Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92bbde1b-81fe-46d3-9bc4-a0756fdcb031/9e6fcf8c-6af3-34f0-a424-246b9a5b3210.roa
File:                     9e6fcf8c-6af3-34f0-a424-246b9a5b3210.roa (raw, json)
Hash identifier:          9M1t1jolzvaUzPd2kSyD5iVmgURaRXku5kuG0lYVV/8=
Subject key identifier:   BE:1F:23:77:F9:6D:3D:32:7E:4B:18:B6:3D:F0:5C:FE:75:82:6E:C3
Certificate issuer:       /CN=92bbde1b-81fe-46d3-9bc4-a0756fdcb031
Certificate serial:       010D0C9F43285848159FFD0D6DA9A430643AC7C0
Authority key identifier: AA:DE:72:C5:86:A7:21:9C:24:F9:ED:33:DF:52:6E:6C:16:F0:40:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92bbde1b-81fe-46d3-9bc4-a0756fdcb031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92bbde1b-81fe-46d3-9bc4-a0756fdcb031/9e6fcf8c-6af3-34f0-a424-246b9a5b3210.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     11054
IP address blocks:        199.187.116.0/22 maxlen: 22
                          199.187.116.0/24 maxlen: 24
                          199.187.117.0/24 maxlen: 24
                          199.187.118.0/24 maxlen: 24
                          199.187.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:fd:0d:6d:a9:a4:30:64:3a:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bbde1b-81fe-46d3-9bc4-a0756fdcb031
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=91d9e506-0908-451e-8414-7f8546ad5d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ab:53:d5:2d:58:2a:ac:fe:fe:ae:0a:f0:55:
                    f5:ba:11:44:2b:74:7b:b8:ab:7f:97:05:29:73:65:
                    a4:66:a2:fd:39:f4:f7:eb:9a:e8:48:f4:03:3c:09:
                    4c:9f:a4:88:d3:9a:91:07:ef:2f:ef:bf:52:6e:57:
                    53:cc:09:bc:3a:c2:ba:6b:94:ea:80:64:76:01:16:
                    4d:4b:cc:38:ce:9a:f2:f0:3b:4b:0e:21:f4:92:0a:
                    5c:de:5c:62:70:fd:8b:53:8f:d7:71:f5:41:b9:b7:
                    82:24:40:ba:50:74:53:36:e1:94:78:4b:c2:a0:92:
                    f3:08:f4:9c:c8:6e:e8:af:a3:ef:70:e4:6c:52:43:
                    ce:4c:7b:df:26:11:89:b8:a0:1b:d9:2e:84:ff:fe:
                    f9:78:0f:26:1f:d2:9c:2f:0e:92:17:66:b5:26:ba:
                    81:a5:25:59:77:9d:fe:16:29:7d:78:40:67:85:52:
                    87:c5:d3:ee:b7:bc:12:27:2b:ad:03:e7:a7:7a:c3:
                    ab:61:ce:a9:9f:de:83:d3:66:7d:8c:f2:d2:39:37:
                    d0:98:8d:02:9f:fd:f2:a0:50:29:e7:64:40:86:b7:
                    4c:7e:38:f6:48:e2:d1:06:c2:65:c7:d4:65:af:de:
                    44:c8:b7:a8:37:5d:7c:56:11:1f:41:ac:d9:83:82:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1F:23:77:F9:6D:3D:32:7E:4B:18:B6:3D:F0:5C:FE:75:82:6E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92bbde1b-81fe-46d3-9bc4-a0756fdcb031/9e6fcf8c-6af3-34f0-a424-246b9a5b3210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92bbde1b-81fe-46d3-9bc4-a0756fdcb031/92bbde1b-81fe-46d3-9bc4-a0756fdcb031.crl

            X509v3 Authority Key Identifier:
                keyid:AA:DE:72:C5:86:A7:21:9C:24:F9:ED:33:DF:52:6E:6C:16:F0:40:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92bbde1b-81fe-46d3-9bc4-a0756fdcb031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e5:68:48:6d:56:29:a5:7a:15:29:b4:f9:ae:de:26:c0:f2:
         c2:64:b3:9d:4b:48:e1:a1:a0:91:a4:39:0a:c3:3c:9d:0c:ad:
         7a:a5:4a:9a:91:b8:4f:41:49:93:57:cb:0d:a3:79:11:7c:0e:
         1f:54:27:5f:5d:2c:92:18:ff:38:b7:9e:18:37:2e:01:eb:d6:
         ac:28:82:d8:5e:59:a4:1e:ca:82:a5:33:af:b4:29:36:94:92:
         a2:63:71:0b:ce:e6:e1:37:98:74:62:9b:e8:30:25:7e:c1:28:
         28:af:f3:38:46:24:a4:2f:29:4e:45:99:97:a1:b2:28:bf:19:
         0c:4a:f7:65:16:6b:7c:ab:34:f6:d8:d0:b9:f0:28:30:d0:02:
         2a:e1:81:7b:ea:e1:a5:8e:ff:26:d2:37:9a:d5:56:9f:79:f4:
         93:ba:4d:91:83:cd:87:c6:35:3a:95:7f:7b:de:10:be:b2:d0:
         4a:8a:5f:00:ca:56:2d:2b:3f:db:68:2b:10:40:22:d5:c6:f6:
         5c:3a:f3:02:95:f4:d4:6c:f9:eb:3c:c6:25:7c:53:db:1e:f6:
         b9:89:41:9b:16:00:34:d3:9f:f9:87:8f:3a:97:dd:f6:2f:55:
         d6:13:fb:00:32:ec:f4:a4:04:22:51:d4:60:d8:a9:80:cb:3e:
         e2:5b:dd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:56:34 2025 by rpki-client