:1b:eb:32:4f:a7:31:da:dd:3f:
                    b9:e5:ad:a2:7f:75:fc:45:70:b0:71:b2:0a:79:34:
                    38:23:78:bb:38:8d:d7:7b:67:27:1b:4f:86:14:e3:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:09:F1:FC:9F:BF:CB:FC:A3:8B:4F:F9:56:0F:0D:E2:44:2D:A0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/776bb6fe-5cc0-3484-9f6e-0e65eff366e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:74:04:8a:0a:de:d2:f2:1e:85:0e:94:9a:6f:7a:ba:f6:21:
         22:82:6f:b1:6d:88:62:85:8d:2b:79:4a:ae:a6:ae:c5:2b:d3:
         78:28:29:77:be:90:f6:66:61:2a:b0:2f:55:c6:59:34:7b:99:
         a0:a5:99:da:f7:fd:bc:47:87:0f:1e:d0:87:b8:3d:30:7a:4d:
         a3:7c:5a:88:e5:01:0a:0c:8f:b1:b2:4d:2b:12:b8:c8:e5:0d:
         47:6b:80:6b:47:9c:46:b7:84:ec:68:55:a1:c8:36:1b:b2:ee:
         f6:e0:76:e9:51:e3:37:e7:ea:9f:76:1d:dd:7d:f5:f9:d9:2d:
         dc:7c:1b:f4:51:67:44:1b:4a:8e:30:56:b2:f8:e8:25:f2:e3:
         42:db:07:14:84:c2:c2:c2:96:11:96:77:cb:fe:fd:08:0a:eb:
         47:f0:03:58:62:18:66:bd:1c:57:b3:5a:ba:87:9e:42:b6:dd:
         bb:7d:e6:65:a8:17:e1:d0:7c:b7:fd:c9:03:fa:25:d5:bd:bb:
         2f:ab:f7:f5:ca:6b:68:74:4b:39:53:cd:48:64:1e:1c:d2:5f:
         ff:5b:dd:2e:88:99:c0:ef:c2:6d:d3:c1:5f:8a:0b:20:26:8d:
         d8:1c:42:37:e7:d1:fd:3a:b3:15:08:3c:e9:7d:bf:ca:da:9b:
         83:ee:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:16:53 2025 by rpki-client