Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa
File:                     abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa (raw, json)
Hash identifier:          jy/tA8Q1Leun1zi9+6IRORWiNbe2AC2qvRo3pSlWyYk=
Subject key identifier:   DD:D6:CC:30:36:43:03:37:2A:6E:1F:F5:D1:D5:3A:B9:F8:03:EC:EA
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F43285848573AD8C2520B271E592C99E0
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        199.96.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:d8:c2:52:0b:27:1e:59:2c:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=277f0fdf-49d8-4eca-bf7f-9eb624e543da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fd:4e:7f:8a:34:a4:49:ed:71:38:64:13:ef:
                    55:a1:dc:88:c9:9f:c3:1f:2c:49:81:40:7c:b9:43:
                    0f:96:42:2a:00:23:76:de:e8:73:6a:eb:68:ad:cd:
                    3e:d0:60:e7:08:39:9a:94:71:8e:10:2d:45:da:54:
                    76:9f:0f:56:5c:a3:84:34:b2:2a:33:20:1d:92:d8:
                    1a:39:75:c4:16:07:58:b1:30:0f:db:8a:9b:fa:a9:
                    57:c0:10:68:86:67:55:6a:cf:e1:0a:f7:ac:43:b3:
                    96:3c:64:19:8e:91:cd:d1:2c:f3:43:02:35:a9:1a:
                    0f:25:bf:b5:6d:34:ed:ec:d6:5c:4d:e4:8f:ff:15:
                    e2:bc:ec:5e:6b:58:98:ae:b5:8a:e5:98:0b:3d:34:
                    5a:c3:b3:18:12:1e:f2:6a:7c:b3:4d:dd:42:d1:3c:
                    d0:42:39:6d:b0:41:c3:e3:4c:c3:6b:db:f1:88:ba:
                    85:cd:4e:7e:ac:05:d1:fa:b3:42:87:65:f4:f0:5f:
                    99:ff:b1:64:bd:03:9a:0a:a6:e5:29:73:52:4c:84:
                    a3:63:bc:16:65:03:e1:6e:2e:c7:dc:59:e4:28:f8:
                    95:69:d6:2f:e2:49:7b:23:60:df:1d:01:93:d0:be:
                    1e:d2:92:b2:f1:66:a9:f2:7b:1f:5e:48:c2:ec:f0:
                    61:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D6:CC:30:36:43:03:37:2A:6E:1F:F5:D1:D5:3A:B9:F8:03:EC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:67:d9:71:0a:83:e5:fa:8a:e4:46:cd:c3:87:77:03:7e:98:
         d7:e3:9a:87:9d:ec:38:bb:ec:51:9c:83:11:db:a0:39:a3:54:
         8b:9d:fc:4e:b6:e4:70:b9:20:e8:1d:2e:3d:4c:ab:c6:80:30:
         9e:1d:2b:33:a1:0a:f4:d9:71:24:db:27:9e:1c:48:87:56:b7:
         01:d2:57:36:c3:92:0e:c4:39:f9:db:d8:bf:0f:a6:ac:07:8b:
         94:29:4e:ce:0c:01:5c:db:be:bd:53:6a:ea:c5:4c:55:76:0e:
         39:97:4f:e4:37:43:20:9c:a0:05:9c:3f:1e:80:c6:d7:00:99:
         73:5b:39:ba:1b:10:e7:21:0d:ec:51:aa:4c:db:aa:95:88:e1:
         70:23:68:dc:02:f7:e7:c9:e3:dd:a0:55:73:0f:2b:4d:85:5f:
         4b:de:c1:22:95:eb:1e:ed:06:16:81:9f:3b:c4:6f:b8:ae:ed:
         e3:65:71:a0:ab:ef:c9:19:43:01:9f:c1:16:44:97:f8:22:b6:
         94:2d:c0:27:fd:e5:01:af:d2:fe:16:79:42:5d:59:37:9e:67:
         04:7d:92:5e:ed:fa:4c:19:60:79:c5:49:39:80:97:54:8f:96:
         9a:3f:96:1f:fc:b5:92:11:33:54:f1:33:f8:f1:29:9c:22:63:
         ed:92:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:10 2025 by rpki-client