Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa
File:                     ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa (raw, json)
Hash identifier:          CrVl/XidyLQfY8NJWvrg1gmlND0V7VIzNClxATAdj3c=
Subject key identifier:   1C:DE:B8:2A:D6:61:09:5C:08:CC:D5:90:FE:2D:EF:96:3D:8F:CD:EF
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584840BE6CF8B3C7D065BAFE5B18
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa
Signing time:             Thu 19 Dec 2024 00:42:18 +0000
ROA not before:           Thu 19 Dec 2024 00:42:18 +0000
ROA not after:            Tue 18 Mar 2025 23:42:18 +0000
asID:                     834
IP address blocks:        96.43.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:be:6c:f8:b3:c7:d0:65:ba:fe:5b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Dec 19 00:42:18 2024 GMT
            Not After : Mar 18 23:42:18 2025 GMT
        Subject: CN=e1d8c93f-fdd4-44a9-a042-5b1e35e259e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:74:db:e4:8e:dc:96:d2:60:8a:e3:99:8b:
                    e0:a4:05:9f:fa:cb:fb:5a:48:8c:55:a5:d0:7e:0d:
                    72:77:87:6f:6a:17:ae:27:dd:f6:3f:c8:e2:e3:01:
                    42:1e:fc:67:c8:7f:55:84:9b:32:0e:07:e5:c9:dd:
                    aa:4f:6c:c8:df:13:e9:22:a1:fb:ac:15:30:d4:12:
                    56:79:a4:06:27:fe:e8:28:fb:9a:ce:df:d6:28:59:
                    52:ca:36:b5:3e:a0:94:0b:3f:36:18:89:38:e1:a2:
                    64:58:6f:09:6f:61:37:bd:b7:27:44:ac:8a:b2:cc:
                    f0:a1:3c:20:61:6a:30:33:d7:58:03:06:5b:d2:d7:
                    b1:52:f6:07:a8:fa:21:cd:9f:d3:a1:62:19:7c:4a:
                    36:ff:59:06:f5:da:de:dc:a7:83:ac:71:ca:76:4a:
                    2c:1d:be:6e:76:fe:c9:ba:3d:6b:e3:d5:ca:9c:20:
                    ab:92:45:ee:35:f2:78:8f:ba:7b:e0:53:41:4e:8e:
                    5e:3a:ae:6b:63:30:fc:11:a2:72:fe:a8:e8:9f:a3:
                    75:54:c0:0f:b1:e5:b4:ba:62:a6:1d:35:84:50:2a:
                    d1:88:35:82:37:a5:8e:bd:f7:64:b3:86:a6:7f:ce:
                    c8:a1:52:e5:5a:16:87:a0:d7:c9:eb:25:ca:45:95:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:B8:2A:D6:61:09:5C:08:CC:D5:90:FE:2D:EF:96:3D:8F:CD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:60:ff:2d:86:c5:52:23:ee:12:58:c2:f6:51:33:d9:ae:f2:
         98:e0:b9:0e:2a:de:8b:5f:94:e8:2a:ab:53:25:88:76:ab:ea:
         a1:ca:35:e2:7f:fe:1a:44:a3:73:14:9e:2f:90:53:14:24:75:
         1b:2d:70:d2:01:96:f1:1a:94:0b:2a:39:59:1e:79:4a:1f:33:
         89:77:2b:10:28:e6:a6:94:0f:2d:6c:ac:90:ce:85:9e:7f:38:
         67:d2:97:ac:76:b5:a5:68:2d:28:02:c1:48:4a:2f:b2:3c:21:
         99:99:55:b0:e8:e8:2e:2a:10:6b:cb:29:0e:7a:1e:71:e8:3d:
         86:e5:fd:c6:27:f5:9d:8e:c0:b2:9a:97:d0:d5:37:bc:d0:53:
         dd:4e:6c:1a:8d:b5:d0:b0:4d:6f:6f:05:7a:c6:0e:37:7c:f4:
         c2:13:33:87:99:d4:9a:6a:ea:79:28:ac:65:af:13:36:21:ff:
         8b:b0:66:7d:8c:a2:b7:2c:34:76:d9:e2:5f:96:22:a5:3a:08:
         28:f3:34:eb:ca:04:26:9c:48:0e:27:89:1c:05:b0:8f:54:55:
         7c:be:b1:0e:80:58:44:f4:b5:92:80:3a:33:20:94:3e:c8:1d:
         f9:2a:ba:80:5e:30:28:fe:72:3d:2a:80:97:b3:b7:f7:09:6d:
         b4:19:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:50:02 2025 by rpki-client